last executing test programs: 1m28.402398187s ago: executing program 0 (id=2925): r0 = syz_usb_connect$hid(0x0, 0xfffffffffffffef9, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xffffffff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x10001}]}}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x7fffffff, 0x4) recvmmsg(r3, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004040)}, 0x1}, {{0x0, 0x0, &(0x7f0000004780)}, 0xb6600000}, {{0x0, 0x0, 0x0}, 0x1000}, {{&(0x7f0000004d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000005400)=[{0x0}, {&(0x7f00000050c0)=""/235, 0xeb}, {&(0x7f0000005680)=""/87, 0x57}], 0x3}, 0x8}], 0x4, 0x40010022, 0x0) bind$netlink(r3, &(0x7f0000000140), 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14140000212000002c0012800c0001006d6163766c616e001c0002800800010010000000080007007df0ffff080003000200000008000500", @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0xfffffffffffffef9, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xffffffff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x10001}]}}]}, 0x40}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x7fffffff, 0x4) (async) recvmmsg(r3, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004040)}, 0x1}, {{0x0, 0x0, &(0x7f0000004780)}, 0xb6600000}, {{0x0, 0x0, 0x0}, 0x1000}, {{&(0x7f0000004d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000005400)=[{0x0}, {&(0x7f00000050c0)=""/235, 0xeb}, {&(0x7f0000005680)=""/87, 0x57}], 0x3}, 0x8}], 0x4, 0x40010022, 0x0) (async) bind$netlink(r3, &(0x7f0000000140), 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14140000212000002c0012800c0001006d6163766c616e001c0002800800010010000000080007007df0ffff080003000200000008000500", @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 1m25.332992658s ago: executing program 0 (id=2937): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) (async) bind$xdp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d80)={@cgroup, 0xffffffffffffffff, 0xb, 0x68}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$uinput(0xffffffffffffff9c, &(0x7f0000001dc0), 0x2, 0x0) (async) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f0000001e00)={0x1, {0x1, 0x9, 0x200, 0xfff, 0x8001, 0x3}}) (async) ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f0000001e00)={0x1, {0x1, 0x9, 0x200, 0xfff, 0x8001, 0x3}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r7, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000300)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x43, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000680)={r7, 0x0, 0x25, 0x1, @val=@tracing={r9, 0x7}}, 0x20) (async) r10 = bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000680)={r7, 0x0, 0x25, 0x1, @val=@tracing={r9, 0x7}}, 0x20) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r3, r10, &(0x7f00000001c0)=0xbf9b, 0x6) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0xe8, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_USERDATA={0xd2, 0x6, "6858d624d788ff150c5a0e1c09146b6cabc23be7ce0270a08952732edfefa56b9449cb294d99ac8cbacb7dc9855510c9bdb29c7d805064cc94beecb3cc9d3ff6cd0c28280641f36286cde90dd773055ac59fecc2d6b762a090b5b92214b2fcf2cca1a6178c4e9f79c1a61fd71a77c31a2d0f7def35d57e7ff2bf8e62e4f624e93fa27bf3ac7812040bb3e9ba219300db29cdcb0dd23372166268bd48061925fa8f1de00da7346c8ab181a360810590a672768f5f232f4b072992c2ff0db53d24f46b53bf198f94c008c374daee4d"}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1b8}}, 0x0) 1m24.21945775s ago: executing program 0 (id=2946): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x8000000000000000}) openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x40040, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000005c0)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x68}], 0x12) 1m24.114988448s ago: executing program 0 (id=2948): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000680)={0x0, 0x3}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d30305b3030c58d0f34207ee9f53030301e3034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 1m23.099899675s ago: executing program 0 (id=2956): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) close(0x3) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000000)=0x7f, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private=0xa010102, @in6=@private1, 0x4e21, 0x2, 0x4e22, 0xfffe, 0x2, 0x0, 0x40, 0x8}, {0xffffffff, 0x8, 0x8, 0x2, 0x0, 0x0, 0x8, 0x7fffffffffffffff}, {0x4, 0x9, 0x3, 0x8}, 0xafb, 0x0, 0x0, 0xc238b7f6ae497b0c, 0x2, 0x1}, {{@in=@private=0xa010100, 0x4d2, 0x2b}, 0x2, @in6=@loopback, 0x3502, 0x2, 0x2, 0x4, 0x38, 0x2, 0x9}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x80) 1m22.759571058s ago: executing program 0 (id=2957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0), 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r5, 0xffffffffffffffff, 0x0) 1m22.559543156s ago: executing program 32 (id=2957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0), 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r5, 0xffffffffffffffff, 0x0) 10.75298817s ago: executing program 2 (id=3272): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)={0x20, 0x11, 0x0, 0x101, 0x0, 0x25dfdbfe, {0x5}, [@typed={0x8, 0xc7, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0xe8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 10.632383756s ago: executing program 2 (id=3273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000c00) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x7ff, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f0000000240), {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) syz_open_dev$vim2m(0x0, 0x2c, 0x2) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) socket$kcm(0xa, 0x0, 0x0) r4 = syz_pidfd_open(0x0, 0x0) setns(r4, 0x24020000) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x80800) 8.291508054s ago: executing program 2 (id=3288): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x80000, 0xfffffffb) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000100)={'raw\x00', 0x2, [{}, {}]}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000007c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x2, 0x40800000000000, 0x800000000000000}}, [@algo_comp={0x0, 0x3, {{'deflate\x00'}, 0x0, "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"}}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x10000000, 0x0, 0x32315559, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r7 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pread64(r7, &(0x7f00000003c0)=""/159, 0x9f, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bind$tipc(r3, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 8.099926646s ago: executing program 4 (id=3291): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40182, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, r0, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002e00090027bd700000000000040000003aacef339abe4fa497f46024d2405090790f6190d3811fc006d9220822a1a86aec7664552db212f157d83e33b2ac8570db0fc406203911ab65145f6283a22793b10a5eca53828c7eea68f94bbb610f67280aa17001e46d5d6ebe06f470e3ee2c7d24a765c6ffc07d10d7b04fae9882193c4761b407063a391b338af81f96bb4a943e9473407fc42566b67bf9dce6fb705cd86692e12c2b96e9139335"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x3ebe82, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r7, &(0x7f0000000540)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{}, 0x2}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 6.651807838s ago: executing program 2 (id=3297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) symlinkat(&(0x7f0000005500)='./file0\x00', 0xffffffffffffff9c, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = epoll_create1(0x80000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xe000001a}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$kcm(0x2, 0x200000000000001, 0x0) (async) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) unshare(0x6020400) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffe78}, 0x3000c085) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x1, 0x0) (async) socket$kcm(0x11, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002680)=@newtclass={0x48, 0x28, 0x4, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x9, 0x9}, {0xa, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xfe, 0x7}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x5, 0x78}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40810}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002680)=@newtclass={0x48, 0x28, 0x4, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x9, 0x9}, {0xa, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xfe, 0x7}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x5, 0x78}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40810}, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) write$UHID_INPUT(r11, &(0x7f0000001480)={0x8, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r11, &(0x7f0000001480)={0x8, {"a2e3ad214fc752f91b5d30f70b06d038e7ff7fc6e5539b385d098b089b3b08381a090890e0878f0e1ac6e7049b3344959b609a240c872adb988f7e0319520100ffe8d178708c523c921b1b5b31360d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08c4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e800ba9abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40d4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889632b3570243f989cce3803f465e41e610c2021d653a5520094ec79553299388b0000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a72eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c2d88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b19bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0545359bafffa452370000000010403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae2d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e709000000000000004fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83000000000000010058b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff7544130700000000000000f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc6c71737b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b93903000000000000001c953fcad6f37525c1a0e94610dda3323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f9354b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c558069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae0000000000000007eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c73144f8e4a737afae5136651b1b9bd522d6039947329710309d83fdd9d8b4ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c10613d17ca51075f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb401000000608d6f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655bff4801784c416b22f73d32d678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d7000bdbfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d6245939241a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f4820000000000000900a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78cd7d79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2e0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77900b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15f2dbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af500ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000eeffffffffffffff00000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000002600)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000002600)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 6.156603552s ago: executing program 4 (id=3299): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) (async) fcntl$setflags(r1, 0x2, 0x1) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) (async, rerun: 64) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r6, &(0x7f0000005740)=[{&(0x7f0000000280)='\n)', 0x2}], 0x1) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) (async, rerun: 32) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) (async) close_range(r1, r3, 0x0) 5.935481823s ago: executing program 4 (id=3300): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000200)="ac0c775772090000000000000061266339ab5c3d2d74627245ba39e20ad20ca53e83e21f5bc3b802a7cbb25c5cc253bede2a7c57f070af1db90d9a601c241860e0222d5f1a00ef2028b41859cd12c43095ed5949c53e3b2fad7fdd1378d7df1efe3dc710d6d279ebc6976dfa1435d22c4177f0831cb5308cd3766dcc1578f94fca9574a7be424a34e1c4b33a2d6cd263996095294f1b99d2e57120e134b41a82c1d3038f83e8ac8cbff754383ec7a50ce1bd519af6b9da20", 0xfea0}) close(r0) fsopen(&(0x7f0000000000)='pvfs2\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2a020400) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x8, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, &(0x7f0000000100)={0x2, 0x661}) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYRES8=r5, @ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYBLOB="07b0cf7e2c89cc", @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES8=r3, @ANYRESHEX, @ANYRES16=r1], 0x0) 5.69911373s ago: executing program 2 (id=3303): ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000540)={0x0, 0x1, 0x0, &(0x7f0000000100)=[{}], 0x6, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000004c0)=[{0x0, 0x80000000}], 0x1, 0x0, &(0x7f0000000500)=[{}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000740)={r0, &(0x7f00000005c0), &(0x7f0000000600)}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000008450c0b760000000000010902240001000000040903ef1002030006000921fcff00012229000905810300000809fc"], 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r3, r2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000006c0)={0xa4}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfc}], 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a4, &(0x7f0000000000)={{@any, 0xffffffff}, @hyper, 0x0, 0x0, 0x4000000f8, 0x9, 0x0, 0x4000000, 0x7}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000306b240c50f27128eda0102030109021200010000000009"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xfffffffffffffffe}]}}}]}, 0x4c}}, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) 5.539388127s ago: executing program 1 (id=3304): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x3a, 0x0, 0xfffffffffffffffc}]}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) (async) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async, rerun: 32) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) (rerun: 32) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) (async) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000180)={0x0, 0x7}) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 5.290733113s ago: executing program 1 (id=3305): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)={0x1c, 0x11, 0x0, 0x101, 0x0, 0x25dfdbfe, {0x5}, [@nested={0x8, 0xe8, 0x0, 0x1, [@nested={0x4, 0x43}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.229264274s ago: executing program 1 (id=3306): socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x1a3000) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_usb_connect(0x3, 0x48, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109023600010000000009040000040de67a0009050300000400000009050000ebff09030509050402d08fb68d0009058102"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_ep_write(r2, 0x81, 0x13, &(0x7f0000001180)="22c4e79fb3000000000000000000f7b3000000") inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r7, @ANYRES16=r0], 0x0) 2.843911089s ago: executing program 3 (id=3317): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000020000000000000600000000060015000100000018001677a60001008011"], 0x3c}, 0x1, 0x0, 0x0, 0x4004044}, 0x91) 2.836037443s ago: executing program 4 (id=3318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='system.sockprotoname\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000006400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000daffffff", @ANYRES64=r1], 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x1, 0x9, 0x3007, 0x0, 0xd, 0x0, 0x3, 0x6}}) syz_genetlink_get_family_id$batadv(0x0, r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 2.788840001s ago: executing program 3 (id=3319): syz_emit_ethernet(0x7a, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x200}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x0, 0x1}}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaa450000300000000000019078e336d502ac1414aa0305907803000600450000000000000008890000ffffffffe0000002000000000000000000"], 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c009900fb"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000200)={0x2, 0x4e1f, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000700)="10", 0x1}, {0x0}], 0x2}, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x80, 0x40, 0xffff0000, 0x0, {{0x6, 0x4, 0x1, 0x1, 0x18, 0x67, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1, {[@end]}}}}}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x30, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010001}, 0x880) (async) socket$l2tp(0x2, 0x2, 0x73) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000900)={0x0, 0x6}, &(0x7f0000000940)=0x8) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') fchdir(r4) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000002140)='./file0\x00', 0x0, 0x2000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x3}]}, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f00000005c0)={0x0, 0x1, @start={0x9}}) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x501040, 0x0) close_range(r6, r6, 0x2) syz_clone3(&(0x7f00000000c0)={0x20802000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3a4c}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x800) 2.718677265s ago: executing program 3 (id=3320): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x62}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x40004}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.619849057s ago: executing program 5 (id=3321): syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000440)) pread64(r0, 0x0, 0x0, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x9f08, 0x4000, 0x2, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x73) recvmmsg$unix(r2, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0) 2.589840164s ago: executing program 2 (id=3322): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x48000) close(r2) syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000340)={0x4, 0x0, [{0x40000000, 0x10001, 0x4, 0x80000001, 0x6, 0x6, 0x376}, {0x40000000, 0x7, 0x3, 0x0, 0x1, 0x2, 0x4}, {0xc0000000, 0x7, 0x6, 0x8, 0x0, 0x9, 0x8}, {0x4, 0x2, 0x2, 0x5, 0x4, 0x4, 0x401}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000140)={@remote, 0x1, 0x0, 0x20, 0x0, [{@remote}, {@local}]}}) socket(0x2c, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000400007070000000000000000037c000004009c80060001"], 0x20}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$alg(0x26, 0x5, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37f}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) 2.536060733s ago: executing program 3 (id=3323): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) sendmmsg$inet(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x6}}, 0x20) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @local}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x5}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 2.37184214s ago: executing program 3 (id=3324): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe", 0x1a}], 0x1}, 0x4080044) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000700)={0x0, &(0x7f0000000200)=[@wr_drn={0x68, 0x20, {0x0, 0x8}}, @uexit={0x0, 0x18, 0x2}, @set_irq_handler={0xc8, 0x20, {0x8, 0x1}}, @set_irq_handler={0xc8, 0x20, {0xeb, 0x2}}, @wrmsr={0x65, 0x20, {0xc0000103, 0x3}}, @rdmsr={0x66, 0x18, {0xafb}}, @rdmsr={0x66, 0x18, {0x648}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xc5, 0x7, 0x0, 0x1}}, @nested_amd_vmload={0x182, 0x18}, @wr_drn={0x68, 0x20, {0x5, 0x81}}, @nested_amd_vmload={0x182, 0x18}, @cpuid={0x64, 0x18, {0x8}}, @nested_load_syzos={0x136, 0x78, {0x2, 0x72, [@set_irq_handler={0xc8, 0x20, {0x49, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest32=0x4814, 0xffffffffffffffff, 0xfffffffffffffff9, 0xd3f}}]}}, @wr_drn={0x68, 0x20, {0x3, 0x80000000}}, @wr_crn={0x67, 0x20, {0x3, 0x6}}, @wr_crn={0x67, 0x20, {0x4, 0x10001}}, @nested_vmresume={0x130, 0x18, 0x1}, @wrmsr={0x65, 0x20, {0x40000096, 0x4}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x4d2, 0x2, 0xfa4a, 0xffffffff80000001}}, @nested_load_code={0x12e, 0x54, {0x0, "650f38f14280420fa1b9800000c00f3235001000000f30480fc79803000000410f01925145f231410f01d146f67e04de5a35440f300fc71dd79271e4"}}, @nested_load_code={0x12e, 0x75, {0x2, "430f38ca0266baf80cb888e6ef82ef66bafc0c66ed360f07c74424005a000000c74424020001c0feff2c24b9800000c00f3235000800000f30410f9dfcc402fd352fb805000000b98e0000000f01c1c421fd10a000100000c44299b819"}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x8f, 0x5, 0x7}}, @rdmsr={0x66, 0x18, {0x333}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x71, 0x2, 0x7fffffff, 0x2}}, @rdmsr={0x66, 0x18, {0x30d}}, @nested_amd_vmload={0x182, 0x18}, @wr_drn={0x68, 0x20, {0x7, 0x3}}], 0x4c9}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.920282488s ago: executing program 4 (id=3325): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffff}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c000000100021ff2abd7000fddbdf2500000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1a8e44907f7e0700000000000000cc3e6b17c6dbabe3b5703e60bf", @ANYRES64=r1, @ANYRES16=r0, @ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x200000, 0x17c) sendmsg$nl_generic(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={0x0, 0x214}, 0x1, 0x0, 0x0, 0x4844}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') quotactl_fd$Q_GETNEXTQUOTA(r8, 0xffffffff80000900, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) 1.756782955s ago: executing program 5 (id=3326): syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x50) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000002060108000000050000000000050001000700000005000400000000002300020073797a3200"/56], 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.344354283s ago: executing program 1 (id=3327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff82}, {0x7d80dd10, 0x6, 0x78, 0x4, 0x6, 0x0, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r7, 0x4003e}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="a2", 0x5dc}], 0x1}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x4f, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a30000000180a05000000000000000000020001000c00054000000000000000020900010073797a30000000000400038020000000000a03000000000000000000010000080c00044000000000000000040c0100000b0a010400000000000000000500000308000640000000000800044000000002000009800000014000000003000001400000000300000100000001800000014000000000000001400000008100000140000085fe0000014000000000000001800000014000000006000001400000000b0000014000000fff0000fdf2000000000000018000000140fffffffb0000014000000e730000028000000180000001400000800000000140004010000000014000000004000001400000000d140000001100010000000000000000000000000a"], 0x184}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) r8 = fsopen(&(0x7f0000000240)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r10, 0x84, 0x19, &(0x7f00000000c0)={r11, 0x160}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r11, 0x202}, &(0x7f0000000180)=0xc) connect$tipc(r9, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r9, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000056c0)}}], 0x1, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000080)=0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.34113757s ago: executing program 1 (id=3328): write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x240080d5}, 0x24044040) io_setup(0x8, &(0x7f0000000540)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000080)="01fd0000fe", 0x5, 0x2a25}]) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x68, 0x10, 0x439, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 1.195377903s ago: executing program 1 (id=3329): syz_usb_connect$uac1(0x2, 0xa2, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109029000000001020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000050054b57f1cd27cba"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) 595.463602ms ago: executing program 4 (id=3330): socket$inet6(0xa, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) r1 = dup(0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) fcntl$notify(r4, 0x402, 0x7) sched_setattr(0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) syz_io_uring_setup(0x400f00, &(0x7f0000000080)={0x0, 0x5922, 0x10000, 0x1, 0x3cc, 0x0, 0x0}, 0x0, 0x0, &(0x7f0000000000)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) 419.176928ms ago: executing program 5 (id=3331): accept(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000004980)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xe, 0x100, 0x3, 0x6, 0x1, 0x6, 0x4, 0x0, 0x9, 0xfffffffe, 0x7, 0x0, 0x2, 0x1, 0x0, 0x4, 0x101, 0x4efe7ab2, 0x6, 0x6, 0x5, 0x2, 0x2}}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000002080), 0x20000, 0x0) readv(r1, &(0x7f0000004700)=[{0x0}, {&(0x7f0000004440)=""/29, 0x1d}], 0x2) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, 0x0, 0x41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f0000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000001240)={{0x100000, 0xc000, 0x0, 0x7, 0x8, 0x41, 0x0, 0x3, 0x0, 0x8, 0x6, 0x1}, {0xffff1000, 0x100000, 0xc, 0x0, 0x2, 0x0, 0xfc, 0xfe, 0x2, 0xff}, {0x1000, 0x8080000, 0x3, 0x0, 0x7, 0x35, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xdddd0000, 0xdddd0000, 0x18592cbc7c573fcc, 0x9, 0x55, 0x5, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xd, 0x2d, 0xfd, 0x4, 0x0, 0x0, 0x0, 0x3c, 0x8}, {0x3000, 0x0, 0xb, 0x78, 0x6, 0x4, 0x9, 0x0, 0x0, 0xff, 0x5}, {0x0, 0xeeee0000, 0x4, 0x4, 0x0, 0x0, 0xa1, 0x8, 0xfc, 0x0, 0x8}, {0x8080000, 0xd000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x22, 0x26, 0x0, 0x0, 0x1}, {0xdddd1000, 0x2}, {0xdddd1000}, 0x0, 0x0, 0x0, 0x110, 0x2, 0xf801, 0x0, [0x80000001, 0x0, 0x5, 0x1]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x10000086, 0x0, 0x2, @discrete={0x1, 0xfffffe2c}}) 254.095532ms ago: executing program 3 (id=3332): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x2, "c4361caa8f5ea854bba3d192334e7962398e603763615b25194de0f30f334162", 0x5, 0x4, 0x1, 0x80, 0x1, 0x1, 0x8001, 0x6}) getpeername$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', r0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x5, 0x1, 0x7, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, 0x7, 0x0, 0x9, 0x1}}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000340)={@private1, 0x3c, r1}) clock_gettime(0x0, &(0x7f0000002a80)={0x0, 0x0}) futex_waitv(&(0x7f0000001fc0)=[{0x2, &(0x7f0000000380)=0x5, 0x82}, {0xd, &(0x7f00000003c0)=0x4, 0x2}, {0x9, &(0x7f0000000400)=0x10001, 0x82}, {0x5, &(0x7f0000000440)=0xe, 0x2}, {0x400, &(0x7f0000000480)=0xfff, 0x2}, {0x1ff, &(0x7f00000004c0)=0xfffffffffffffff5, 0x82}, {0x8, &(0x7f0000000500)=0x2, 0x82}, {0x8, &(0x7f0000000540)=0x90, 0x2}, {0x8, &(0x7f0000000580)=0x400000004, 0x82}, {0x5, &(0x7f00000005c0)=0x8df6, 0x2}, {0x5, &(0x7f0000000600)=0x3, 0x82}, {0x400000000, &(0x7f0000000640)=0xfd, 0x2}, {0x2, &(0x7f0000000680)=0xffffffffffffffff, 0x82}, {0xfffffffffffffff7, &(0x7f00000006c0)=0x5, 0x82}, {0x6, &(0x7f0000000700)=0x2, 0x2}, {0x8000000000000000, &(0x7f0000000740)=0x9, 0x82}, {0x80, &(0x7f0000000780)=0x3, 0x2}, {0xc, &(0x7f00000007c0)=0x5, 0x82}, {0x7, &(0x7f0000000800)=0x7, 0x82}, {0x7, &(0x7f0000000840)=0x4, 0x82}, {0x6, &(0x7f0000000880)=0x7, 0x82}, {0xf, &(0x7f00000008c0)=0x401, 0x2}, {0x7, &(0x7f0000000900)=0xfffffffffffffffe, 0x82}, {0x1, &(0x7f0000000940)=0x75, 0x80}, {0xffffffffffffffff, &(0x7f0000000980)=0x9, 0x82}, {0x1, &(0x7f00000009c0)=0x6, 0x2}, {0x3, &(0x7f0000000a00)=0xa, 0x2}, {0x8, &(0x7f0000000a40)=0x9, 0x2}, {0xa000000000, &(0x7f0000000a80)=0xb768, 0x82}, {0x8001, &(0x7f0000000ac0)=0x8, 0x82}, {0x6, &(0x7f0000000b00)=0xc, 0x82}, {0x7f, &(0x7f0000000b40)=0x7f, 0x82}, {0xe, &(0x7f0000000b80)=0x8, 0x82}, {0x9, &(0x7f0000000bc0)=0x200, 0x82}, {0x80000001, &(0x7f0000000c00)=0x4, 0x2}, {0x5, &(0x7f0000000c40)=0x9, 0x82}, {0x0, &(0x7f0000000c80)=0x2, 0x2}, {0x67, &(0x7f0000000cc0)=0x3, 0x2}, {0x0, &(0x7f0000000d00)=0xe5, 0x82}, {0xfff, &(0x7f0000000d40)=0x9}, {0x0, &(0x7f0000000d80)=0x7, 0x2}, {0xc122, &(0x7f0000000dc0)=0x42, 0x82}, {0x3ff, &(0x7f0000000e00)=0xed79, 0x2}, {0x7, &(0x7f0000000e40)=0x2, 0x2}, {0xffffffffffff2971, &(0x7f0000000e80)=0x1, 0x82}, {0xb518, &(0x7f0000000ec0)=0x3, 0x2}, {0x7aa2afb6, &(0x7f0000000f00)=0x4, 0x82}, {0x6, &(0x7f0000000f40)=0x100000000, 0x82}, {0x6, &(0x7f0000000f80)=0x5367, 0x2}, {0x5a17, &(0x7f0000000fc0)=0x4, 0x2}, {0x7, &(0x7f0000001000)=0x3, 0x82}, {0x1, &(0x7f0000001040)=0x5, 0x82}, {0x0, &(0x7f0000001080), 0x82}, {0x4, &(0x7f00000010c0)=0x6, 0x82}, {0x3, &(0x7f0000001100)=0x400, 0x82}, {0x4, &(0x7f0000001140)=0x9, 0x82}, {0x2, &(0x7f0000001180)=0x8, 0x82}, {0xffffffff, &(0x7f00000011c0)=0x1, 0x2}, {0x5, &(0x7f0000001200)=0x9, 0x82}, {0x31101ff7, &(0x7f0000001240)=0xa, 0x82}, {0xc507, &(0x7f0000001280), 0x2}, {0x3ff, &(0x7f00000012c0)=0x8, 0x82}, {0x5, &(0x7f0000001300)=0x3, 0x82}, {0x0, 0x0, 0x82}, {0x73d7, &(0x7f0000001340)=0x100000001, 0x82}, {0xfffffffffffffff7, &(0x7f0000001380)=0x80, 0x82}, {0x9, &(0x7f00000013c0)=0x40, 0x82}, {0x9, &(0x7f0000001400)=0x100000000}, {0x8, &(0x7f0000001440)=0x7, 0x82}, {0xfffffffffffffe00, &(0x7f0000001480)=0x100000000, 0x82}, {0x9, &(0x7f00000014c0)=0x6, 0x82}, {0x0, &(0x7f0000001500)=0x5d, 0x82}, {0x80, &(0x7f0000001540)=0xfff, 0x2}, {0x3, &(0x7f0000001580)=0x5, 0x2}, {0xc54, &(0x7f00000015c0)=0xc, 0x80}, {0x1ff, &(0x7f0000001600)=0x5, 0x82}, {0x5, &(0x7f0000001640)=0x8, 0x82}, {0x0, &(0x7f0000001680)=0x2408, 0x2}, {0x9, &(0x7f00000016c0)=0x8000, 0x82}, {0x3, &(0x7f0000001700)=0x8, 0x82}, {0x1, &(0x7f0000001740), 0x2}, {0x6, &(0x7f0000001780)=0x9, 0x82}, {0x6c31, &(0x7f00000017c0)=0x3644e967, 0x82}, {0x2, &(0x7f0000001800)=0xffffffffffffffc0, 0x2}, {0xfff, &(0x7f0000001840)=0x4, 0x82}, {0x8, &(0x7f0000001880)=0xc, 0x2}, {0x7, &(0x7f00000018c0)=0x1, 0x82}, {0xa5e, &(0x7f0000001900)=0x4, 0x2}, {0x1, &(0x7f0000001940)=0x8c1, 0x2}, {0x9, &(0x7f0000001980)=0xff, 0x82}, {0x1, &(0x7f00000019c0)=0x7, 0x82}, {0x100, &(0x7f0000001a00)=0x101, 0x82}, {0xa, &(0x7f0000001a40)=0x5, 0x82}, {0xfffffffffffffffc, &(0x7f0000001a80)=0x4f7, 0x82}, {0xa92, &(0x7f0000001ac0)=0x9, 0x82}, {0x3, &(0x7f0000001b00)=0xfffffffffffffffc, 0x82}, {0x3, &(0x7f0000001b40)=0x9, 0x82}, {0x0, &(0x7f0000001b80)=0x8, 0x82}, {0x8, &(0x7f0000001bc0)=0x4000000000000000, 0x4}, {0x2, &(0x7f0000001c00)=0x8000, 0x2}, {0xfff, &(0x7f0000001c40)=0x9, 0x2}, {0x10001, &(0x7f0000001c80)=0x5, 0x82}, {0x18a3, &(0x7f0000001cc0)=0x2, 0x82}, {0x8000000000000000, &(0x7f0000001d00)=0x3, 0x82}, {0x3ff, &(0x7f0000001d40)=0x7fffffffffffffff, 0x2}, {0x2, &(0x7f0000001d80)=0x6, 0x82}, {0x6, &(0x7f0000001dc0)=0xfffffffffffffffa, 0x2}, {0x3ff, &(0x7f0000001e00)=0xce2, 0x82}, {0x86e8, &(0x7f0000001e40)=0x7, 0x2}, {0x8, &(0x7f0000001e80)=0x4f2, 0x2}, {0x7, &(0x7f0000001ec0)=0x1, 0x2}, {0x8, &(0x7f0000001f00)=0x551d, 0x82}, {0x0, &(0x7f0000001f40)=0x10, 0x82}, {0xffffffff, &(0x7f0000001f80)=0x1, 0x2}], 0x72, 0x0, &(0x7f0000002ac0)={r2, r3+60000000}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000002b00)={0x0, 0xe1, "96f486c97bfa6b59b73eaae2cfdc7add69cc8089f64f98b5ecc839504c1d2606d93445e2da259d53335dd80beb770e56c6615ad62e171232e91fc1fd498eefad47e40ed6b31f36de14b9c8a9148f0130ab21c3102c4ed8dc1dbf94753ec53cb3a20f3270dcda2ae269465f47528514ed654a457781bac6466b3eb69a7303543fe2da0c50aabeb69b0332bc0a763033c80c74c51f627cdbabfafc840edf749d68d969e05675240b4d45c72ee09608212738143c91f6af7d28e069a28816d9df51c2caf9b54a480334080e4a528f2b3b0ad62c4f7ee211e55a10f7348356bb834ba7"}, &(0x7f0000002c00)=0xe9) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000002c40)={r4, 0x10000, 0x30}, 0xc) r5 = syz_usb_connect$midi(0x0, 0x3a, &(0x7f0000002c80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x15ca, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28, 0x1, 0x1, 0x6, 0xd0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x81, [@ms_header={0x7, 0x24, 0x1, 0x91d2, 0x7}], [{{0x9, 0x5, 0x8c04f4a066bc7565, 0x10, 0x400, 0xad, 0xe8, 0x1, {0x6, 0x25, 0x1, 0x2, "d1f5"}}}]}}}}}]}}, &(0x7f0000002ec0)={0xa, &(0x7f0000002cc0)={0xa, 0x6, 0x200, 0x4, 0x2, 0x0, 0x10, 0x70}, 0xf, &(0x7f0000002d00)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7f, 0xd7, 0x4}]}, 0x3, [{0x4, &(0x7f0000002d40)=@lang_id={0x4, 0x3, 0xc04}}, {0xfa, &(0x7f0000002d80)=@string={0xfa, 0x3, "61df8dcc9b82e0dc4391420e977234f5d01457307a14e3afe5c6654eefd89b30f85bc299f435acccab2ad58ba58c9c0cbcf6d185801d725355ca24184258499669a6ce9c53b62043cff24d1eea7d798db36840c2adbf017f2fd61f9670e7eed6ba7652b1e23b8547d3c05acfebd21f6f266209816f27b5bd9fd53635634b6e7cbe17450fc00b57aaaf422c138c3ff5b50b9136c6e94be7041c0d95053dcc761f0a08344ba5587ff2716d95235e25ae5ac951e0c56bc865da45e39e91763aeda4bcdbe09f382aae8aef1c14e7e7614be2ffcdf2bb47b11c3190640a6d2c88dd689983f9289fc8baa75aa6657adf27cae835499b8449b8a864"}}, {0x4, &(0x7f0000002e80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io(r5, &(0x7f0000003080)={0x2c, &(0x7f0000002f00)={0x20, 0x21, 0x41, {0x41, 0x21, "9b498bc1f712faca3362577fa758dceab6b0965ac26f30af57b33a064728fc2845eeaff7c6ccb13f22fcdef3e2ff6aabfe8997a1cc81042c52c8f333fd8123"}}, &(0x7f0000002f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}, &(0x7f0000002fc0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000003000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x10, 0x81, 0x4, "9d381ebe", "2d8d1472"}}, &(0x7f0000003040)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x80, 0xc0, 0xb5, 0x7f, 0x1000, 0x8}}}, &(0x7f0000003540)={0x84, &(0x7f00000030c0)={0x20, 0x13, 0x89, "a9e56a29b0fb8b3f10192bccd8c08917cc6bcf2d811ccd3d51a1fa82e7f2a41b2aa4f68b48fcab84a11379757c321799c5d5365ec67b9e89d59636eacc28c1e17441a52f7f120e5be70f045fbff6b06f4376b9075421122405a862a4d6ab8be7018f926c161e1dec3a14645165e3673ad1759a0759131fe60a21acae925e5b7def16627fcdfc650ee6"}, &(0x7f0000003180)={0x0, 0xa, 0x1, 0xc2}, &(0x7f00000031c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000003200)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000003240)={0x20, 0x0, 0x4, {0x200, 0x20}}, &(0x7f0000003280)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000032c0)={0x40, 0x9, 0x1}, &(0x7f0000003300)={0x40, 0xb, 0x2, "8eff"}, &(0x7f0000003340)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000003380)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, &(0x7f00000033c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, &(0x7f0000003400)={0x40, 0x19, 0x2, "be97"}, &(0x7f0000003440)={0x40, 0x1a, 0x2, 0xe}, &(0x7f0000003480)={0x40, 0x1c, 0x1, 0x5}, &(0x7f00000034c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000003500)={0x40, 0x21, 0x1, 0x40}}) r6 = openat$cgroup_ro(r0, &(0x7f0000003600)='memory.swap.events\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000003880)={0x3, 0x0, [{0x60000, 0xc7, &(0x7f0000003640)=""/199}, {0x80a0000, 0xdf, &(0x7f0000003740)=""/223}, {0x1, 0x20, &(0x7f0000003840)=""/32}]}) r7 = socket$inet(0x2, 0x4, 0x1) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000003a00)=@urb_type_bulk={0x3, {0xd}, 0x2, 0xc3, &(0x7f0000003900)="1f9c927a6766c8a0c8bd1aa00d390022fcc69d48e3352d8dbc4c238aa484f0774e348cfbf7de7717b62b3a74560b73611546074748849ee3889f6d80dd3b43d00cab614db913658989a6a70197b230f8a014fddbda9a5f3f53896277c131c835588de21ecc76df57d13be466b268e4058513e34188458ba72450d08ff51832299adb6a96d0a4991e1342633dc0f30a9bbd85e3a5904b59", 0x97, 0x9, 0x5, 0x81, 0x7, 0x0, &(0x7f00000039c0)="07d11bf533c36ade17cbda404eedc7f4a83ac77fa1eeb7dfc3502445b2ae70402bb8"}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000003a40)={'geneve0\x00'}) connect$unix(r0, &(0x7f0000003a80)=@abs={0x0, 0x0, 0x4e20}, 0x6e) unshare(0x40400) syz_usb_connect(0x6, 0x737, &(0x7f0000003b00)={{0x12, 0x1, 0x310, 0x96, 0x7f, 0x27, 0x40, 0xd96, 0x5200, 0x1d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x725, 0x3, 0x6, 0x9, 0x80, 0x7, "", [{{0x9, 0x4, 0x5e, 0x4, 0x3, 0xb8, 0x42, 0xc8, 0x9, [@hid_hid={0x9, 0x21, 0x3, 0xae, 0x1, {0x22, 0x2f0}}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "c4"}, {0x5, 0x24, 0x0, 0xae3e}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe, 0x2b2, 0x5}, [@mbim={0xc, 0x24, 0x1b, 0x100, 0xc, 0x7f, 0x8, 0x10, 0x3}]}], [{{0x9, 0x5, 0xf, 0x3, 0x0, 0x62, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x1}, @generic={0x37, 0x31, "1b25860b1b88144c6beec70f73485607d5aa8a78520687ab6e492751b9d9ef75c372ad9d450ea4873777269890c8864c739a1ac48d"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0xd, 0x5, 0x6, [@generic={0xd, 0x22, "34c8e5314d5f6e3254ef29"}, @generic={0x22, 0x9, "c4c14a8aa3ceeffdba0695dcda580c2876687a0342075cbe52fd5b6bb51040d1"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x1, 0x0, 0xf6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd8}]}}]}}, {{0x9, 0x4, 0xce, 0x10, 0x9, 0xbe, 0xc, 0x5e, 0x5, [], [{{0x9, 0x5, 0x80, 0x4, 0x10, 0x9, 0x7, 0x1, [@generic={0x5d, 0x3, "ffa6b430ca9ff63217e38535db1362f30858007e389928d5f03894cff1d8ab6ab0acd46d3cf9326cc2e9c424be2d25c407b036db29943f7b4cce2cd7bc84f686ae8631ac59536c5a5bfaa69e184dda68b155c72a8ca3c8b708593b"}]}}, {{0x9, 0x5, 0x1, 0x9ac1b9b83d594f14, 0x10, 0x4, 0x4, 0x3}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0x9, 0x2, 0x8, [@generic={0x93, 0x30, "3f799278e20e24930ad23ff3505dbc877b6ed565804b6a8b3d539d3084a5a725500d2d4bba2175a5bd07bfc24f3c2f1977ab5be4ce7161bb898600e1f99d3cb7ebd45b67102c15cceba291aebb13b8ca7d5d0a27162fea12dc22c4f09e9e9b5f8c0e6ba830053a1ebef7d07a1f1c342001d2e10f4188c01a193804448e39a336e0463f426a82d51e3ea95163a45571d6d0"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x400}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x96, 0x6, 0x33, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xa2, 0xc}]}}, {{0x9, 0x5, 0xa, 0xc, 0x8, 0x5, 0x2, 0x3}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x6, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x81, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1000}]}}, {{0x9, 0x5, 0x7, 0xf, 0x400, 0x7, 0x8, 0xff}}, {{0x9, 0x5, 0x4, 0x18, 0x20, 0x46, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xf44e}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x3}]}}]}}, {{0x9, 0x4, 0xfe, 0x4, 0x10, 0xe9, 0x77, 0x65, 0x7, [@hid_hid={0x9, 0x21, 0xfffa, 0x0, 0x1, {0x22, 0xaf}}], [{{0x9, 0x5, 0xf, 0x0, 0x40, 0x9f, 0x5, 0x24, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x94, 0x5}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x4, 0xd3, 0x9}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x8, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xb, 0x3}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x4, 0xf5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0xd}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x6, 0x6, 0x4, [@generic={0x65, 0xb, "b168262f302155e27e3076a1538a30fbcdd518c16aa4bf44d2a5d0473f8b430d2da756721e6fa3952a21a9854ae227aa2b902d36a8ce69a57131e72c5e1a867fb80d5c5d80b881f207337f1330728f28b416d17305cdcf0d0596645ac64064aa77be6d"}, @generic={0xe5, 0x22, "ba86c0afb4d204bb67d6a1795fd730252e247721fc5f784dbce869d440f78d19217a826113efb8c55239d34833dacc1ba3845147a34eb15d09cfb39774e27856217ba9ddc1401337f41e8d6d7b232bf5d40d74534b429a6610c9018b1bbab03f4726cd10e63379af395f948e21231823933c3a726a55595a938e19a30c812984261ba56d061af6baad9f48a55e813f131e0e2fbe7a2029883eda0de41f63be2337107a544a1e6f972f463a159adca92ed6d62bf611c592258ab8de4ca4d37680bcd531eae54043098e6b5aabadf86ec750aca429ddbcce04b5e7695a8a6828daa950d8"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x5, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x2, 0xe7, 0xe, [@generic={0x70, 0x8, "d1148efedf325fbdc54e49556b7d74a188b6493db948dca43bdcbbe01fe40c7d8c4031d4781f52891af70f03d59ac2cb9ae37cd198cdd237e7fb78f85a90eb94a5720d5689f3b044c680f3068ac543375162586f7e27238471f26fd921001e8b760bc29a671ecf2b1f4a77f9d479"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x2}]}}, {{0x9, 0x5, 0x2, 0x13, 0x20, 0x20, 0x1, 0x8c}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0x7, 0xf9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xfffe}]}}, {{0x9, 0x5, 0xe, 0x8, 0x3ff, 0x79, 0x1, 0x7f}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x1, 0x8, 0x1, [@generic={0x6e, 0xf, "30ad09081c04dc2b2d29748d72b1135bc23c7c6b01ea04970509dc058deebde1f49380a810307d57fbd6ba53a8ce0a6b150511b3171c7dabd88fe356d017253c8b25263ed6158233a2057764994d8e0b959fa79de843e7955369cd1071d36369a9ebe5cf89be20a28a5f4bc7"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x2, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xb7, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x55, 0x4}]}}, {{0x9, 0x5, 0xd, 0x0, 0x1af, 0x6, 0xe, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0xc}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x7, 0xb8, 0x10, [@generic={0xb6, 0x23, "1d56eb2ed1f75fd983f6c848467b39f698e13b8c5dc19dce5e24fa4fe35737bf2ba3abead0aba9a47154af4985f9517370934193f6d52abbc1a253956ab0d17c637d0728f412dfaafee5eaf3b6f2c4e2f5d25e59e26d2442c8986fd6c512f9e46b57b1982d7ff2908c61e444e08d87b36ce1a00d3c86a4fab1266ca300074e16438b727ac122ca96981f588582c16d18d288466e17d2219e0a03d874fd63cced84869fcbe3919dea4cb481946c9112ee65074d80"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x8, 0xc5, 0x1, 0x5, [@generic={0x5d, 0x6, "de64508b29d94b91a1e59b2a5746213ca851f0a97c6db19e36bb52117475f80eeba0eff81e0ec7058766bc23c01cb1d7c349d77765de559774fb199fca48efdda0597f1ccd2339266642ec7a32025a90756f6dc02049b82d72b6ae"}, @generic={0x57, 0x7, "2efdefe437eca3cbe74a736cf32550b654b82877ea97a3dbeccb24adfc88d55d71bc624960a38720d006b4c58a8263d4b042fd0994feb578389fafebff877208cd2befdb086b82c12f6da63da190a8e8f8761de875"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0x4, 0xf4, 0x5, [@generic={0x2f, 0xb, "a417a33a9228cd41cfd55b78659df191ac3f61a990ae1c9908d6c378c2e59afd7b71a404a81a2ae2052d968de2"}, @generic={0x33, 0x31, "946ccd8b991d2ab634945bfa0ac44f4ff129673e74edde7240251a118401e0e307940ac2415405e7568054280b8fdf7413"}]}}]}}]}}]}}, &(0x7f00000045c0)={0xa, &(0x7f0000004240)={0xa, 0x6, 0x110, 0x9, 0xe, 0x2, 0x8, 0x20}, 0xc, &(0x7f0000004280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x5}]}, 0x9, [{0x19, &(0x7f00000042c0)=@string={0x19, 0x3, "a5081a60d49d0fed0c1a22792558cb155aa9dbfdbeabe7"}}, {0x4, &(0x7f0000004300)=@lang_id={0x4, 0x3, 0x20}}, {0x4, &(0x7f0000004340)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000004380)=@lang_id={0x4, 0x3, 0x280a}}, {0x29, &(0x7f00000043c0)=@string={0x29, 0x3, "f5090c919d0b29e1c558dd5276cfa5bb3d2278146fe820edf6ac65ba7e1d9b4703f1a0f11084f6"}}, {0x35, &(0x7f0000004400)=@string={0x35, 0x3, "7b18f58ab0daf76182c5bd0ffbde3e91892eb9f6c697cb81d99741d729efc2131ae4e1ed4ef0a4e3f9d057cfda61eb9ca3ed29"}}, {0xca, &(0x7f0000004440)=@string={0xca, 0x3, "68505716ad5e863e08de5698560093a9afae3e6c401d31ba1827b066427ef6270d3f231f4c6fcd5d91eac21f09ec99d27b184b99cff1e0b40f41b31562c310998cbb43fb319c5316e83633587572a455dbfb42bd58a963d218ce9706281356481efb97fe85517a1467efaa278e722c54873adffc673f1d7d0a9bc838d67bf3932b316295ecc755469a60eba4df640b920ddb64be4582285f44c160b63e437f93a37d24c0d687ea2ec84b575396b26b55f140934ab1cb0da2dcf8337a6b7f2081a86d9e9825965b51"}}, {0x4, &(0x7f0000004540)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000004580)=@lang_id={0x4, 0x3, 0x439}}]}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000046c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000047c0)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004780)={&(0x7f0000004700)={0x44, r8, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x4}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x1000}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x7}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0xff}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x44) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004840), r0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000004980)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004940)={&(0x7f0000004880)={0x88, r9, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x400000, {0x4, 0x7, 0x0, 0xf6b}}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x18, 0x34, @random="7dde2d8f02bec12fb26dbabfb6f6bfc205cf3ded"}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x0, {0xc, 0x0, 0x2be}}}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IE={0x12, 0x2a, [@dsss={0x3, 0x1, 0xc}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x800}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040008}, 0x44040) setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, &(0x7f00000049c0)={0xffffffffffffffff, 0x8, 0x5, 0xb2, @vifc_lcl_ifindex=r1, @multicast1}, 0x10) futex_waitv(&(0x7f0000004ac0)=[{0x3, &(0x7f0000004a00)=0x9, 0x2}, {0x8, &(0x7f0000004a40)=0x9, 0x82}, {0x7ff, &(0x7f0000004a80)=0x2, 0x2}], 0x3, 0x0, &(0x7f0000004b40)={0x0, 0x989680}, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000004b80)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) fcntl$dupfd(r10, 0x406, r6) 225.697566ms ago: executing program 5 (id=3333): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0xa, 0x4e24, 0x800, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000a00)="b3647d665f21c56df20767f630b413883b31b9468e9acbdcc9c1c2bf1954020cf7872e141d7619ec8e0d1524db874ace78f93e5dd9e4f7b064de455653e9f6c0c369291aa743a349249cd1f00c4aa715f3304b04dcf5e83c6c5a1207", 0x5c}, {&(0x7f0000000c00)="fd809ff1a0dd87bb3141d8b8ee8c", 0xe}, {&(0x7f0000000a80)="6eafd116a180adc6ce5c99c327d2d066e89d206672f097afe5479b873b755faa42437ce45786db402c1930ddd2ea7e187d71dc3e54c62e30ad0031a5abd76eb5d6b12c65084544421932ee443f13d5d9beca3c4315fbe4f796bc14089fe44e1e1587cc7c7a29aff11a4c4f9eb39d59881c988caa4f5cb95bc06eff68eb1371e530c779667029272c894d4b59a3c5035d9c6f1bcf82f1e15592539340b02328fc4c87758bc5a1221a176d1b0880f5cca61d368688055d19c68f1ad431d1ee1da4acef94ad303989241446a14f763a", 0xce}, {&(0x7f0000000140)="c3e1389114feb48c689baf509a35cde405", 0x11}, {&(0x7f0000000bc0)="62bacda168a3", 0x6}, {&(0x7f0000000c40)="c025019eba7af23620c051980587cf8c82024632daec4f91b958bf0f", 0x1c}, {&(0x7f0000000c80)="bcdf489c4387f387cd6aac5ef34c92e003da103625354fa8a41dd6e0494685bb60c868517ce66220d25cd0582378bd0da481256e6898d3076541074fbb117fd6b5e42d57c3af9a8a6e3a70b8139ca337dc7472fe9c2b347c9fe09e3cb4ee6d879093eb2f2b7d56210f2ee1281ff0650e2e7eeaab66faa4537c6f13158f4b015c92781ae818bfb933bd45c6a62fb2b829ca9bad58bd12d489540d23d1fc75cf178bff2af6e931616c3c84453c093bca7063b276182715037685127a5e3c", 0xbd}], 0x7}, 0x4041) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) (async) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) fcntl$getownex(r0, 0x10, 0x0) (async) fcntl$getownex(r0, 0x10, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001680)}, 0x10020) (async) recvmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001680)}, 0x10020) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x102, 0x0) fchown(r4, 0xee01, 0x0) mkdirat(r4, 0x0, 0x3d) r5 = openat$cgroup_freezer_state(r4, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r5, 0x0, 0x0) (async) write$cgroup_freezer_state(r5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) (async) syz_open_procfs(0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200"/637], 0x310) r7 = socket(0x40000000015, 0x5, 0x0) recvmsg$can_j1939(r7, &(0x7f0000002000)={&(0x7f0000000040)=@isdn, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000200)=""/220, 0xdc}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/249, 0xf9}, {&(0x7f0000001ec0)=""/92, 0x5c}], 0x5, &(0x7f0000001fc0)=""/52, 0x34}, 0x2) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 75.747188ms ago: executing program 5 (id=3334): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x189c40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000280)={0x17bb98bb, 0xd000, 0x4, 0xffffffffffffffff, 0xc8140ee6e279b533}) (async, rerun: 64) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64) r5 = socket$inet6(0xa, 0x3, 0x4) (rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x3, 0x1, 0x0, 0x7e}, 0x20) (async, rerun: 32) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) (async, rerun: 32) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r6 = landlock_create_ruleset(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYRES8=0x0], 0x28}}, 0x80) (async, rerun: 32) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8=r6], 0x0) (rerun: 32) syz_usb_control_io$hid(r7, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r7, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 32) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r8, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000600006003010008001e51289921e01c"], 0x48}, 0x1, 0x0, 0x0, 0x20008808}, 0x2400c801) (async) sendmsg$can_bcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100010100000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="030000e0010000000400008007020000d467aef0f23fe738"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) (async) sendmsg$can_bcm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000100)={0x42, 0x100, 0x200000, 0x6, 0x0, 0x42}) 0s ago: executing program 5 (id=3335): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00009b5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="f30fbd9e412b66b9640a000066b8e2ee000066ba00000000ba2100ec26f00fba7f1559b800078ec0baf80c66b9200a00000f32660f3a627768dfeff30f205b66b9800000c00f326635000800000f300f23c85bd621f8f835080030000f23f8ba4200ef440f20c0663501000000440f22c0", 0x71}], 0x1, 0xc, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x260440, 0xb) mkdirat(r5, &(0x7f0000000080)='./file0\x00', 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r3) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_connect$uac1(0x3, 0xb7, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r7], &(0x7f0000000740)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x9, 0x17, 0x7, 0x10, 0x44}, 0x79, &(0x7f0000000100)={0x5, 0xf, 0x79, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x5, 0x4, 0x7, 0x7a}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0xd, 0xf}, @generic={0x62, 0x10, 0x2, "b5d4bed4e81cb923c83ffa562142ec0e5b3a4a3565cc3fb2bb59a9da8143462d6005adf763d6cfd0061c7ba3838517fe13212ec6414615196c4185491b7d9277ccfab005792662e5867d17d3a639fb097063b184c549e0ee3f6df48a6c335e"}]}}) kernel console output (not intermixed with test programs): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17011 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce7b9c819 code=0x7ffc0000 [ 685.793608][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 685.861262][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.867823][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.875599][ T796] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 685.925744][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 685.945722][ T796] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 685.957132][ T29] audit: type=1326 audit(1775540193.395:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17011 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f8ce7b9c819 code=0x7ffc0000 [ 685.994340][ T796] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 686.003520][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 686.014113][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 686.145304][ T29] audit: type=1326 audit(1775540193.395:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17011 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce7b9c819 code=0x7ffc0000 [ 686.184269][ T5905] usb 6-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 686.206402][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.227372][ T5905] usb 6-1: Product: syz [ 686.250257][ T5905] usb 6-1: Manufacturer: syz [ 686.268579][ T5905] usb 6-1: SerialNumber: syz [ 686.279896][ T29] audit: type=1326 audit(1775540193.395:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17011 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8ce7b9c819 code=0x7ffc0000 [ 686.305211][ T5905] usb 6-1: config 0 descriptor?? [ 686.319305][ T796] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 686.337521][ T5905] ti_usb_3410_5052 6-1:0.0: TI USB 5052 2 port adapter converter detected [ 686.400336][ T5905] ti_usb_3410_5052 6-1:0.0: missing endpoints [ 686.408954][ T5877] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 686.422483][ T796] usb 5-1: USB disconnect, device number 47 [ 686.462213][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.497996][ T29] audit: type=1326 audit(1775540193.395:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17011 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8ce7b9c582 code=0x7ffc0000 [ 686.636872][T17028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2987'. [ 686.761685][ T5877] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 686.783393][ T5877] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.797124][ T29] audit: type=1326 audit(1775540193.395:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17011 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce7b9c819 code=0x7ffc0000 [ 686.824686][ T5877] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 686.843106][ T5877] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.857577][ T5877] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 686.867439][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 686.878821][ T5877] usb 3-1: Product: syz [ 686.883931][ T5877] usb 3-1: Manufacturer: syz [ 686.927785][ T5877] cdc_wdm 3-1:1.0: skipping garbage [ 686.944168][ T5877] cdc_wdm 3-1:1.0: skipping garbage [ 687.035288][ T5877] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 687.308695][ T5877] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 687.448949][ T5877] usb 5-1: device descriptor read/64, error -71 [ 687.698903][ T5877] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 687.733300][ T5891] usbhid 2-1:0.0: can't add hid device: -71 [ 687.752322][ T5891] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 687.770968][ T5891] usb 2-1: USB disconnect, device number 4 [ 687.896302][T17062] SET target dimension over the limit! [ 687.903872][T17062] netdevsim netdevsim3: Direct firmware load for / [ 687.903872][T17062] failed with error -2 [ 687.915327][T17062] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 687.915327][T17062] [ 687.939050][ T5877] usb 5-1: device descriptor read/64, error -71 [ 688.052935][ T5877] usb usb5-port1: attempt power cycle [ 688.260077][ T5891] usb 3-1: USB disconnect, device number 53 [ 688.277022][T13201] usb 6-1: USB disconnect, device number 3 [ 688.518725][ T5877] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 688.546790][ T5877] usb 5-1: device descriptor read/8, error -71 [ 688.644823][T17076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.661134][T17076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.708387][T17072] netlink: 'syz.2.2998': attribute type 3 has an invalid length. [ 688.776923][T17081] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3000'. [ 688.799062][ T5877] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 688.835312][ T5877] usb 5-1: device descriptor read/8, error -71 [ 688.949244][ T5877] usb usb5-port1: unable to enumerate USB device [ 688.988602][T13201] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 689.250411][T13201] usb 3-1: Using ep0 maxpacket: 16 [ 689.269256][T13201] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 689.277574][T13201] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.300480][T13201] usb 3-1: config 0 has no interface number 0 [ 689.383229][T13201] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 689.437768][T13201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.448801][T13201] usb 3-1: Product: syz [ 689.466567][T13201] usb 3-1: Manufacturer: syz [ 689.475621][T13201] usb 3-1: SerialNumber: syz [ 689.527088][T13201] usb 3-1: config 0 descriptor?? [ 689.542484][T13201] uvcvideo 3-1:0.105: probe with driver uvcvideo failed with error -22 [ 689.744102][ T5905] usb 3-1: USB disconnect, device number 54 [ 690.261075][T17114] netlink: 'syz.1.3008': attribute type 10 has an invalid length. [ 690.272987][T17114] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 690.285936][T17114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 690.377804][ T796] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 690.571028][ T796] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 690.589485][ T796] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 690.611025][T17114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3008'. [ 690.634296][ T796] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 690.644353][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 690.685096][ T796] usb 5-1: SerialNumber: syz [ 690.715310][ T796] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 690.751196][T17120] netlink: 'syz.2.3010': attribute type 3 has an invalid length. [ 690.806338][ T796] usb-storage 5-1:1.0: USB Mass Storage device detected [ 690.824606][T17120] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3010'. [ 690.908238][T13201] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 691.012112][ T796] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 691.139685][ T796] scsi host1: usb-storage 5-1:1.0 [ 691.218231][T13201] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 691.290821][T13201] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 691.328463][T13201] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 691.342603][T13201] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.375455][T13201] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 691.393919][T13201] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 691.423124][T13201] usb 2-1: Product: syz [ 691.434458][T13201] usb 2-1: Manufacturer: syz [ 691.459108][T17130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3007'. [ 691.469830][T13201] cdc_wdm 2-1:1.0: skipping garbage [ 691.475516][T13201] cdc_wdm 2-1:1.0: skipping garbage [ 691.486850][T13201] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 691.947966][T17138] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3013'. [ 692.414784][ T796] usb 5-1: USB disconnect, device number 52 [ 692.890848][T17148] SET target dimension over the limit! [ 692.898105][T17148] netdevsim netdevsim3: Direct firmware load for / [ 692.898105][T17148] failed with error -2 [ 692.909819][T17148] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 692.909819][T17148] [ 693.148725][T17155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3017'. [ 693.157747][T17155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3017'. [ 693.865318][ T796] usb 2-1: USB disconnect, device number 5 [ 694.532714][T17173] netlink: 'syz.3.3023': attribute type 4 has an invalid length. [ 694.619056][T17175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3024'. [ 694.668925][ T796] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 694.678302][ T5891] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 694.790129][T13201] hid_parser_main: 134 callbacks suppressed [ 694.790149][T13201] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 694.819060][ T796] usb 2-1: device descriptor read/64, error -71 [ 694.831275][ T5891] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 694.849563][T13201] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 694.870714][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.901501][ T5891] usb 5-1: config 0 has no interface number 0 [ 694.916622][ T5891] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 694.940162][ T5891] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 694.968167][ T5891] usb 5-1: config 0 interface 52 has no altsetting 0 [ 694.976346][ T5891] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 694.986853][ T5891] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 694.995336][ T5891] usb 5-1: Manufacturer: syz [ 695.006425][ T5891] usb 5-1: config 0 descriptor?? [ 695.017013][ T5891] hub 5-1:0.52: bad descriptor, ignoring hub [ 695.023612][ T5891] hub 5-1:0.52: probe with driver hub failed with error -5 [ 695.059088][ T796] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 695.071980][T17184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3027'. [ 695.192257][ T796] usb 2-1: device descriptor read/64, error -71 [ 695.291124][T17184] tc_dump_action: action bad kind [ 695.320079][ T796] usb usb2-port1: attempt power cycle [ 695.358378][T17190] netlink: 'syz.4.3022': attribute type 10 has an invalid length. [ 695.476254][ T5891] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input65 [ 695.583240][T17190] team0 (unregistering): Port device team_slave_0 removed [ 695.602922][T17190] team0 (unregistering): Port device team_slave_1 removed [ 695.720995][ T796] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 695.751331][ T796] usb 2-1: device descriptor read/8, error -71 [ 695.828215][ T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 696.081952][ T796] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 696.109542][ T796] usb 2-1: device descriptor read/8, error -71 [ 696.118635][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 696.130786][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.149984][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 696.176376][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 696.191326][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.208173][ T24] usb 3-1: Product: syz [ 696.216444][ T24] usb 3-1: Manufacturer: syz [ 696.226401][ T24] usb 3-1: SerialNumber: syz [ 696.248053][ T24] snd-ua101 3-1:1.1: sample format descriptor not found [ 696.249053][ T796] usb usb2-port1: unable to enumerate USB device [ 696.263170][ T24] snd-ua101 3-1:1.0: invalid num_altsetting [ 696.363453][T17201] netlink: 'syz.5.3031': attribute type 10 has an invalid length. [ 696.372867][T17201] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 696.398759][T17201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 696.520982][T17206] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3029'. [ 696.565282][T17206] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3029'. [ 696.670153][T17201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3031'. [ 696.996195][ T5891] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 697.289271][ T5891] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 697.299518][ T5891] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.325757][ T5891] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 697.411316][ T5891] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.499597][ T5891] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 697.515273][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 697.528317][ T5891] usb 6-1: Product: syz [ 697.532595][ T5891] usb 6-1: Manufacturer: syz [ 697.549803][T13201] usb 5-1: USB disconnect, device number 53 [ 697.593916][ T5891] cdc_wdm 6-1:1.0: skipping garbage [ 697.612012][ T5891] cdc_wdm 6-1:1.0: skipping garbage [ 697.639379][ T5891] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 697.885252][T17214] loop2: detected capacity change from 0 to 7 [ 697.901370][T17214] Dev loop2: unable to read RDB block 7 [ 697.915210][T17214] loop2: AHDI p1 p2 p3 [ 698.071244][T17214] loop2: partition table partially beyond EOD, truncated [ 698.081596][T17214] loop2: p1 start 1818582900 is beyond EOD, truncated [ 698.091505][T17214] loop2: p3 start 335544320 is beyond EOD, truncated [ 698.642032][ T5891] usb 3-1: USB disconnect, device number 55 [ 698.817011][T17239] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 698.927520][T17250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3045'. [ 699.457098][ T796] usb 6-1: USB disconnect, device number 5 [ 699.528303][ T5891] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 699.753264][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 699.795119][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.815322][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.828254][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 699.878903][T14855] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 699.909358][ T5891] usb 3-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8 [ 699.977195][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.054381][ T5891] usb 3-1: config 0 descriptor?? [ 700.215645][T17274] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3054'. [ 700.232826][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3054'. [ 700.255682][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3054'. [ 700.448796][ T5905] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 700.478773][ T796] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 700.480695][ T5891] hid-generic 0003:045E:FC40.001B: hidraw0: USB HID v0.00 Device [HID 045e:fc40] on usb-dummy_hcd.2-1/input0 [ 700.598530][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 700.606482][ T5905] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 700.617677][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.626314][ T5905] usb 5-1: Product: syz [ 700.631051][ T796] usb 6-1: Using ep0 maxpacket: 8 [ 700.637845][ T5905] usb 5-1: Manufacturer: syz [ 700.643164][ T5877] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 700.651201][ T5905] usb 5-1: SerialNumber: syz [ 700.657844][ T796] usb 6-1: config 1 has an invalid interface number: 48 but max is 6 [ 700.667629][ T5905] usb 5-1: config 0 descriptor?? [ 700.672896][ T796] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 700.682872][ T796] usb 6-1: config 1 has no interface number 0 [ 700.689587][ T796] usb 6-1: too many endpoints for config 1 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 700.704285][ T796] usb 6-1: config 1 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 700.718690][ T796] usb 6-1: config 1 interface 48 has no altsetting 0 [ 700.731189][ T796] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 700.734112][T13201] usb 3-1: USB disconnect, device number 56 [ 700.742210][ T796] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 700.764630][ T796] usb 6-1: Product: syz [ 700.769081][ T796] usb 6-1: Manufacturer: syz [ 700.773717][ T796] usb 6-1: SerialNumber: syz [ 700.810654][ T5877] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 700.819120][ T5877] usb 4-1: config 0 has no interface number 0 [ 700.827350][ T5877] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 700.836988][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.846727][ T5877] usb 4-1: Product: syz [ 700.851465][ T5877] usb 4-1: Manufacturer: syz [ 700.856090][ T5877] usb 4-1: SerialNumber: syz [ 700.863996][ T5877] usb 4-1: config 0 descriptor?? [ 700.873673][ T5877] usb 4-1: selecting invalid altsetting 1 [ 700.881227][ T5877] dvb_ttusb_budget: ttusb_init_controller: error [ 700.887575][ T5877] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 700.903287][ T5905] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 700.937294][ T5877] DVB: Unable to find symbol stv0299_attach() [ 700.976978][ T5877] DVB: Unable to find symbol tda8083_attach() [ 700.989570][ T5877] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 700.997741][ T796] usb 6-1: palm_os_3_probe - error -71 getting connection information [ 701.007636][ T796] visor 6-1:1.48: probe with driver visor failed with error -71 [ 701.027485][ T796] usb 6-1: USB disconnect, device number 6 [ 701.082839][ T5877] usb 4-1: USB disconnect, device number 26 [ 701.417058][T17293] netlink: 'syz.1.3058': attribute type 10 has an invalid length. [ 701.445895][T17293] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 701.457065][T17293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 701.500285][T17293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3058'. [ 701.630237][T17302] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3062'. [ 701.749189][T13201] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 701.808683][ T796] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 701.878409][ T5891] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 701.909984][T13201] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 701.918824][T13201] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.929175][T13201] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 701.938211][T13201] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.950805][T13201] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 701.959026][ T796] usb 6-1: Using ep0 maxpacket: 32 [ 701.960804][T13201] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 701.972824][ T796] usb 6-1: unable to get BOS descriptor or descriptor too short [ 701.973489][T13201] usb 2-1: Product: syz [ 701.985054][T13201] usb 2-1: Manufacturer: syz [ 701.994755][ T796] usb 6-1: config 1 has an invalid descriptor of length 53, skipping remainder of the config [ 701.998921][T13201] cdc_wdm 2-1:1.0: skipping garbage [ 702.006237][ T796] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 702.011800][T13201] cdc_wdm 2-1:1.0: skipping garbage [ 702.020425][ T796] usb 6-1: config 1 has no interface number 0 [ 702.025381][T13201] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 702.031937][ T796] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 702.049692][ T796] usb 6-1: config 1 interface 1 has no altsetting 0 [ 702.058769][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 702.060691][ T796] usb 6-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 702.075520][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.076420][ T5891] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 702.084411][ T796] usb 6-1: Product: syz [ 702.092865][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.097202][ T796] usb 6-1: Manufacturer: syz [ 702.107649][ T5891] usb 4-1: config 0 has no interface number 0 [ 702.107696][ T5891] usb 4-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 702.107720][ T5891] usb 4-1: config 0 interface 113 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 702.142441][ T796] usb 6-1: SerialNumber: syz [ 702.148060][ T5891] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 702.157735][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.169264][ T5891] usb 4-1: Product: syz [ 702.173575][ T5891] usb 4-1: Manufacturer: syz [ 702.179193][ T5891] usb 4-1: SerialNumber: syz [ 702.186138][ T5891] usb 4-1: config 0 descriptor?? [ 702.207866][ T5891] ttusb_dec_send_command: command bulk message failed: error -8 [ 702.219069][ T5891] ttusb-dec 4-1:0.113: probe with driver ttusb-dec failed with error -8 [ 702.228195][ T5891] usbhid 4-1:0.113: couldn't find an input interrupt endpoint [ 702.384285][T17300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.393357][T17300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.415877][ T796] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 702.430076][ T796] usb 6-1: MIDIStreaming interface descriptor not found [ 702.464246][T17306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3064'. [ 702.525253][ T796] usb 6-1: USB disconnect, device number 7 [ 702.557236][T17308] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 702.577881][T17306] 8021q: adding VLAN 0 to HW filter on device team1 [ 702.587356][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 702.745180][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 702.745197][ T29] audit: type=1326 audit(1775540211.045:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17312 comm="syz.2.3066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f576379c819 code=0x0 [ 702.780594][ T5905] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 702.920264][ T5891] usb 4-1: USB disconnect, device number 27 [ 703.042211][T17319] x_tables: duplicate underflow at hook 1 [ 703.088979][ T796] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 703.196038][ T5905] usb 5-1: USB disconnect, device number 54 [ 703.259677][ T796] usb 3-1: Using ep0 maxpacket: 8 [ 703.281360][ T796] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 703.304168][ T796] usb 3-1: config 179 has no interface number 0 [ 703.322557][ T796] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 703.376215][ T796] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 703.473432][ T796] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 703.510535][ T796] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 703.523233][ T796] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 703.642887][ T796] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 703.653159][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.669283][T17314] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 704.026394][ T5891] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 704.204591][T17314] loop9: detected capacity change from 0 to 4096 [ 704.330825][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 704.374284][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 704.488383][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 704.529258][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 704.566951][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 704.598089][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 704.641799][ T24] usb 2-1: USB disconnect, device number 10 [ 704.709722][ T5891] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 704.755698][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.788200][ T5891] usb 5-1: Product: syz [ 704.807361][ T5891] usb 5-1: Manufacturer: syz [ 704.825211][ T5891] usb 5-1: SerialNumber: syz [ 704.835479][ T5891] usb 5-1: config 0 descriptor?? [ 704.854202][ T5891] ti_usb_3410_5052 5-1:0.0: TI USB 5052 2 port adapter converter detected [ 704.878624][T13201] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 704.890752][ T5891] ti_usb_3410_5052 5-1:0.0: missing endpoints [ 705.076223][T13201] usb 6-1: Using ep0 maxpacket: 16 [ 705.085484][T13201] usb 6-1: config index 0 descriptor too short (expected 37359, got 202) [ 705.094191][T13201] usb 6-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 705.106182][T13201] usb 6-1: config 33 has an invalid descriptor of length 194, skipping remainder of the config [ 705.122930][T13201] usb 6-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 705.145947][T13201] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 705.155492][T13201] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.194895][T13201] usb 6-1: Product: syz [ 705.199595][T13201] usb 6-1: Manufacturer: syz [ 705.204208][T13201] usb 6-1: SerialNumber: syz [ 705.483854][T13201] usb 6-1: 0:2 : does not exist [ 705.506749][T13201] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 705.608730][ T5891] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 705.620640][T13201] usb 6-1: USB disconnect, device number 8 [ 705.873841][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 705.900737][ T796] usb 3-1: USB disconnect, device number 57 [ 705.906752][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 705.906801][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 705.936823][ T5891] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 705.945948][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.977335][ T5891] usb 2-1: Product: syz [ 706.003599][ T5891] usb 2-1: Manufacturer: syz [ 706.016200][ T5891] usb 2-1: SerialNumber: syz [ 706.145340][T17365] fuse: Unknown parameter 'rootmode' [ 706.155155][T17365] fuse: Unknown parameter 'rootmode' [ 706.318947][ T796] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 706.424516][T17371] dvmrp8: entered allmulticast mode [ 706.469818][ T796] usb 3-1: device descriptor read/64, error -71 [ 706.718905][ T796] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 706.780102][T13201] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 706.868642][ T796] usb 3-1: device descriptor read/64, error -71 [ 706.946114][T13201] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 706.966198][T13201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 706.976852][T13201] usb 4-1: Product: syz [ 706.980363][ T796] usb usb3-port1: attempt power cycle [ 706.987248][T13201] usb 4-1: Manufacturer: syz [ 706.992439][T13201] usb 4-1: SerialNumber: syz [ 707.002236][T13201] usb 4-1: config 0 descriptor?? [ 707.017497][T13201] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 707.030617][T13201] dvb-usb: bulk message failed: -22 (2/0) [ 707.042811][T13201] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 707.060524][ T5891] usb 2-1: 2:1: cannot get freq (v2/v3): err -71 [ 707.067738][T13201] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 707.086271][T13201] usb 4-1: media controller created [ 707.124756][T13201] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 707.156863][ T5891] usb 2-1: USB disconnect, device number 11 [ 707.232590][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 707.249458][T13201] cxusb: set interface failed [ 707.258441][T13201] dvb-usb: bulk message failed: -22 (1/0) [ 707.344015][ T24] usb 5-1: USB disconnect, device number 55 [ 707.349597][ T796] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 707.387585][T13201] DVB: Unable to find symbol mt352_attach() [ 707.399396][T13201] dvb-usb: bulk message failed: -22 (5/0) [ 707.407331][ T796] usb 3-1: device descriptor read/8, error -71 [ 707.429187][T13201] zl10353_read_register: readreg error (reg=127, ret==-121) [ 707.453723][T13201] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 707.546973][T17403] netlink: 'syz.4.3090': attribute type 10 has an invalid length. [ 707.556006][T17403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 707.633065][T17403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3090'. [ 707.643696][T13201] rc_core: IR keymap rc-dvico-mce not found [ 707.660224][T13201] Registered IR keymap rc-empty [ 707.661116][ T796] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 707.675809][T13201] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 707.723735][T13201] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input66 [ 707.731376][ T796] usb 3-1: device descriptor read/8, error -71 [ 707.753209][T17413] netlink: 'syz.3.3092': attribute type 5 has an invalid length. [ 707.787027][T17406] netlink: 'syz.3.3092': attribute type 5 has an invalid length. [ 707.787595][T13201] dvb-usb: schedule remote query interval to 100 msecs. [ 707.842471][T13201] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 707.868993][ T796] usb usb3-port1: unable to enumerate USB device [ 707.882981][T13201] usb 4-1: USB disconnect, device number 28 [ 707.928690][ T24] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 707.965450][T13201] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 707.978814][ T5905] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 708.064678][T17419] pimreg: entered allmulticast mode [ 708.072527][T17419] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3096'. [ 708.084677][T17419] pimreg: left allmulticast mode [ 708.101078][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 708.110519][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 708.121473][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 708.130561][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.139753][ T5905] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 708.158783][ T5905] usb 2-1: config 0 has no interface number 0 [ 708.172814][ T5905] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 708.197261][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 708.200350][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.216900][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 708.226291][ T24] usb 5-1: Product: syz [ 708.230227][ T5905] usb 2-1: Product: syz [ 708.234727][ T24] usb 5-1: Manufacturer: syz [ 708.237533][ T5905] usb 2-1: Manufacturer: syz [ 708.246414][ T5905] usb 2-1: SerialNumber: syz [ 708.256178][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 708.257086][ T5905] usb 2-1: config 0 descriptor?? [ 708.266959][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 708.273187][ T24] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 708.298726][T13201] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 708.458289][T13201] usb 4-1: Using ep0 maxpacket: 32 [ 708.465321][T13201] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 708.475165][T13201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.476325][ T5905] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 708.496001][T13201] usb 4-1: config 0 descriptor?? [ 708.497655][ T5905] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 708.513258][ T5905] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 708.523525][ T5905] usb 2-1: media controller created [ 708.544593][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 708.588390][ T796] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 708.699899][ T5905] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 708.739831][ T796] usb 6-1: Using ep0 maxpacket: 32 [ 708.762797][ T796] usb 6-1: config 1 has an invalid interface number: 37 but max is 1 [ 708.764917][T13201] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 708.792847][ T5905] usb 2-1: USB disconnect, device number 12 [ 708.801465][T13201] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 708.802850][ T796] usb 6-1: config 1 has an invalid interface number: 101 but max is 1 [ 708.837740][T13201] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 708.842461][ T796] usb 6-1: config 1 has no interface number 0 [ 708.855505][T13201] usb 4-1: media controller created [ 708.871003][ T796] usb 6-1: config 1 has no interface number 1 [ 708.881475][T13201] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 708.917539][ T796] usb 6-1: config 1 interface 37 has no altsetting 0 [ 708.936707][ T796] usb 6-1: config 1 interface 101 has no altsetting 0 [ 708.955003][ T796] usb 6-1: New USB device found, idVendor=0421, idProduct=044d, bcdDevice=72.00 [ 708.967424][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.980341][ T796] usb 6-1: Product: ꉼ얺á•å¼œã»”쪞é‹æŠ²î°«ì‹ïƒˆé…’ﻋ๡ì²î€®å˜´ê”‚ꚠ纹㧽Ꞡáè­ì¹è•™á–…ꭃ繓ꯟ웊斊î›é³–߲⹗⮣୅☴Ⱇëžî³‘貄Ꭵ젚èŸå¾¹ã½—á‰ï¨á•žà¬°åœë¡€ê£à²šä°šçœ«è“·ã¿ªï„¹ëžœå›“ﵘçŠïˆŽç¢žä£ã²µé—뇾痛ल䓹䓆믛䚋êµâ¨Œè¯¸éŸŒà°Œí“©íž’ൟå¸ïƒ‹ï³¶é»·ç–°ë¬‘ì—› [ 708.981250][T13201] az6027: usb out operation failed. (-71) [ 709.017339][ T796] usb 6-1: Manufacturer: 《 [ 709.022582][ T796] usb 6-1: SerialNumber: 싈軣磰減ã°ì²™æ„¦é…·â¿¥ä¯ë²‚âžè¾ƒî¥›å®žË™é¬¹ê¦ƒê¨¢á”Šè¥™ï§¨å˜’簄￈æ¤ì’«æ­¦á¨‡ê”¨íž¯á•ë·ƒê®Ÿì¦¬á…‰á”˜ï›”â‰ï«™ï†‘áå­èºã›žìµœîªƒæ•é“´é»·ì”⾢ášà¶¤ç¯¬ë« åŠ™ï¬£î·­ã¥»é¯æ­•á¬„铓뎱⽋䗼耄陯꟪喟똼肚í¶ïŒ‹éž§ã†ƒí†¶á”ï„¿ï£”ç¢ [ 709.060701][T13201] az6027: usb out operation failed. (-71) [ 709.073029][T13201] stb0899_attach: Driver disabled by Kconfig [ 709.087022][T13201] az6027: no front-end attached [ 709.087022][T13201] [ 709.117968][T13201] az6027: usb out operation failed. (-71) [ 709.156754][T13201] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 709.191282][T13201] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input67 [ 709.225170][T13201] dvb-usb: schedule remote query interval to 400 msecs. [ 709.250801][T13201] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 709.300490][T13201] usb 4-1: USB disconnect, device number 29 [ 709.450111][T13201] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 709.565955][ T796] usb 6-1: bad CDC descriptors [ 709.592546][ T796] usb 6-1: USB disconnect, device number 9 [ 709.705090][T17458] pimreg: entered allmulticast mode [ 709.717112][T17458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3107'. [ 709.742682][T17458] pimreg: left allmulticast mode [ 710.268823][ T796] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 710.326568][T17460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3108'. [ 710.359035][T17460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3108'. [ 710.371104][T17474] netlink: 'syz.3.3112': attribute type 13 has an invalid length. [ 710.411303][ T796] usb 2-1: device descriptor read/64, error -71 [ 710.497978][ T9] usb 5-1: USB disconnect, device number 56 [ 710.520734][ T5877] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 710.668822][ T796] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 710.691545][ T5877] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 710.708282][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.729827][ T5877] usb 6-1: config 0 descriptor?? [ 710.757808][ T5877] cp210x 6-1:0.0: cp210x converter detected [ 710.799310][ T796] usb 2-1: device descriptor read/64, error -71 [ 710.908743][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 710.916746][ T796] usb usb2-port1: attempt power cycle [ 710.982912][ T5877] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 710.991939][ T5877] cp210x 6-1:0.0: querying part number failed [ 711.005358][ T5877] usb 6-1: cp210x converter now attached to ttyUSB0 [ 711.015982][ T5877] usb 6-1: USB disconnect, device number 10 [ 711.034098][ T5877] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 711.045621][ T5877] cp210x 6-1:0.0: device disconnected [ 711.083513][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 711.095416][ T9] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 711.116796][ T9] usb 5-1: config 0 has no interface number 0 [ 711.128963][ T9] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 711.170934][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 711.187391][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.227092][ T9] usb 5-1: Product: syz [ 711.232996][T14856] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.244750][T14856] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.254371][ T9] usb 5-1: Manufacturer: syz [ 711.275345][ T9] usb 5-1: SerialNumber: syz [ 711.281289][ T796] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 711.309738][ T796] usb 2-1: device descriptor read/8, error -71 [ 711.315948][T14856] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.326069][ T9] usb 5-1: config 0 descriptor?? [ 711.346834][T17477] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 711.357921][T14856] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.534827][ T29] audit: type=1800 audit(1775540219.835:1442): pid=17495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3117" name="SYSV798dd820" dev="tmpfs" ino=0 res=0 errno=0 [ 711.566632][ T796] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 711.578072][T17477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.594286][T17477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.636752][ T796] usb 2-1: device descriptor read/8, error -71 [ 711.645728][T17499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3119'. [ 711.673506][ T9] asix 5-1:0.188: probe with driver asix failed with error -71 [ 711.696936][ T9] usb 5-1: USB disconnect, device number 57 [ 711.708727][T17499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3119'. [ 711.752681][ T796] usb usb2-port1: unable to enumerate USB device [ 711.948577][T17514] netlink: 'syz.3.3123': attribute type 10 has an invalid length. [ 711.970289][T17514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 712.049949][T17514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3123'. [ 712.069151][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 712.234345][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 712.310958][ T42] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 712.316211][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.339476][ T9] usb 5-1: Product: syz [ 712.343669][ T9] usb 5-1: Manufacturer: syz [ 712.351764][ T9] usb 5-1: SerialNumber: syz [ 712.365555][ T9] usb 5-1: config 0 descriptor?? [ 712.386258][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 712.397735][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 712.419155][ T9] f81232 5-1:0.0: f81534a converter detected [ 712.491473][ T42] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 712.502719][ T42] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 712.526524][ T42] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 712.547002][ T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.574386][ T42] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 712.594907][ T42] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 712.614572][ T42] usb 4-1: Product: syz [ 712.627728][ T9] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 712.669682][ T9] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 712.670523][ T42] usb 4-1: Manufacturer: syz [ 712.796948][ T42] cdc_wdm 4-1:1.0: skipping garbage [ 712.805955][ T42] cdc_wdm 4-1:1.0: skipping garbage [ 712.814945][ T42] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 712.909559][ T9] usb 5-1: reset high-speed USB device number 58 using dummy_hcd [ 713.018234][ T5905] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 713.168799][ T5905] usb 6-1: device descriptor read/64, error -71 [ 713.238394][T14855] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 713.399694][ T42] usb 5-1: USB disconnect, device number 58 [ 713.408777][ T5905] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 713.421009][ T42] f81232 5-1:0.0: device disconnected [ 713.548527][ T5905] usb 6-1: device descriptor read/64, error -71 [ 713.555561][T17522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3126'. [ 713.575314][T17522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3126'. [ 713.584657][ T24] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 713.653031][T17522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.659099][ T5905] usb usb6-port1: attempt power cycle [ 713.758242][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 713.765644][ T24] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 713.800378][ T24] usb 3-1: config 0 has no interface number 0 [ 713.817361][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 713.859887][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 713.905342][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 713.944297][ T24] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 713.992963][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 714.018702][ T5905] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 714.031034][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.080007][ T5905] usb 6-1: device descriptor read/8, error -71 [ 714.080301][ T24] usb 3-1: config 0 descriptor?? [ 714.200114][T17531] netdevsim netdevsim4: Direct firmware load for / [ 714.200114][T17531] failed with error -2 [ 714.214896][T17531] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 714.214896][T17531] [ 714.243777][ T24] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 714.358776][ T5905] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 714.385653][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 714.392866][ T24] usb 3-1: USB disconnect, device number 62 [ 714.409533][ T5905] usb 6-1: device descriptor read/8, error -71 [ 714.413407][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 714.425995][T17535] ldusb: No device or device unplugged -19 [ 714.464149][T17535] ldusb: No device or device unplugged -19 [ 714.496279][T17535] ldusb: No device or device unplugged -19 [ 714.523864][ T5905] usb usb6-port1: unable to enumerate USB device [ 714.593712][T17535] ldusb: No device or device unplugged -19 [ 714.788966][ T5905] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 714.905358][ T9] usb 4-1: USB disconnect, device number 30 [ 714.948757][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 714.955619][ T5905] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 714.976783][ T5905] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 714.999244][ T5905] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 715.014149][ T5905] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 715.074644][ T5905] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 715.084996][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.095469][ T5905] usb 2-1: Product: syz [ 715.105309][ T5905] usb 2-1: Manufacturer: syz [ 715.111869][ T5905] usb 2-1: SerialNumber: syz [ 715.140025][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 715.164174][T17541] pimreg: entered allmulticast mode [ 715.178063][ T5905] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input68 [ 715.193182][T17541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3131'. [ 715.210543][T17541] pimreg: left allmulticast mode [ 715.350005][ T5905] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 715.358777][ T5905] (id 0x00) [ 715.418598][ T5905] rc_core: IR keymap rc-imon-pad not found [ 715.431477][ T5905] Registered IR keymap rc-empty [ 715.436873][ T5905] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 715.458594][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 715.459655][ T5905] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 715.531176][ T5905] imon:send_packet: packet tx failed (-71) [ 715.557629][T17556] fuse: Bad value for 'fd' [ 715.562342][ T5905] imon 2-1:155.0: remote input dev register failed [ 715.570308][ T5905] imon 2-1:155.0: imon_init_intf0: rc device setup failed [ 715.577758][T17556] binder_alloc: 17554: binder_alloc_buf, no vma [ 715.596954][ T5905] imon 2-1:155.0: unable to initialize intf0, err 0 [ 715.605169][ T5905] imon:imon_probe: failed to initialize context! [ 715.612474][ T5905] imon 2-1:155.0: unable to register, err -19 [ 715.624817][ T5905] usb 2-1: USB disconnect, device number 17 [ 715.628286][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 715.639969][ T24] usb 4-1: config 64 has an invalid interface number: 50 but max is 3 [ 715.648636][ T24] usb 4-1: config 64 has an invalid interface number: 38 but max is 3 [ 715.656886][ T24] usb 4-1: config 64 has an invalid interface number: 166 but max is 3 [ 715.666275][ T24] usb 4-1: config 64 has an invalid interface number: 103 but max is 3 [ 715.674986][ T24] usb 4-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 715.684207][ T24] usb 4-1: config 64 has 5 interfaces, different from the descriptor's value: 4 [ 715.694120][ T24] usb 4-1: config 64 has no interface number 0 [ 715.700705][ T24] usb 4-1: config 64 has no interface number 1 [ 715.707567][ T24] usb 4-1: config 64 has no interface number 2 [ 715.714027][ T24] usb 4-1: config 64 has no interface number 4 [ 715.720427][ T24] usb 4-1: config 64 interface 50 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 715.731715][ T24] usb 4-1: config 64 interface 50 altsetting 129 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 715.742903][ T24] usb 4-1: config 64 interface 50 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 715.754663][ T24] usb 4-1: config 64 interface 50 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 715.765820][ T24] usb 4-1: config 64 interface 50 altsetting 129 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 715.777459][ T24] usb 4-1: config 64 interface 3 altsetting 255 endpoint 0xB has an invalid bInterval 255, changing to 7 [ 715.789102][ T24] usb 4-1: config 64 interface 3 altsetting 255 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 715.802169][ T24] usb 4-1: config 64 interface 3 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 715.813781][ T24] usb 4-1: config 64 interface 3 altsetting 255 endpoint 0xC has an invalid bInterval 247, changing to 11 [ 715.826583][ T24] usb 4-1: config 64 interface 3 altsetting 255 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 715.839907][ T24] usb 4-1: config 64 interface 38 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 715.851581][ T24] usb 4-1: config 64 interface 38 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 715.863161][ T24] usb 4-1: config 64 interface 38 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 715.874858][ T24] usb 4-1: config 64 interface 38 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 715.904256][ T24] usb 4-1: config 64 interface 38 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 715.916134][ T24] usb 4-1: config 64 interface 38 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 715.939325][ T24] usb 4-1: config 64 interface 38 altsetting 6 has 7 endpoint descriptors, different from the interface descriptor's value: 15 [ 715.952827][ T24] usb 4-1: too many endpoints for config 64 interface 166 altsetting 30: 168, using maximum allowed: 30 [ 715.969181][ T24] usb 4-1: config 64 interface 166 altsetting 30 has an invalid descriptor for endpoint zero, skipping [ 715.981565][ T24] usb 4-1: config 64 interface 166 altsetting 30 has a duplicate endpoint with address 0x6, skipping [ 715.992761][ T24] usb 4-1: config 64 interface 166 altsetting 30 endpoint 0xA has an invalid bInterval 224, changing to 11 [ 716.013654][ T24] usb 4-1: config 64 interface 166 altsetting 30 has a duplicate endpoint with address 0xC, skipping [ 716.025861][ T24] usb 4-1: config 64 interface 166 altsetting 30 has a duplicate endpoint with address 0xA, skipping [ 716.037514][ T24] usb 4-1: config 64 interface 166 altsetting 30 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 716.071074][ T24] usb 4-1: config 64 interface 166 altsetting 30 has a duplicate endpoint with address 0xB, skipping [ 716.090684][ T24] usb 4-1: config 64 interface 166 altsetting 30 has 8 endpoint descriptors, different from the interface descriptor's value: 168 [ 716.104896][ T24] usb 4-1: config 64 interface 103 altsetting 5 bulk endpoint 0x8 has invalid maxpacket 1023 [ 716.115317][ T24] usb 4-1: config 64 interface 103 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 716.204048][ T24] usb 4-1: config 64 interface 103 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 716.237441][ T24] usb 4-1: config 64 interface 103 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 716.268206][ T24] usb 4-1: config 64 interface 103 altsetting 5 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 716.459468][T17573] bond0: (slave bond_slave_1): Releasing backup interface [ 716.692892][ T24] usb 4-1: config 64 interface 103 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 716.758246][ T24] usb 4-1: config 64 interface 103 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 716.797816][ T24] usb 4-1: config 64 interface 103 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 716.848773][ T24] usb 4-1: config 64 interface 103 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 716.869274][ T24] usb 4-1: config 64 interface 103 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 716.908199][ T24] usb 4-1: config 64 interface 103 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 716.979057][ T24] usb 4-1: config 64 interface 103 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 716.992976][ T24] usb 4-1: config 64 interface 103 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 717.004289][ T24] usb 4-1: config 64 interface 50 has no altsetting 0 [ 717.011259][ T24] usb 4-1: config 64 interface 3 has no altsetting 0 [ 717.018181][ T24] usb 4-1: config 64 interface 38 has no altsetting 0 [ 717.270715][ T24] usb 4-1: config 64 interface 166 has no altsetting 0 [ 717.308196][ T24] usb 4-1: config 64 interface 103 has no altsetting 0 [ 717.425517][ T24] usb 4-1: New USB device found, idVendor=0403, idProduct=c850, bcdDevice=30.1d [ 717.448388][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.464286][ T24] usb 4-1: Product: syz [ 717.470312][ T24] usb 4-1: Manufacturer: ᇠ[ 717.478477][ T24] usb 4-1: SerialNumber: syz [ 717.495437][T17589] pimreg: entered allmulticast mode [ 717.509858][ T24] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 717.530098][T17588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3144'. [ 717.530559][ T24] usb 4-1: no configuration chosen from 1 choice [ 717.561466][T17588] pimreg: left allmulticast mode [ 717.986909][T17594] netdevsim netdevsim5: Direct firmware load for / [ 717.986909][T17594] failed with error -2 [ 718.028660][T17594] netdevsim netdevsim5: Falling back to sysfs fallback for: / [ 718.028660][T17594] [ 718.205433][ T24] usb 4-1: USB disconnect, device number 31 [ 718.304682][ T9] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 718.479817][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 718.486337][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 718.496412][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 718.518649][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 718.545263][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 718.566322][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 718.583668][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 718.615839][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 718.688333][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 718.688638][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.750369][ T9] usb 3-1: config 0 descriptor?? [ 718.839296][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 718.861287][ T24] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 718.888636][ T24] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 718.908184][ T24] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 718.917954][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 718.957118][ T24] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 718.983745][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 63 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 718.998197][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.006232][ T24] usb 4-1: Product: syz [ 719.009565][ T5905] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 719.028194][ T24] usb 4-1: Manufacturer: syz [ 719.032962][ T24] usb 4-1: SerialNumber: syz [ 719.045635][ T9] usb 3-1: USB disconnect, device number 63 [ 719.069059][ T24] usb 4-1: config 0 descriptor?? [ 719.085906][ T9] usblp0: removed [ 719.190380][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 719.315811][ T24] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input70 [ 719.348929][ T5177] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 719.450346][ T5177] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 719.486351][ T6630] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 719.499425][T17607] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 719.510797][T17610] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3150'. [ 719.530470][ T5177] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 719.555653][ T796] usb 4-1: USB disconnect, device number 32 [ 719.569396][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 719.610413][T17630] fuse: Unknown parameter 'f ' [ 719.750212][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 719.760446][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 719.769576][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 719.790252][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 719.820803][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 719.857432][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 719.868929][T16937] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 719.894216][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 719.927930][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 719.953712][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.015151][ T9] usb 3-1: config 0 descriptor?? [ 720.058983][T16937] usb 2-1: unable to get BOS descriptor or descriptor too short [ 720.082250][T16937] usb 2-1: not running at top speed; connect to a high speed hub [ 720.102332][T16937] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 720.121812][T16937] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 720.131207][T16937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.149803][T16937] usb 2-1: Product: syz [ 720.156781][T16937] usb 2-1: Manufacturer: syz [ 720.166953][T16937] usb 2-1: SerialNumber: syz [ 720.208600][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 720.282800][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 720.367151][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 720.389301][T16937] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 720.389723][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.418866][ T24] usb 6-1: Product: syz [ 720.423129][ T24] usb 6-1: Manufacturer: syz [ 720.428090][ T24] usb 6-1: SerialNumber: syz [ 720.477220][ T24] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 720.503761][ T5891] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 720.527775][T16937] snd-usb-audio 2-1:12.0: probe with driver snd-usb-audio failed with error -2 [ 720.565315][T16937] usb 2-1: USB disconnect, device number 18 [ 720.656716][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 720.720084][T17642] x_tables: duplicate underflow at hook 3 [ 720.899086][T17643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3148'. [ 720.926545][T16937] usb 6-1: USB disconnect, device number 15 [ 721.087007][T17649] pimreg: entered allmulticast mode [ 721.106425][T17649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3158'. [ 721.127082][T17649] pimreg: left allmulticast mode [ 721.183706][T17651] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 721.672651][ T5905] usb 5-1: unable to get BOS descriptor or descriptor too short [ 721.683583][ T5905] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 721.693972][ T5905] usb 5-1: can't read configurations, error -71 [ 721.728370][ T5891] usb 6-1: Service connection timeout for: 256 [ 721.734632][ T5891] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 721.748781][ T5891] ath9k_htc: Failed to initialize the device [ 721.760710][T16937] usb 6-1: ath9k_htc: USB layer deinitialized [ 722.078572][T16937] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 722.224972][ T24] usb 3-1: USB disconnect, device number 64 [ 722.247865][ T24] usblp0: removed [ 722.267211][T16937] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 722.299471][T16937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.313201][T16937] usb 6-1: Product: syz [ 722.317413][T16937] usb 6-1: Manufacturer: syz [ 722.332823][T16937] usb 6-1: SerialNumber: syz [ 722.350649][T16937] usb 6-1: config 0 descriptor?? [ 722.559528][T16937] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 722.608293][ T42] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 722.772798][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 722.781971][ T42] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 722.791926][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.798750][ T5905] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 722.812729][ T42] usb 2-1: Product: syz [ 722.817626][ T42] usb 2-1: Manufacturer: syz [ 722.827880][ T42] usb 2-1: SerialNumber: syz [ 722.898633][T13201] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 722.961062][ T5905] usb 5-1: config 2 has an invalid interface number: 79 but max is 0 [ 722.970812][ T5905] usb 5-1: config 2 has no interface number 0 [ 722.981713][ T5905] usb 5-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 723.008664][ T5905] usb 5-1: config 2 interface 79 has no altsetting 0 [ 723.033794][ T5905] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 723.055882][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.077838][ T5905] usb 5-1: Product: syz [ 723.080562][T13201] usb 4-1: Using ep0 maxpacket: 8 [ 723.083008][ T5905] usb 5-1: Manufacturer: syz [ 723.099790][ T5905] usb 5-1: SerialNumber: syz [ 723.113007][ T42] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 723.134300][T13201] usb 4-1: unable to get BOS descriptor or descriptor too short [ 723.146190][T17675] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 723.157782][ T42] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 723.169096][T13201] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 723.171424][T16937] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 723.202263][T13201] usb 4-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=cd.98 [ 723.217754][T16937] usb 6-1: USB disconnect, device number 16 [ 723.225717][T13201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.267317][T13201] usb 4-1: Product: syz [ 723.287942][T13201] usb 4-1: Manufacturer: syz [ 723.305959][T13201] usb 4-1: SerialNumber: syz [ 723.350776][ T42] usb 2-1: USB disconnect, device number 19 [ 723.419017][ T5905] usb 5-1: USB disconnect, device number 61 [ 723.888374][ T5891] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 723.923419][T17690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3171'. [ 724.040122][ T5905] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 724.090500][ T5891] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 724.099110][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 724.118897][ T5891] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 724.128692][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.136839][ T5891] usb 3-1: Product: syz [ 724.157165][ T5891] usb 3-1: Manufacturer: syz [ 724.163271][ T5891] usb 3-1: SerialNumber: syz [ 724.174557][ T5891] usb 3-1: config 0 descriptor?? [ 724.186572][ T5891] hub 3-1:0.0: bad descriptor, ignoring hub [ 724.193771][ T5891] hub 3-1:0.0: probe with driver hub failed with error -5 [ 724.221065][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 724.229397][ T5905] usb 2-1: too many configurations: 98, using maximum allowed: 8 [ 724.239284][ T5905] usb 2-1: config 6 has no interfaces? [ 724.243984][ T5891] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input71 [ 724.251783][ T5905] usb 2-1: config 6 has no interfaces? [ 724.265110][ T5891] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 724.266335][ T5905] usb 2-1: config 6 has no interfaces? [ 724.369565][T17700] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3174'. [ 724.430173][ T5905] usb 2-1: config 6 has no interfaces? [ 724.437263][ T5905] usb 2-1: config 6 has no interfaces? [ 724.455047][ T5891] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 724.512999][ T5905] usb 2-1: config 6 has no interfaces? [ 724.541882][ T5905] usb 2-1: config 6 has no interfaces? [ 724.543168][ T5891] usb 3-1: USB disconnect, device number 65 [ 724.554289][ T5905] usb 2-1: config 6 has no interfaces? [ 724.563221][ T5905] usb 2-1: string descriptor 0 read error: -71 [ 724.575152][ T5905] usb 2-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=58.3c [ 724.655915][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=154 [ 724.720732][ T5905] usb 2-1: rejected 8 configurations due to insufficient available bus power [ 724.751737][ T5905] usb 2-1: no configuration chosen from 8 choices [ 724.772477][ T5905] usb 2-1: USB disconnect, device number 20 [ 724.870622][T17714] pimreg: entered allmulticast mode [ 724.879287][T17714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3177'. [ 724.892160][T17714] pimreg: left allmulticast mode [ 725.226872][T17723] batadv0: entered promiscuous mode [ 725.235998][T17723] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 725.262610][T17723] fuse: Unknown parameter 'user_i00000000000000000000' [ 725.599854][T17730] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.3181'. [ 725.633514][T13201] kl5kusb105 4-1:8.0: KL5KUSB105D / PalmConnect converter detected [ 725.786545][T13201] usb 4-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 725.812338][T13201] usb 4-1: USB disconnect, device number 33 [ 726.053508][T13201] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 726.087894][T13201] kl5kusb105 4-1:8.0: device disconnected [ 726.265768][T17745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3185'. [ 726.298877][T17745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3185'. [ 726.323513][T17745] netlink: 'syz.4.3185': attribute type 15 has an invalid length. [ 726.368796][T17745] netlink: 'syz.4.3185': attribute type 18 has an invalid length. [ 726.520942][T17755] SET target dimension over the limit! [ 726.530175][T17755] netdevsim netdevsim3: Direct firmware load for / [ 726.530175][T17755] failed with error -2 [ 726.548257][T17755] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 726.548257][T17755] [ 726.630143][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3188'. [ 726.895285][T17766] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3189'. [ 726.977268][T17763] pimreg: entered allmulticast mode [ 726.992285][T17766] pimreg: left allmulticast mode [ 727.155077][T15364] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 727.166371][T15364] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 727.208799][T15364] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 727.251476][T15364] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 727.269628][T15364] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 728.288425][T13201] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 728.465868][T13201] usb 6-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 728.477586][T13201] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.485860][T13201] usb 6-1: Product: syz [ 728.498216][T13201] usb 6-1: Manufacturer: syz [ 728.502844][T13201] usb 6-1: SerialNumber: syz [ 728.532972][T13201] usb 6-1: config 0 descriptor?? [ 728.542177][T13201] f81232 6-1:0.0: f81232 converter detected [ 728.554433][T13201] usb 6-1: f81232 converter now attached to ttyUSB0 [ 728.643612][T17781] chnl_net:caif_netlink_parms(): no params data found [ 728.860747][T17781] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.868105][T17781] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.876500][T17781] bridge_slave_0: entered allmulticast mode [ 728.886142][T17781] bridge_slave_0: entered promiscuous mode [ 728.903403][T17781] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.911654][T17781] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.940836][T17804] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 728.972331][T17781] bridge_slave_1: entered allmulticast mode [ 728.980565][T17781] bridge_slave_1: entered promiscuous mode [ 729.320660][ T5827] Bluetooth: hci3: command tx timeout [ 729.736283][T17781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.791904][T17781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.900570][T17781] team0: Port device team_slave_0 added [ 729.910767][T17781] team0: Port device team_slave_1 added [ 729.951941][T17781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.959368][T17781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.986104][T17781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.043433][T17781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.052079][T17781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.087192][T17781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.106743][T17823] xt_hashlimit: size too large, truncated to 1048576 [ 730.162087][T17826] xt_hashlimit: size too large, truncated to 1048576 [ 730.233331][T17781] hsr_slave_0: entered promiscuous mode [ 730.266244][T17826] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 730.327279][T17781] hsr_slave_1: entered promiscuous mode [ 730.399775][T17781] debugfs: 'hsr0' already exists in 'hsr' [ 730.405901][T17781] Cannot create hsr debugfs directory [ 730.910042][T17837] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3206'. [ 731.294113][ T5905] usb 6-1: USB disconnect, device number 17 [ 731.347543][ T5905] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 731.360427][ T5905] f81232 6-1:0.0: device disconnected [ 731.414114][ T5827] Bluetooth: hci3: command tx timeout [ 731.608512][T17781] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.874895][T17853] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3209'. [ 731.958685][T17781] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.204779][T17781] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.378282][ T42] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 732.499929][T17781] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.528685][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 732.535646][ T42] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 732.544222][ T42] usb 3-1: config 0 has no interface number 0 [ 732.572552][ T42] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 732.601922][ T42] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 732.638093][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.657399][ T42] usb 3-1: Product: syz [ 732.680890][ T42] usb 3-1: Manufacturer: syz [ 732.703173][ T42] usb 3-1: SerialNumber: syz [ 732.735311][ T42] usb 3-1: config 0 descriptor?? [ 732.747727][T17871] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 732.799984][T17781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 732.822916][T17781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 732.859425][T17781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 732.877453][T17781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 732.961538][T17882] FAULT_INJECTION: forcing a failure. [ 732.961538][T17882] name failslab, interval 1, probability 0, space 0, times 0 [ 732.990014][T17871] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 733.020360][T17882] CPU: 1 UID: 0 PID: 17882 Comm: syz.3.3215 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.020390][T17882] Tainted: [L]=SOFTLOCKUP [ 733.020397][T17882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 733.020412][T17882] Call Trace: [ 733.020420][T17882] [ 733.020435][T17882] dump_stack_lvl+0xe8/0x150 [ 733.020468][T17882] should_fail_ex+0x412/0x560 [ 733.020500][T17882] should_failslab+0xa8/0x100 [ 733.020526][T17882] __kmalloc_noprof+0xe8/0x760 [ 733.020548][T17882] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 733.020574][T17882] tomoyo_realpath_from_path+0xe3/0x5d0 [ 733.020603][T17882] ? tomoyo_path_number_perm+0x219/0x630 [ 733.020628][T17882] tomoyo_path_number_perm+0x246/0x630 [ 733.020655][T17882] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 733.020682][T17882] ? __lock_acquire+0x6b5/0x2cf0 [ 733.020716][T17882] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 733.020760][T17882] ? __fget_files+0x2a/0x420 [ 733.020780][T17882] ? __fget_files+0x2a/0x420 [ 733.020795][T17882] ? __fget_files+0x3a0/0x420 [ 733.020811][T17882] ? __fget_files+0x2a/0x420 [ 733.020831][T17882] security_file_ioctl+0xc3/0x2a0 [ 733.020857][T17882] __se_sys_ioctl+0x47/0x170 [ 733.020881][T17882] do_syscall_64+0x14d/0xf80 [ 733.020904][T17882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.020921][T17882] ? clear_bhb_loop+0x40/0x90 [ 733.020943][T17882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.020961][T17882] RIP: 0033:0x7fa19a99c819 [ 733.020979][T17882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.020993][T17882] RSP: 002b:00007fa19b7ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 733.021013][T17882] RAX: ffffffffffffffda RBX: 00007fa19ac15fa0 RCX: 00007fa19a99c819 [ 733.021031][T17882] RDX: 0000200000000280 RSI: 00000000c02c564a RDI: 0000000000000004 [ 733.021042][T17882] RBP: 00007fa19b7ef090 R08: 0000000000000000 R09: 0000000000000000 [ 733.021053][T17882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.021063][T17882] R13: 00007fa19ac16038 R14: 00007fa19ac15fa0 R15: 00007fa19ad3fa48 [ 733.021092][T17882] [ 733.021119][T17882] ERROR: Out of memory at tomoyo_realpath_from_path. [ 733.251013][T17871] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 733.295947][T17781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.320976][T17781] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.341879][T10507] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.349081][T10507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.393058][ T42] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 733.416483][T12329] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.423706][T12329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.424329][ T42] asix 3-1:0.188: probe with driver asix failed with error -61 [ 733.452963][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3219'. [ 733.488342][ T5827] Bluetooth: hci3: command tx timeout [ 733.606895][T17781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.630564][T17895] SET target dimension over the limit! [ 733.670246][T17895] netdevsim netdevsim3: Direct firmware load for / [ 733.670246][T17895] failed with error -2 [ 733.681458][T17895] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 733.681458][T17895] [ 733.786153][T17781] veth0_vlan: entered promiscuous mode [ 733.916435][T17781] veth1_vlan: entered promiscuous mode [ 734.006612][T17781] veth0_macvtap: entered promiscuous mode [ 734.021854][T17781] veth1_macvtap: entered promiscuous mode [ 734.096294][T17781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.110848][T16937] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 734.132149][T17781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.195273][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.209017][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.256575][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.268689][T16937] usb 6-1: Invalid ep0 maxpacket: 64 [ 734.282235][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.399736][T16937] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 734.437032][T10507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.462725][T10507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.489703][T10507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.497912][T10507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.550616][T16937] usb 6-1: Invalid ep0 maxpacket: 64 [ 734.556457][T16937] usb usb6-port1: attempt power cycle [ 734.583593][T17909] usb usb8: usbfs: process 17909 (syz.4.3222) did not claim interface 0 before use [ 734.614527][T17909] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3222'. [ 734.858572][ T9] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 734.868956][ T796] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 734.899971][T16937] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 734.922034][T16937] usb 6-1: Invalid ep0 maxpacket: 64 [ 735.011238][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 735.021708][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 735.026908][ T9] usb 5-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 735.044574][ T796] usb 2-1: config index 0 descriptor too short (expected 67, got 36) [ 735.053048][T16937] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 735.063759][ T9] usb 5-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 735.068288][ T5891] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 735.109106][ T42] usb 3-1: USB disconnect, device number 66 [ 735.119004][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.150887][T16937] usb 6-1: Invalid ep0 maxpacket: 64 [ 735.161682][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.174320][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 735.185256][T16937] usb usb6-port1: unable to enumerate USB device [ 735.233082][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 735.269290][ T796] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 735.278973][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 735.286983][ T9] usb 5-1: SerialNumber: syz [ 735.296379][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.309483][ T796] usb 2-1: config 0 descriptor?? [ 735.320924][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 735.355934][ T5891] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 735.362659][ T9] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 735.375571][ T9] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 735.382837][ T5891] usb 4-1: config 1 has no interface number 0 [ 735.387734][ T9] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 735.396002][ T5891] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 735.466856][ T5891] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 735.481739][ T5891] usb 4-1: config 1 interface 105 has no altsetting 0 [ 735.492546][ T5891] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 735.508360][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 735.522513][ T5891] usb 4-1: Product: syz [ 735.526987][ T5891] usb 4-1: Manufacturer: syz [ 735.532277][ T5891] usb 4-1: SerialNumber: syz [ 735.546142][T17917] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 735.558518][ T5827] Bluetooth: hci3: command tx timeout [ 735.569826][T17917] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 735.598249][ T42] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 735.733688][T17929] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3191'. [ 735.796792][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 735.804777][ T42] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 735.813447][ T42] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 735.844164][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 55, changing to 9 [ 735.867463][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8496, setting to 1024 [ 735.896054][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 735.916010][ T42] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 735.947221][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.977399][ T42] usb 3-1: config 0 descriptor?? [ 736.006536][ T42] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input72 [ 736.045756][T17917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.060676][T17917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.104365][T17917] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 736.122867][T17917] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 736.489405][ T5861] usb 3-1: USB disconnect, device number 67 [ 736.605466][ T5891] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 736.622894][ T5891] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 736.623438][T17917] program syz.3.3224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 736.646435][T17917] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 736.677755][ T5891] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 736.792621][ T5891] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e4:5d:bf:c3:ab:ee [ 736.849840][ T5891] usb 4-1: USB disconnect, device number 34 [ 736.892689][ T5891] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 736.969216][ T5891] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 736.983896][ T5891] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 737.063054][ T5891] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 737.556483][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.684483][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.753374][T17946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 737.809426][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.824911][T17946] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3231'. [ 737.888773][ T9] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 738.022271][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.061097][ T9] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 738.074648][ T9] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 738.096446][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 738.125207][ T9] usb 3-1: string descriptor 0 read error: -22 [ 738.134799][ T9] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.40 [ 738.151964][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.176612][ T796] usbhid 2-1:0.0: can't add hid device: -71 [ 738.183732][ T796] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 738.208113][ T796] usb 2-1: USB disconnect, device number 21 [ 738.255415][ T5905] usb 5-1: USB disconnect, device number 62 [ 738.288836][T17481] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 738.459351][T17481] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 738.472129][T17481] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 738.483893][T17481] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 738.904893][ T9] hid-udraw 0003:20D6:CB17.001C: unknown main item tag 0x2 [ 738.920760][ T9] hid-udraw 0003:20D6:CB17.001C: unexpected long global item [ 738.938990][ T9] hid-udraw 0003:20D6:CB17.001C: parse failed [ 738.953347][ T9] hid-udraw 0003:20D6:CB17.001C: probe with driver hid-udraw failed with error -22 [ 738.990662][T17481] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 739.048756][T17481] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 739.099399][T17944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.127960][T17944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.155586][T17481] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 739.177160][T17944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.246490][T17944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.267507][T17481] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 739.308614][T17481] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 739.359771][ T5827] Bluetooth: hci2: unexpected event for opcode 0x040d [ 739.370424][T17481] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 739.419553][T17968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.448631][T17968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.510103][T17481] usb 4-1: string descriptor 0 read error: -22 [ 739.517507][ T13] bridge_slave_1: left allmulticast mode [ 739.523692][T17481] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 739.533915][ T13] bridge_slave_1: left promiscuous mode [ 739.568788][T17481] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.577095][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.742120][T17481] adutux 4-1:168.0: interrupt endpoints not found [ 739.752473][ T13] bridge_slave_0: left allmulticast mode [ 739.764795][ T13] bridge_slave_0: left promiscuous mode [ 739.773751][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.077968][T17984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.108901][T17984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.308467][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 740.438350][ T9] usb 5-1: device descriptor read/64, error -71 [ 740.577600][ T13] bond1 (unregistering): (slave gretap1): Releasing active interface [ 740.639134][ T13] dvmrp8 (unregistering): left allmulticast mode [ 740.680066][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 740.710229][T17481] usb 3-1: USB disconnect, device number 68 [ 740.818282][ T9] usb 5-1: device descriptor read/64, error -71 [ 740.926519][ T13] bond0 (unregistering): (slave 70): Releasing backup interface [ 740.935794][ T9] usb usb5-port1: attempt power cycle [ 740.945618][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.982016][ T13] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 740.999590][ T13] bond0 (unregistering): Released all slaves [ 741.138230][T17481] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 741.141033][ T5891] usb 4-1: USB disconnect, device number 35 [ 741.165941][ T13] bond1 (unregistering): Released all slaves [ 741.213806][ T13] bond2 (unregistering): Released all slaves [ 741.271031][ T13] bond3 (unregistering): Released all slaves [ 741.278227][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 741.288956][ T13] bond4 (unregistering): Released all slaves [ 741.326647][ T9] usb 5-1: device descriptor read/8, error -71 [ 741.333168][T17481] usb 3-1: device descriptor read/64, error -71 [ 741.398707][T18004] FAULT_INJECTION: forcing a failure. [ 741.398707][T18004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.420826][T18004] CPU: 1 UID: 0 PID: 18004 Comm: syz.1.3245 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.420850][T18004] Tainted: [L]=SOFTLOCKUP [ 741.420856][T18004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 741.420865][T18004] Call Trace: [ 741.420870][T18004] [ 741.420876][T18004] dump_stack_lvl+0xe8/0x150 [ 741.420900][T18004] should_fail_ex+0x412/0x560 [ 741.420924][T18004] _copy_to_user+0x31/0xb0 [ 741.420942][T18004] simple_read_from_buffer+0xe1/0x170 [ 741.420965][T18004] proc_fail_nth_read+0x1bb/0x230 [ 741.420987][T18004] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 741.421008][T18004] ? rw_verify_area+0x2a6/0x4d0 [ 741.421022][T18004] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 741.421042][T18004] vfs_read+0x20c/0xa70 [ 741.421055][T18004] ? fdget_pos+0x246/0x320 [ 741.421070][T18004] ? __pfx___mutex_lock+0x10/0x10 [ 741.421089][T18004] ? __pfx_vfs_read+0x10/0x10 [ 741.421105][T18004] ? __fget_files+0x2a/0x420 [ 741.421120][T18004] ? __fget_files+0x3a0/0x420 [ 741.421132][T18004] ? __fget_files+0x2a/0x420 [ 741.421151][T18004] ksys_read+0x150/0x270 [ 741.421168][T18004] ? __pfx_ksys_read+0x10/0x10 [ 741.421182][T18004] ? __pfx_v4l2_ioctl+0x10/0x10 [ 741.421207][T18004] do_syscall_64+0x14d/0xf80 [ 741.421224][T18004] ? trace_irq_disable+0x3b/0x150 [ 741.421236][T18004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.421250][T18004] ? clear_bhb_loop+0x40/0x90 [ 741.421266][T18004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.421279][T18004] RIP: 0033:0x7fcb0315d04e [ 741.421293][T18004] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 741.421303][T18004] RSP: 002b:00007fcb040d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 741.421318][T18004] RAX: ffffffffffffffda RBX: 00007fcb040d16c0 RCX: 00007fcb0315d04e [ 741.421328][T18004] RDX: 000000000000000f RSI: 00007fcb040d10a0 RDI: 0000000000000005 [ 741.421336][T18004] RBP: 00007fcb040d1090 R08: 0000000000000000 R09: 0000000000000000 [ 741.421344][T18004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.421351][T18004] R13: 00007fcb03416038 R14: 00007fcb03415fa0 R15: 00007fcb0353fa48 [ 741.421372][T18004] [ 741.693343][ T13] tipc: Disabling bearer [ 741.698670][ T13] tipc: Left network mode [ 741.728384][ T5891] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 741.787844][T17481] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 741.795554][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 741.828564][ T9] usb 5-1: device descriptor read/8, error -71 [ 741.859176][ T13] IPVS: stopping backup sync thread 9640 ... [ 741.900061][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.919411][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.928310][T17481] usb 3-1: device descriptor read/64, error -71 [ 741.931684][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.938863][ T9] usb usb5-port1: unable to enumerate USB device [ 741.966050][ T5891] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 742.004773][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.042304][T17481] usb usb3-port1: attempt power cycle [ 742.045680][ T5891] usb 4-1: config 0 descriptor?? [ 742.212015][T13201] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 742.247471][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.272612][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.313775][ T13] veth1_macvtap: left promiscuous mode [ 742.326256][ T13] veth0_macvtap: left promiscuous mode [ 742.388362][T17481] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 742.396050][T13201] usb 6-1: device descriptor read/64, error -71 [ 742.404655][ T13] veth1_vlan: left promiscuous mode [ 742.414490][ T13] veth0_vlan: left promiscuous mode [ 742.431191][ T5891] usb 4-1: USB disconnect, device number 36 [ 742.441602][T17481] usb 3-1: device descriptor read/8, error -71 [ 742.641687][T18030] netlink: 'syz.1.3251': attribute type 4 has an invalid length. [ 742.658623][T13201] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 742.716739][T17481] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 742.739099][T17481] usb 3-1: device descriptor read/8, error -71 [ 742.808649][T13201] usb 6-1: device descriptor read/64, error -71 [ 742.853409][T17481] usb usb3-port1: unable to enumerate USB device [ 742.919608][T13201] usb usb6-port1: attempt power cycle [ 743.180837][ T13] team_slave_1 (unregistering): left promiscuous mode [ 743.204864][ T13] team0 (unregistering): Port device team_slave_1 removed [ 743.249102][ T13] team_slave_0 (unregistering): left promiscuous mode [ 743.267511][ T13] team0 (unregistering): Port device team_slave_0 removed [ 743.299181][T18043] netlink: 'syz.3.3252': attribute type 10 has an invalid length. [ 743.328639][T13201] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 743.357297][T13201] usb 6-1: device descriptor read/8, error -71 [ 743.614987][T13201] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 743.659174][T13201] usb 6-1: device descriptor read/8, error -71 [ 743.804600][T13201] usb usb6-port1: unable to enumerate USB device [ 743.932129][T18055] xt_hashlimit: size too large, truncated to 1048576 [ 743.969619][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 744.110406][ T13] IPVS: stop unused estimator thread 0... [ 744.130498][T18060] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 744.138219][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 744.197320][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.258320][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.288278][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 744.320791][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.384471][ T9] usb 4-1: config 0 descriptor?? [ 744.421845][ T9] hub 4-1:0.0: USB hub found [ 744.749009][T18051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.782652][T18051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.809910][ T9] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 745.248441][ T5861] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 745.262714][ T9] hid-generic 0003:046D:C31C.001D: unknown main item tag 0x0 [ 745.348637][ T9] hid-generic 0003:046D:C31C.001D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 745.642495][ T5861] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.659214][ T5861] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 238, using maximum allowed: 30 [ 745.670643][ T5861] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 745.684784][ T5861] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 745.697969][ T5861] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 238 [ 745.748432][ T24] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 745.763786][ T9] usb 4-1: USB disconnect, device number 37 [ 745.807035][ T5861] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 745.826824][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.835213][ T5861] usb 2-1: Product: syz [ 745.844235][ T5861] usb 2-1: Manufacturer: syz [ 745.851135][ T5861] usb 2-1: SerialNumber: syz [ 745.893649][T18073] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 745.905191][ T5861] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 745.911969][ T5861] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 745.922538][ T5861] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 745.929976][ T5861] cdc_ncm 2-1:1.1: bind() failure [ 745.972024][ T24] usb 3-1: config 0 has no interfaces? [ 745.977919][ T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 745.993832][ T5861] usbtest 2-1:1.1: couldn't get endpoints, -22 [ 746.000253][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.008793][ T5861] usbtest 2-1:1.1: probe with driver usbtest failed with error -22 [ 746.029230][ T24] usb 3-1: config 0 descriptor?? [ 746.117589][ T5861] usb 2-1: USB disconnect, device number 22 [ 746.539575][ T9] usb 5-1: new low-speed USB device number 67 using dummy_hcd [ 746.688464][ T9] usb 5-1: device descriptor read/64, error -71 [ 746.787417][T18118] netlink: 'syz.5.3266': attribute type 3 has an invalid length. [ 746.795261][T18118] netlink: 788 bytes leftover after parsing attributes in process `syz.5.3266'. [ 746.934060][ T9] usb 5-1: new low-speed USB device number 68 using dummy_hcd [ 747.008357][T13201] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 747.079230][ T9] usb 5-1: device descriptor read/64, error -71 [ 747.158238][T13201] usb 2-1: Using ep0 maxpacket: 8 [ 747.189394][ T9] usb usb5-port1: attempt power cycle [ 747.251562][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.257903][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.385764][T13201] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 747.402976][T13201] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 747.477061][T13201] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 747.642917][ T9] usb 5-1: new low-speed USB device number 69 using dummy_hcd [ 747.730117][ T9] usb 5-1: device descriptor read/8, error -71 [ 747.879635][T13201] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 747.921648][T13201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.957712][T13201] hub 2-1:1.0: bad descriptor, ignoring hub [ 747.973137][T13201] hub 2-1:1.0: probe with driver hub failed with error -5 [ 747.985652][T13201] cdc_wdm 2-1:1.0: skipping garbage [ 747.999523][ T9] usb 5-1: new low-speed USB device number 70 using dummy_hcd [ 748.023896][T13201] cdc_wdm 2-1:1.0: skipping garbage [ 748.029413][T13201] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 748.069846][ T9] usb 5-1: device descriptor read/8, error -71 [ 748.188315][ T9] usb usb5-port1: unable to enumerate USB device [ 748.278858][T17481] usb 2-1: USB disconnect, device number 23 [ 748.397254][ T24] usb 3-1: string descriptor 0 read error: -71 [ 748.445876][ T24] usb 3-1: USB disconnect, device number 73 [ 748.608282][T17481] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 748.798468][T17481] usb 2-1: Using ep0 maxpacket: 8 [ 748.813144][T17481] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 748.897574][T17481] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 748.933509][T17481] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 748.958279][T17481] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 748.967914][T17481] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.068515][T18149] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3271'. [ 749.122103][T17481] hub 2-1:1.0: bad descriptor, ignoring hub [ 749.128059][T17481] hub 2-1:1.0: probe with driver hub failed with error -5 [ 749.311626][T17481] cdc_wdm 2-1:1.0: skipping garbage [ 749.332382][T17481] cdc_wdm 2-1:1.0: skipping garbage [ 749.337611][T17481] cdc_wdm 2-1:1.0: invalid descriptor buffer length [ 749.352484][T18156] netlink: 'syz.4.3274': attribute type 10 has an invalid length. [ 749.370569][T17481] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 749.477324][T17481] usb 2-1: USB disconnect, device number 24 [ 749.530229][T18156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 749.618413][T18159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3274'. [ 749.830579][T18163] binder: BINDER_SET_CONTEXT_MGR already set [ 749.836647][T18163] binder: 18162:18163 ioctl 4018620d 200000004a80 returned -16 [ 749.938396][ T9] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 750.061881][T18171] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3277'. [ 750.132760][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 750.148329][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 750.168304][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 750.181539][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.251390][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 750.260674][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 750.274120][ T9] usb 5-1: Product: syz [ 750.320635][ T9] usb 5-1: Manufacturer: syz [ 750.411471][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 750.481168][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 750.490369][ T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 750.618608][ T9] usb 5-1: USB disconnect, device number 71 [ 751.052266][T18180] Failed to get privilege flags for destination (handle=0x2:0x400) [ 751.256335][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3280'. [ 751.308676][T13201] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 751.449197][T18208] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3288'. [ 751.469180][T13201] usb 6-1: too many configurations: 47, using maximum allowed: 8 [ 751.495339][T13201] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 751.506697][T13201] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.651650][T13201] usb 6-1: Product: syz [ 751.662773][T13201] usb 6-1: Manufacturer: syz [ 751.683083][T13201] usb 6-1: SerialNumber: syz [ 751.704913][T13201] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 751.722458][ T24] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 752.379690][T13201] usb 6-1: USB disconnect, device number 26 [ 752.448293][ T5891] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 752.540953][T18230] Cannot find add_set index 0 as target [ 752.549864][T18230] netdevsim netdevsim1: Direct firmware load for / [ 752.549864][T18230] failed with error -2 [ 752.561063][T18230] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 752.561063][T18230] [ 752.688436][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 752.708508][ T5891] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 752.758675][ T5891] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 752.776916][ T5891] usb 4-1: config 0 has no interface number 0 [ 752.794479][ T5891] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 752.810002][ T5891] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 752.835847][ T5891] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 752.844100][ T5891] usb 4-1: config 0 has no interface number 0 [ 752.850540][ T5891] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 752.861551][ T5891] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 752.938099][ T5891] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 752.946356][ T5891] usb 4-1: config 0 has no interface number 0 [ 752.967423][ T5891] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 752.998844][ T24] usb 6-1: Service connection timeout for: 256 [ 753.005229][ T24] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 753.013419][ T5891] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 753.034343][ T24] ath9k_htc: Failed to initialize the device [ 753.034692][T13201] usb 6-1: ath9k_htc: USB layer deinitialized [ 753.044183][ T5891] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 753.044209][ T5891] usb 4-1: config 0 has no interface number 0 [ 753.044249][ T5891] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 753.044272][ T5891] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 753.045263][ T5891] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 753.045287][ T5891] usb 4-1: config 0 has no interface number 0 [ 753.045326][ T5891] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 753.045349][ T5891] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 753.046246][ T5891] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 753.046269][ T5891] usb 4-1: config 0 has no interface number 0 [ 753.046308][ T5891] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 753.046329][ T5891] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 753.049012][ T5891] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 753.049036][ T5891] usb 4-1: config 0 has no interface number 0 [ 753.049075][ T5891] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 753.049097][ T5891] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 753.051985][ T5891] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 753.052010][ T5891] usb 4-1: config 0 has no interface number 0 [ 753.052050][ T5891] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 753.052071][ T5891] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 753.054218][ T5891] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 753.054246][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.054266][ T5891] usb 4-1: Product: syz [ 753.054282][ T5891] usb 4-1: Manufacturer: syz [ 753.054297][ T5891] usb 4-1: SerialNumber: syz [ 753.057337][ T5891] usb 4-1: config 0 descriptor?? [ 753.570099][ T5891] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 753.772869][T18221] ªªªªª»: renamed from virt_wifi0 [ 753.814084][ T5891] etas_es58x 4-1:0.2: could not parse product info: '424242424242' [ 753.862659][ T24] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 753.918264][T13201] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 754.008292][ T24] usb 5-1: device descriptor read/64, error -71 [ 754.044573][T18221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.070586][T13201] usb 6-1: Using ep0 maxpacket: 32 [ 754.075569][T18221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.077931][T13201] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 754.098243][ T5905] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 754.104462][T13201] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 754.109461][T18221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.125464][T18221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.126823][T13201] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 754.158306][ T5891] usb 4-1: USB disconnect, device number 38 [ 754.166190][ T5891] etas_es58x 4-1:0.2: Disconnecting syz syz [ 754.175741][T13201] usb 6-1: config 1 has no interface number 0 [ 754.202576][T13201] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 754.217675][T13201] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 754.231934][T13201] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 754.242410][T13201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.258817][ T24] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 754.268206][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 754.288405][ T5905] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 754.292998][T13201] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 754.323350][ T5905] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 754.341838][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.352523][ T5905] usb 3-1: config 0 descriptor?? [ 754.399281][ T24] usb 5-1: device descriptor read/64, error -71 [ 754.503985][T13201] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 754.512203][ T24] usb usb5-port1: attempt power cycle [ 754.564595][T18251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.568803][ T5861] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 754.578079][T18251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.600715][T18251] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.3303'. [ 754.738268][ T5861] usb 2-1: Using ep0 maxpacket: 8 [ 754.756490][ T5861] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 754.780884][ T5861] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 754.795120][T18286] fuse: Bad value for 'fd' [ 754.800923][ T5861] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 754.813419][ T5861] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 754.843760][ T5861] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 754.853039][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.883842][ T5861] hub 2-1:1.0: bad descriptor, ignoring hub [ 754.886087][T18293] xt_hashlimit: size too large, truncated to 1048576 [ 754.889887][ T24] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 754.910250][ T5861] hub 2-1:1.0: probe with driver hub failed with error -5 [ 754.918500][ T5861] cdc_wdm 2-1:1.0: skipping garbage [ 754.927577][ T5861] cdc_wdm 2-1:1.0: skipping garbage [ 754.934372][ T24] usb 5-1: device descriptor read/8, error -71 [ 754.952165][ T5861] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 754.964196][T18296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.972073][ T5861] cdc_wdm 2-1:1.0: Unknown control protocol [ 754.984375][T18296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.036537][T18296] bridge1: entered promiscuous mode [ 755.056848][T18296] bridge1: entered allmulticast mode [ 755.090700][T18269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.126584][T18269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.138312][ T5861] usb 6-1: USB disconnect, device number 27 [ 755.145733][ T5861] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 755.208305][ T24] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 755.229147][ T24] usb 5-1: device descriptor read/8, error -71 [ 755.238486][ T42] usb 2-1: USB disconnect, device number 25 [ 755.338552][ T24] usb usb5-port1: unable to enumerate USB device [ 755.588307][ T5861] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 755.748287][ T5861] usb 2-1: Using ep0 maxpacket: 16 [ 755.762141][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 755.773752][ T5861] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 755.784897][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024 [ 755.807552][ T5861] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 755.818116][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12161, setting to 1024 [ 755.831386][ T5861] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 755.849958][ T5861] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 755.859352][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.867904][ T5861] usb 2-1: Product: syz [ 755.873739][ T5861] usb 2-1: Manufacturer: syz [ 755.878782][ T5861] usb 2-1: SerialNumber: syz [ 755.896195][ T5861] usb 2-1: config 0 descriptor?? [ 755.925204][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 755.932902][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 755.940093][ T5861] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 756.117153][ C1] mcba_usb 2-1:0.0 can0: Unsupported msg (0x22) [ 756.320237][ T5861] usb 2-1: USB disconnect, device number 26 [ 756.330902][T18269] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 756.338206][T18269] IPv6: NLM_F_CREATE should be set when creating new route [ 756.355759][ T5861] mcba_usb 2-1:0.0 can0: device disconnected [ 756.738215][ T5861] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 756.877027][ T42] usb 3-1: USB disconnect, device number 74 [ 756.899024][ T5861] usb 2-1: Using ep0 maxpacket: 16 [ 756.923372][ T5861] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.953937][ T5861] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 756.983034][ T5861] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 757.002093][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.019958][ T5861] usb 2-1: Product: syz [ 757.028596][ T5861] usb 2-1: Manufacturer: syz [ 757.038807][ T5861] usb 2-1: SerialNumber: syz [ 757.259413][ T5861] usb 2-1: 0:2 : does not exist [ 757.274493][ T5861] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 757.334015][ T5861] usb 2-1: USB disconnect, device number 27 [ 757.361466][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 757.377669][ T42] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 757.385471][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 757.518843][ T42] usb 3-1: device descriptor read/64, error -71 [ 757.538635][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 757.545313][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.567170][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.588179][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 757.617836][T18381] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3325'. [ 757.618250][ T24] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 757.658178][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.669132][ T24] usb 4-1: config 0 descriptor?? [ 757.778325][ T42] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 757.869558][T18386] syzkaller0: entered promiscuous mode [ 757.875320][T18386] syzkaller0: entered allmulticast mode [ 757.897065][T18386] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3327'. [ 757.938475][ T42] usb 3-1: device descriptor read/64, error -71 [ 758.058839][ T42] usb usb3-port1: attempt power cycle [ 758.156499][ T24] waterforce 0003:1044:7A4D.001E: unknown main item tag 0x0 [ 758.174840][ T24] waterforce 0003:1044:7A4D.001E: unknown main item tag 0x0 [ 758.188299][ T24] waterforce 0003:1044:7A4D.001E: unknown main item tag 0x0 [ 758.195832][ T24] waterforce 0003:1044:7A4D.001E: unknown main item tag 0x0 [ 758.207050][ T24] waterforce 0003:1044:7A4D.001E: unknown main item tag 0x0 [ 758.219719][ T24] waterforce 0003:1044:7A4D.001E: unknown main item tag 0x0 [ 758.230338][ T24] waterforce 0003:1044:7A4D.001E: unknown main item tag 0x0 [ 758.242995][ T24] waterforce 0003:1044:7A4D.001E: unknown main item tag 0x0 [ 758.255122][ T24] waterforce 0003:1044:7A4D.001E: unexpected long global item [ 758.267281][ T24] waterforce 0003:1044:7A4D.001E: hid parse failed with -22 [ 758.278642][ T24] waterforce 0003:1044:7A4D.001E: probe with driver waterforce failed with error -22 [ 758.645720][ T5905] usb 4-1: USB disconnect, device number 39 [ 758.798231][ T42] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 758.828907][ T42] usb 3-1: device descriptor read/8, error -71 [ 758.918676][ T24] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 759.068228][ T42] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 759.090073][ T24] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 759.100037][ T5891] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 759.107817][ T24] usb 2-1: config 0 has an invalid interface number: 2 but max is -1 [ 759.117401][ T42] usb 3-1: device descriptor read/8, error -71 [ 759.124597][ T24] usb 2-1: config 0 has an invalid interface number: 2 but max is -1 [ 759.127675][T18397] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 759.133498][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.157960][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 759.168743][ T24] usb 2-1: config 0 has no interface number 0 [ 759.174862][ T24] usb 2-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 759.190872][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 759.200667][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.209054][ T24] usb 2-1: Product: syz [ 759.213346][ T24] usb 2-1: Manufacturer: syz [ 759.217949][ T24] usb 2-1: SerialNumber: syz [ 759.233980][ T42] usb usb3-port1: unable to enumerate USB device [ 759.244590][ T24] usb 2-1: config 0 descriptor?? [ 759.288271][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 759.295407][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.307143][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.316982][ T5891] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 759.326631][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.336602][ T5891] usb 5-1: config 0 descriptor?? [ 759.345050][ T5891] hub 5-1:0.0: USB hub found [ 759.466355][ T24] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 759.476607][ T24] usb 2-1: MIDIStreaming interface descriptor not found [ 759.508482][ T42] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 759.554826][T18413] ================================================================== [ 759.562938][T18413] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 759.570685][T18413] Read of size 8 at addr ffff8880503a9020 by task syz.5.3335/18413 [ 759.578590][T18413] [ 759.580921][T18413] CPU: 0 UID: 0 PID: 18413 Comm: syz.5.3335 Tainted: G L syzkaller #0 PREEMPT(full) [ 759.580949][T18413] Tainted: [L]=SOFTLOCKUP [ 759.580958][T18413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 759.580970][T18413] Call Trace: [ 759.580978][T18413] [ 759.580986][T18413] dump_stack_lvl+0xe8/0x150 [ 759.581017][T18413] print_report+0xba/0x230 [ 759.581040][T18413] ? af_alg_pull_tsgl+0x1c6/0x740 [ 759.581070][T18413] kasan_report+0x117/0x150 [ 759.581096][T18413] ? af_alg_pull_tsgl+0x1c6/0x740 [ 759.581129][T18413] af_alg_pull_tsgl+0x1c6/0x740 [ 759.581165][T18413] skcipher_recvmsg+0x5df/0x1140 [ 759.581194][T18413] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 759.581216][T18413] ? aa_sock_msg_perm+0xf1/0x1b0 [ 759.581246][T18413] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 759.581268][T18413] ? security_socket_recvmsg+0x7e/0x2c0 [ 759.581290][T18413] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 759.581312][T18413] sock_recvmsg+0x172/0x1b0 [ 759.581332][T18413] __sys_recvfrom+0x240/0x3c0 [ 759.581357][T18413] ? __pfx___sys_recvfrom+0x10/0x10 [ 759.581390][T18413] ? exc_page_fault+0x6a/0xc0 [ 759.581415][T18413] ? do_user_addr_fault+0xc6f/0x1340 [ 759.581442][T18413] __x64_sys_recvfrom+0xde/0x100 [ 759.581467][T18413] do_syscall_64+0x14d/0xf80 [ 759.581492][T18413] ? trace_irq_disable+0x3b/0x150 [ 759.581510][T18413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.581529][T18413] ? clear_bhb_loop+0x40/0x90 [ 759.581550][T18413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.581570][T18413] RIP: 0033:0x7f4113f5d04e [ 759.581587][T18413] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 759.581605][T18413] RSP: 002b:00007f4114e35e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 759.581625][T18413] RAX: ffffffffffffffda RBX: 00007f4114e376c0 RCX: 00007f4113f5d04e [ 759.581641][T18413] RDX: 0000000000001000 RSI: 00007f4114e36000 RDI: 0000000000000006 [ 759.581653][T18413] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 759.581665][T18413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 759.581677][T18413] R13: 00007f4114e35f58 R14: 00007f4114e36000 R15: 0000000000000000 [ 759.581697][T18413] [ 759.581711][T18413] [ 759.587485][ T24] usb 2-1: USB disconnect, device number 28 [ 759.592630][T18413] Allocated by task 18413: [ 759.592643][T18413] kasan_save_track+0x3e/0x80 [ 759.592668][T18413] __kasan_kmalloc+0x93/0xb0 [ 759.592688][T18413] __kmalloc_noprof+0x35c/0x760 [ 759.656971][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 759.661961][T18413] sock_kmalloc+0xd6/0x160 [ 759.661991][T18413] skcipher_recvmsg+0x54d/0x1140 [ 759.662011][T18413] sock_recvmsg+0x172/0x1b0 [ 759.662027][T18413] __sys_recvfrom+0x240/0x3c0 [ 759.662047][T18413] __x64_sys_recvfrom+0xde/0x100 [ 759.662066][T18413] do_syscall_64+0x14d/0xf80 [ 759.662089][T18413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.662106][T18413] [ 759.662112][T18413] The buggy address belongs to the object at ffff8880503a9000 [ 759.662112][T18413] which belongs to the cache kmalloc-32 of size 32 [ 759.662130][T18413] The buggy address is located 0 bytes to the right of [ 759.662130][T18413] allocated 32-byte region [ffff8880503a9000, ffff8880503a9020) [ 759.662148][T18413] [ 759.662154][T18413] The buggy address belongs to the physical page: [ 759.662174][T18413] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x503a9 [ 759.662196][T18413] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 759.662215][T18413] page_type: f5(slab) [ 759.662231][T18413] raw: 00fff00000000000 ffff88813fea6780 dead000000000100 dead000000000122 [ 759.662247][T18413] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 759.662257][T18413] page dumped because: kasan: bad access detected [ 759.662272][T18413] page_owner tracks the page as allocated [ 759.662280][T18413] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 49, tgid 49 (kworker/u8:3), ts 213850692252, free_ts 213850160672 [ 759.988616][T18413] post_alloc_hook+0x231/0x280 [ 759.993416][T18413] get_page_from_freelist+0x24dc/0x2580 [ 759.998962][T18413] __alloc_frozen_pages_noprof+0x18d/0x380 [ 760.004763][T18413] allocate_slab+0x77/0x660 [ 760.009257][T18413] refill_objects+0x331/0x3c0 [ 760.013926][T18413] __pcs_replace_empty_main+0x2e6/0x730 [ 760.019465][T18413] __kmalloc_cache_noprof+0x392/0x660 [ 760.024836][T18413] batadv_mcast_mla_update+0xfdb/0x3740 [ 760.030375][T18413] process_scheduled_works+0xb6e/0x18c0 [ 760.035914][T18413] worker_thread+0xa53/0xfc0 [ 760.040499][T18413] kthread+0x388/0x470 [ 760.044554][T18413] ret_from_fork+0x51e/0xb90 [ 760.049133][T18413] ret_from_fork_asm+0x1a/0x30 [ 760.053888][T18413] page last free pid 5905 tgid 5905 stack trace: [ 760.060194][T18413] __free_frozen_pages+0xc2b/0xdb0 [ 760.065300][T18413] __slab_free+0x263/0x2b0 [ 760.069725][T18413] qlist_free_all+0x97/0x100 [ 760.074306][T18413] kasan_quarantine_reduce+0x148/0x160 [ 760.079753][T18413] __kasan_kmalloc+0x22/0xb0 [ 760.084332][T18413] __kvmalloc_node_noprof+0x528/0x8a0 [ 760.089709][T18413] bucket_table_alloc+0x63/0x370 [ 760.094638][T18413] rhashtable_rehash_alloc+0x8b/0x120 [ 760.100000][T18413] rht_deferred_worker+0x511/0x2180 [ 760.105189][T18413] process_scheduled_works+0xb6e/0x18c0 [ 760.110730][T18413] worker_thread+0xa53/0xfc0 [ 760.115316][T18413] kthread+0x388/0x470 [ 760.119371][T18413] ret_from_fork+0x51e/0xb90 [ 760.123956][T18413] ret_from_fork_asm+0x1a/0x30 [ 760.128719][T18413] [ 760.131030][T18413] Memory state around the buggy address: [ 760.136646][T18413] ffff8880503a8f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 760.144713][T18413] ffff8880503a8f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 760.152762][T18413] >ffff8880503a9000: 00 00 00 00 fc fc fc fc 00 00 00 fc fc fc fc fc [ 760.160810][T18413] ^ [ 760.165904][T18413] ffff8880503a9080: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 760.173956][T18413] ffff8880503a9100: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 760.182000][T18413] ================================================================== [ 760.221228][T18413] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 760.228471][T18413] CPU: 1 UID: 0 PID: 18413 Comm: syz.5.3335 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.239425][T18413] Tainted: [L]=SOFTLOCKUP [ 760.243752][T18413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 760.253822][T18413] Call Trace: [ 760.257099][T18413] [ 760.260022][T18413] vpanic+0x56c/0xa60 [ 760.264003][T18413] ? __pfx_vpanic+0x10/0x10 [ 760.268500][T18413] ? lockdep_hardirqs_on+0x7a/0x110 [ 760.273700][T18413] ? irqentry_exit+0x59e/0x620 [ 760.278455][T18413] ? trace_irq_disable+0x3b/0x150 [ 760.283467][T18413] panic+0xc5/0xd0 [ 760.287185][T18413] ? __pfx_panic+0x10/0x10 [ 760.291602][T18413] ? check_panic_on_warn+0x75/0xb0 [ 760.296699][T18413] ? af_alg_pull_tsgl+0x1c6/0x740 [ 760.301724][T18413] check_panic_on_warn+0x89/0xb0 [ 760.306646][T18413] ? af_alg_pull_tsgl+0x1c6/0x740 [ 760.311668][T18413] end_report+0x73/0x180 [ 760.315917][T18413] ? af_alg_pull_tsgl+0x1c6/0x740 [ 760.320931][T18413] kasan_report+0x128/0x150 [ 760.325423][T18413] ? af_alg_pull_tsgl+0x1c6/0x740 [ 760.330441][T18413] af_alg_pull_tsgl+0x1c6/0x740 [ 760.335288][T18413] skcipher_recvmsg+0x5df/0x1140 [ 760.340221][T18413] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 760.345581][T18413] ? aa_sock_msg_perm+0xf1/0x1b0 [ 760.350515][T18413] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 760.355787][T18413] ? security_socket_recvmsg+0x7e/0x2c0 [ 760.361322][T18413] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 760.366689][T18413] sock_recvmsg+0x172/0x1b0 [ 760.371217][T18413] __sys_recvfrom+0x240/0x3c0 [ 760.375970][T18413] ? __pfx___sys_recvfrom+0x10/0x10 [ 760.381164][T18413] ? exc_page_fault+0x6a/0xc0 [ 760.385833][T18413] ? do_user_addr_fault+0xc6f/0x1340 [ 760.391109][T18413] __x64_sys_recvfrom+0xde/0x100 [ 760.396036][T18413] do_syscall_64+0x14d/0xf80 [ 760.400615][T18413] ? trace_irq_disable+0x3b/0x150 [ 760.405667][T18413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.411738][T18413] ? clear_bhb_loop+0x40/0x90 [ 760.416413][T18413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.422296][T18413] RIP: 0033:0x7f4113f5d04e [ 760.426702][T18413] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 760.446302][T18413] RSP: 002b:00007f4114e35e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 760.454719][T18413] RAX: ffffffffffffffda RBX: 00007f4114e376c0 RCX: 00007f4113f5d04e [ 760.462691][T18413] RDX: 0000000000001000 RSI: 00007f4114e36000 RDI: 0000000000000006 [ 760.470660][T18413] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 760.478626][T18413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 760.486599][T18413] R13: 00007f4114e35f58 R14: 00007f4114e36000 R15: 0000000000000000 [ 760.494566][T18413] [ 760.498028][T18413] Kernel Offset: disabled [ 760.502337][T18413] Rebooting in 86400 seconds..