last executing test programs: 9.615824946s ago: executing program 2 (id=186): syz_mount_image$fuse(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x9801) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce03d4}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e23, 0x80000001, @empty}}, 0xffffff27, 0xfff8, 0xbd1, 0x2, 0x25, 0x0, 0x6}, &(0x7f0000000000)=0x9c) move_mount(r0, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000800)=[{&(0x7f0000000700)="ebfa0e81ceb3dc4c43c215dc4dade38ff8c84ace9d15af003afa41ae5fbebe5b175c12cf29c48c2d4b61ce76443645c1dc73113beeb9b5a73cd0415b0437839aa6c68111a4582c3a6a3bb8f9e0c37b9b3f386c", 0x53}], 0x1) syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000240)='./file0\x00', 0x20220a0, &(0x7f0000000440)=ANY=[@ANYBLOB="2c18198b989e1ff4f8aeb9e77225de02d2b45c1c77d3a0522834e6c03b1aafab613b910a9e094d55b618c167ca369595011102267840323c9d9b35ca8d8417eb100de632541cfef3f1cc0fad165a35fcc077ec9a56fd95fe55848dcd5da9b41cb1a154ce019eae6dbc1bcef99a19dce75003e55a15bcaa3c01114d3b80eb189e78590515395d67c59e828bf46e1a15f1dbc6ece63b4f878d91db1cf3ed9b8c750a7e5ee03ec6a4f9ce1610b77226adf69ce3e0440ff2719d2e3bd9c2ec80af3c32b34187a6fa13552c", @ANYRES32=r3], 0x0, 0x0, 0x0) open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x11d01) 9.414404498s ago: executing program 2 (id=187): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795fd2733f95da570bab301000000ffffffff2a2792a630d8fcdc"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) syz_emit_ethernet(0x23, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1286dd600a843500142f00fe800000000000000000000000000020fe8000000000000000000000000000aa3c0022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="3b4000000e780008"], 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0xa}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x2fb8, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x0, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xc, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fdfffc, 0x10, 0xfffffffd, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r9 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000140)=0x2000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d0072413"], 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.363447412s ago: executing program 2 (id=207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"/260], 0x104}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) 6.279744153s ago: executing program 2 (id=208): pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) memfd_create(0x0, 0xe) socket(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x5bb2, &(0x7f00000006c0)={0x0, 0x2, 0x0, 0x1}, &(0x7f0000000200), &(0x7f0000000100)) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x397, @empty}, 0x1c) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x1ce) lseek(r7, 0x2, 0x0) getdents64(r7, &(0x7f0000000000)=""/95, 0x5f) dup3(r6, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) 3.637017052s ago: executing program 1 (id=227): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000180)) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000140)=0x5) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0x5, 0x0, 0x9}, {0x6, 0x60, 0x0, 0x4}]}) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) 3.51030417s ago: executing program 1 (id=228): pipe(&(0x7f0000000040)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000fc0)=ANY=[@ANYBLOB="d40f00003300000126bd7000fddbdf258c0ffb80870f"], 0xfd4}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x7, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000840)={0x8, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000840)={0x8, {"063996a6c488923fb35dc13d99cce6df4af7e6bfc4871eccb920c951c6d37994e73aa4b21a3bc1d78fb5f0b43bc8f88cf4223925ab11105ccd7073188813c87a9cb1c34c8432e8ced17aa3f9d44262176d8fc7470d369159bbe575e7e241ecde6737e62fefffe4c158d417003224e788a6d50a815d4cd96112e071cc67a3480c30ef81dd1b451e4d5421cb03f591e572b4f845a0cd0640b6060db6c5fc2a3ac7d5b66be439b5eeda57baa2601aff9f4faf03a972020cfae58b0c1efe3a5deab845223ba175a82195f8311cc8f15f3a8080c8ed8854a47da2e128393585016bd00109adb7c58ac7fbb2418f7dd9634cd20a497b827335e8647e6cb546da64e9c522abee93c020d8a64ace5cf4b319c85eef6c2d4132268101b4fa670c3ec2c351ab92616eeb75cdfcb6d490850db537045218670236294fceddaa4311d91854939c72614c2a3241d467c68e7d80041e577dfc0da9d364c23057e816d0c7b7f1f32cd1a6b86d17b5a6972b40f88222c3801340c26daa16bcd99265ef7a81038e52da53cf7b1a04a80f1a028572d1f3920aa19d59ce32dccb27fdb5966b50f384652ba28bb37a1ed07c4ea20fc1a6c7efe88c19ba23244e6ee2e72dd44e7e79674c91856d4966b6c60792b8f4113e9f31d5d107474385a96ea40113c24af4a5188dd1e28ec5c5376765bc8a650c60bb8dfe046dbeaa8743a6b58210fa3ffe390e7f97385de5e1b9d60ff6f48d53d0d4d46da5474732fd3258a75fc1667054cd101a8139cd6bec7f16c83aa7f58498425638b1fd3dc00ac5f88560ea77ee1d3cd632925bc907c76cbe0bd6427b77e8f6163c5ab5bfd5d4a4255df691972bdae62d249113a2d23265a4758e1926b09dad973cea12916a408ce46ec7607c06ccfcb7aabbb7f2dda96cee4b8e82192b437a8f837413797a8c2b6076808d1b0d859a6e2ebc65eadd011aaa9da1a0af6baeb20bf1f5f3e999e90c788c61c389f20292a557207248aa23080fc7b6fe2e077266020d229c06cb953f17d8e804855bb487ac62c553e56288a3f6c2c6cc16b8dcda17cd8517825bcc06ed6d73725062379a8362b56f51f75f761efd6f2571153f9d89be8240aa60f2db9e621b14f3c7b0bb8c1a90e1e9bddb1fc750d87c8958d08f4d90e36fc2220f6a21f7f173dd7a85041357415eb5034ad2c1aac7f06751526a0fe17c0edd3c3dafd03d788b8855dcd2bb39e7494880f5ad4a6f2b53864a44a2451d91be55d5f9b367586ff625657360ff42ce4c817de00e889b4357e58abc030009c222ba2906f83accf5d194f243980e2cf6d660a3adcd00c73c0f0a9c11a3f1eb2bc90ebd42c34b0285b87176239fa538c39bac57b09fb30fb7a1bb0c15c613b897e2e0f3c1dfe1a12ca679b00a01b8dc60f11721cf3e4f31db6d76574f46914eff1f21183e54cbf4785c3767ab6040426f11cafd7a9d823b0f8334f72926830f7b70937546cd58052b4473ef8fa6ea1b43f0891116b8e3311b10253167e2915e22d7246e6649c4c9649bc77dfde91c1f727134875976d0de82567f3e36120317c5ff083c46f18744bbc22f658a60e9a619daf4bff613bfc63205de5929b13f61802e7b46b34d54aa3092c4da1854bcc6575f2a41550f7ca100657abea7c998b1400c0c8c42d893e985bb4503c6933593648c2a8195c504100e71497de859d469e2b6ab3447d22af659d43ae4823fc882fece9c4123e638da1bac680e24badc904a5506ece4950e7a6f34a88708cc70ce7089c0895faf2a6f2445d2bd2b9a842df0d96ca34c2fb4d0bef67afbf1be754db3eafd2233e9f16c9427c7e61ab751363659aab40af229e4ff99753789ce7ea382c41bb67e56940f045a4be65591b40cb74abb1f512e91cb35a06cdab9144457b10739ad115d0c8a957b53a35815b7a237f5cc018e47e44350d3b8b6d8b975b88716f767b365eef7692cd76f03131e6be7c43be79b9576dadb25cd8f15b6cbcf4369eb56667b9e2d26baea946a66e5a036198139ac76076d14dddf00c2bb21da0ff50f575e04825bd9ed0c976dd574b2a242c8673166027c9c97c6254fa492bcb22b36a1e19242564ae01f7e87c75c594153a495f58a3fa8d04011db6f24fcabdcccd2e6fa6c3052d155be658b08d633f02ab2c781997b2041b93815563ac67b03507d19714df7f1dfc9928c9fe2a9a117c2a83fe57eeb7725059eea85c0ef15d1e2b15b54bd01e186bba58afd9d87158662b7dc9660f8c0b67d0a55e70e6e15fece6b8a5ea1606c39abf7bb214a634476d21f7801dc5184e6cde3ff03985826b301f3469e1182f4c785cae1dd5cc9f1281b8c3e350b6a1a3bdd1c6615ee2f625c71d552a07ec691eb01573571a714eea767d752a02a4403c8ee38e87e878557116aa1dbb07c5489c4941b1612c6d3e6da18325648e6483d1d095297f8577c8e8c9601bf7bf12c34827bf0f0d68f0612eb2e72eaef363c73e80eba37d3448eb3b96b95f9a5712b3f0d4affb9a508d53cb7e95915be8e55b50e175885f8c09b3bbf1bac488c86aa8a918a36216e2ba3a931af85c5ec9b4451c519ae14cb6765a86fb403cb261e5907238d14c3a562503a6ad8cf95f0623771162e42ae576e6bf89f47eb168cc1d01d06883b35f06c3b5eef6a71b8ba13711f62b4a7e8799798172e73f55261f249e5acaeb3fdb655ce8e805db6fe38c8f6828e3dbc54b05cff4cb543d20b94ca1a6f7486c472f8c9fbe6ac17912780314afb3157dc104ab6fec6f5e015e9afacb5da7f1b9190fd3529bc4dde6c2f2295c0a55d7c4bf4d0887e5bfdd180e5bb37ddb16af57956ab17c36453c77d9c54f1cc085a500a06a6a25f497cd684d8658e63632dd2a3259db8e4c4cc3aa5426facdf401ded4ac174c6e3e532c740b71941ea2fa21aafc65b6d723d7d8882deae8f03462158af86c601e755d4685067572ff18e31e59835dc28c1a7fc1349f95565c72948346984e8a10e2d063cbeca0220b509c6d593ceb62da15c23520e6db008e211d63f9d916fb7e73eae6c84e205b20450e8f54046cb2338b0d9d6b3dbd14c6a6eeb4b9939bda56aa07132b80bbb3aaa7c3d34c8baf1387186af6d20686b8c8bd0ed7fdcab8066def9b417a2f0c8e09d83a72813fd5badfa7599155816c500319ca8621a9529555cdcbe41240b41a58a872a275e28509a79a7768a0fb5f12651188f875c8e44da791fd529191e1b1b82b70ab2857cadbb9006b153292503aa912b5165bb21ac2310f52f6d1656bec436a3d439045d8748acbdfd641d899d617f0839f5b2a71dd7fbffd47e47fdcfdbc486c111498615cc14d2834752409d94a2da9cec1c6c796adb7a13910cef6a81a5d57447ee0e8cbdddc6165f517d5958d6c3201f5a8c8e52696177cf9a9bf45a92739c0d600cbc136019ee3432717e4a03ca6a970a0cad31cba864dda1d9f92a538dfc000f3e9c0ee0d47940c7a96df3abc0aa80e21f285c3111cd9b83ac2a3ca9915928b5cd18bbc4cd6426d05c0339ff00384e118d95f4c428e98e68b9090fe6dd4b5c5fd0ebf8e4dd3a753f5dd3372718c4e77b0f8450e62feb4995a47f0b95c69f53f954573fc0263667509a4f6517b40ee6c3d032ac8186e6c63cd8d1b9841047e2f6b857d5e05ed49b9d38eb7e6a93201f2dd4e606a3aa8f7d4ad9c07b13e9fdb24c5ebee13b4fc6521a9cef9ce31fd6cc18ef28741690a9081fb7ce01f7d0ad3f11ba245d2ea8b5b8d37c9b4ac1c2c3bf0962d46fa3108d57176bbe438779decfe5b5f90190e6e9f9ae482af7a0b3cc4c93270da46835813f9b8aa070d835af03cce6346fd8c7bbaed6f73ec1549bc26584f7e0aa3be711370bc9ca22fc72963e4e994dcab85463db0934b50c4e80d1f6ba2584fffa733ae809d50e088ae8f67894dcb0cda59eff9d693906737ed128e4951d765598550ff380fb987eb3644c8ca26c48f6d6969c0bb201310bdc83457bff79bb3639753dd857187aece9bedd21e31f7d2c221a9b3fdd02d902552c7261781f0eb3b29ea0f8a6dedd750694ba7f487e6e5fad1a349f333b001293a2705a41903838001178e07036b87253edd15c48c5abb97bc7e4d32d2361602d48366861bedd35535d16cc0e9241d2ee96fbc71d91ab812da074abe0b5cc3e4cc16e9076038df500656431f77e23ee7d62c515d2a9f32277ec7cd37f391e434a7421cc70455110eaec59c89d4178e396c8e3b07311b5be70514663b56422a0e51c91f0cadcebb62b3024fd76fd8e4780ea8d31037638e418e8a86d5a882012d2f57f0085420e7b750a7ba07663645a017bd23723322b562a1296d79ceeee443f5ee42eaccac97907a33120b8dc3eda9d35abfa4917357f049d9c0e355a527aed210deeae791442550ba804f8e612bfdfa088d2326318f291ed14df567a16048ecb7c368fcdce558f9863ca43b34796d833f66aaf99d0f95e3778c97abf9ccf2661d4952c7b722c3f618e21abfedce671742b2c21b893bd9327f9b304fa11ab650eb5299c03974e2cbc1dbf85a130e0274974baee35e4c844c7b77fcee71a070e542edd05fb1e0ab220f49c8a4e3a1614f7b4338694a380b9a0a42c45398b3aa65987ec13488158cefda85ece74a8aa19c3ec77a6c4de7c9d152ad246a1f52ffb4c362158101ba01a9a2743f7fbf8f84782f84be7bab2e64331b85298b524b8f5c3e0562f03dc663d3c4aa1a16610ebb6d59d32c8f99582ce6a7f3a546de98c5b6e2c661fcd172ff33e86a6e44462dc63e39aa1cb5f46b9e054a8123eff5a919108851eefa9b9b148a0e094dbeff8c968da571ea3d7c3a5eb2ba416cc74be23191eaff5e46acf096f9c10d0e2f5ac858e0383b8b4a9a79447dba16c2484013112e3d6a34c2f6c465c33209f92e26f1740208efea70a634568615b50fa85b3c48398a4b54b276de5dabda828b687596df5dfb077a3b1b499d297f321bfecae675f4a6015f164caf7decf6cb3bf860b79d1a220a57dbecaaef843a989149bb2f46b8854637b33b9dfe102472150698f7392c16209ca4c33928d966da67d163e436d694e689139ca9cd29cf956931199ba81d8735467e4c14cb7849fff06c307f60847c6680fb4b0c1b2f268f637e3b56976e99f2fdc57b230179babe02e045735d2e2e420e4d9dabcc35cf51f76a2595b0c6340a8501a00e4c3de777d82ca3338284c0904e96c51cb491c4c5cf30a4f5b59c518f80d19ead3a70baa452b347099a79bf23131c8ebfd9ff0df9a533644e1d29bb609076422fd337013771aa9e6fde2bd571dcb7660f2decc2b9e03421b8cf77903534e1c21cb1c528622e7525780cfc975dcf215ddf3fb60b89f209cd21fdc8a7781cd85225e1ed78370add032718887cbbca8140cf66a16022e2a457cda3edf43439860fcfda7998115096b719dc7c09e6804e956e5b38133f8f4b72d533b229dd5fd34b9833c77c93f901f4c3f1409c5879de83c904a60e36e74af6d21baf5be6c2ced304dd6dcc5ae972d13b0b6ad0af840f7f8ccca3fdfa3db27fc9fb7ca2ecbda96c01dee7cae8ed49b5b4f1fedba6fac2d813d200d8018e493b6e90dc57fd1fd7eee1f35c857a0cadc96aac9862b38c52449dd122db18e898d11d37d423dbd917782cc5248021d99adc7d6ea57baa5b2c0156a9d1405ef6612724fd83adbfaf58e1b4b1e82e2f813c26635aaa66fe7be1d2690672c23681894d8e584528129869aa925cf9cccdc2422cee503b22ec4b13acb7e913f7715531de77292178572c70b5a7557c667fdb3de09ff73e3958f6a0645d6ba4f", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$BTRFS_IOC_ADD_DEV(r8, 0x5000940a, &(0x7f0000000740)={{r5}, "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"}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) memfd_create(0x0, 0xe) socket(0x2b, 0x1, 0x0) r9 = syz_io_uring_setup(0x5bb2, &(0x7f00000006c0)={0x0, 0x2, 0x10000, 0x1, 0x11e}, &(0x7f0000000200), &(0x7f0000000100)) io_uring_enter(r9, 0x184c, 0x0, 0x0, 0x0, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r10, 0x540a, 0x2) (async) ioctl$TCXONC(r10, 0x540a, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) 3.348303196s ago: executing program 1 (id=229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x80, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x39, 0x1a, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fanotify_init(0x200, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x71, 0x40000009, r5, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) close(r0) r6 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x40000000000001, 0x400) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x1011}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000001280)={0x38, 0x3, 0x49, 0x93, 0x6, 0xf, 0x7, 0x0, 0x6, 0x100}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x474, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x448, 0x2, [@TCA_FW_POLICE={0x3fc, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x0, 0x10000, 0x1, {0x4, 0x0, 0x581, 0x4, 0x6, 0x2}, {0x86, 0x1, 0x3, 0xd, 0x6}, 0x10001, 0x8, 0x2d4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x43, 0x7, 0x3, 0x55, 0x9, 0xc, 0x81, 0x5, 0x81, 0x80000001, 0x9, 0x8, 0x7, 0x1640, 0x8000, 0x4, 0xa4, 0x9, 0x4, 0x6, 0x405, 0x8, 0x5, 0x6, 0xa95, 0x7, 0x5, 0xff, 0x4, 0xffff, 0x2, 0xe88, 0x1, 0x6, 0x85, 0x9, 0x2, 0x4, 0x8, 0x4, 0x1, 0x7, 0x1, 0x100, 0x9, 0x6, 0x101, 0x6, 0x2, 0x3, 0x2, 0x7f, 0x400, 0x1, 0x9, 0xf0000000, 0x7, 0x2, 0xffffffff, 0xffffffff, 0x7f, 0x2, 0x4, 0x1, 0x6, 0x6, 0x5, 0x1ff, 0x81, 0x5e6, 0x6f00, 0x5, 0x8, 0x9a6, 0x5, 0x4, 0x10, 0x3, 0x7f, 0x6, 0x8, 0x1, 0xaf, 0x81, 0x4, 0x3, 0x8, 0x2, 0x1, 0x1, 0x4, 0x7, 0x0, 0x1, 0xfffffffa, 0xee, 0x101, 0x3, 0x9, 0x10000, 0x1, 0x80000001, 0xffff, 0x1, 0x1, 0x7fff, 0x5, 0xfffffffc, 0x0, 0x9, 0x6, 0x10000, 0x1a13, 0x6, 0x10, 0x6, 0x7, 0x1, 0x0, 0x3, 0xfffffff1, 0x7fffffff, 0x42, 0x7, 0x6, 0x3, 0xe085ebab, 0x1, 0x3ff, 0x8, 0x8, 0x7, 0xe000, 0xd740, 0x3, 0x4, 0x10000, 0x2, 0x7c778187, 0x90, 0x80, 0x8001, 0x3, 0xa, 0xc7, 0x6, 0x9, 0x1, 0x7, 0xfffffffa, 0x3, 0x3000000, 0x7, 0x3, 0xe5, 0x8000, 0x8f9e, 0x7, 0xd6, 0x3, 0x5, 0x401, 0x100, 0x9, 0x101, 0x1, 0x100, 0x0, 0xfffffa1c, 0x6, 0x1, 0xffffffff, 0x900000, 0x2, 0xc6b, 0x2, 0x207, 0x7, 0x8, 0x8, 0x0, 0xffff, 0x9, 0x2, 0x4, 0x3, 0xffffffff, 0x65, 0x3, 0x77a45713, 0x0, 0x38000000, 0x1, 0x5, 0xfffffbce, 0x0, 0x5, 0x2, 0x7, 0x0, 0x80000000, 0x0, 0x2, 0x3, 0x9, 0x0, 0x9, 0x6, 0x4, 0x6, 0x5, 0x1, 0x80, 0x7, 0x5, 0x3, 0x2, 0x1000, 0x9d, 0x8000, 0x3dc, 0x400, 0x8001, 0x7, 0xed, 0x0, 0x0, 0x4, 0xcae, 0x401, 0x9, 0x9, 0x5, 0x2, 0x8000, 0x7, 0x3, 0x401, 0x8001, 0x10000, 0x5, 0x8fa, 0x0, 0x0, 0x9, 0x2, 0x9e8, 0xeb, 0x3, 0x8, 0x28c, 0x9, 0x80000001, 0x3, 0x2]}]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x81}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = gettid() syz_clone3(&(0x7f0000000300)={0x24000080, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x27}, 0x0, 0x0, &(0x7f0000000180)=""/149, &(0x7f0000000240)=[r11, r11], 0x2}, 0x58) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x37, 0x800000000004, @tid=r13}, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000280)={0x0, 0x4, 0x40000000008, 0xba7, r12}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r14, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r15, &(0x7f00000bd000), 0x318, 0x0) 3.098424361s ago: executing program 1 (id=231): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x1, 0x2, 0x4, 0x400, 0xc, 0x0, r2}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001ac0)={'ip6tnl0\x00', &(0x7f0000001a40)={'syztnl2\x00', 0x0, 0x4, 0x97, 0xf0, 0x80000001, 0x25, @loopback, @loopback={0xff00000000000000}, 0x7800, 0x7800, 0x4, 0x5}}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) fcntl$lock(r6, 0x25, &(0x7f0000000140)={0x0, 0x1, 0x1, 0xe9, r8}) sendmsg$nl_generic(r5, &(0x7f0000000940)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000003c0)={0x500, 0x2f, 0x10, 0x70bd2b, 0x25dfdbfc, {0x15}, [@generic="e578e438cfd785a41af71f27caf00aef2fff59e6d14b22630abab0914becc84cc19f8c4c2a497d37319498b5316f0a7158cff7e65f42325415e238fe44dc52ed53ddae37d093a10e66966c5ae4fd4b67fec8cd60edbe8c6f3fdc952d08c2b70c33d9ec1d0351ef44ef32b0f1e9eb572401d0520bd790f333e6229da3485b62838a2775633a159423f89d0b8533", @nested={0xd1, 0x86, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @pid=r8}, @generic="0e4d8d78d1ffef4236ebdd561a8d27ac0dad60d07e89bf946534be4ee3015b74182279dbbef8ef67bfaabc1324042819bcef353745f8a8b98732633f75b3a86a556c1f31cd5f8cabd06490d9db7558ad3653f5d9c9b998aff66a39c324ac4b0eadf6861e5be3fad7487472e33b91aa0090f174e0f4472020f43a0e84827c61d49ebd97ac8f3d4516830c9501649c92118ed424712d873c46475c46e73238f6616fb02049bbc901440d33b5a6468ec461c48224d88c4e1940afb146f0a089437bd7", @nested={0x4, 0x6f}]}, @generic="6363da238aad7dd40513790d558dcdfdd243cf53ee60551e0bb528ab6bd8e41d310170a44c3983c38a1f1e2a2803c6eab9e7f5761b225273b4157209c06a288825770d93d0a087410c86407f9ce4b46d2a50c8698ca2e1d931a20a62c784b4fdca4cffa843cdebf618558fed76d66dec7a28d569512330426c8e61be9bd3031f44425eac7fb242b186cf39cdeeaebf91834cfd2b31b777bab8ced3280f33143dbc71cd1f", @nested={0x18, 0x141, 0x0, 0x1, [@nested={0x4, 0x38}, @nested={0x4, 0x128}, @typed={0x9, 0x4, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}]}, @nested={0x49, 0xef, 0x0, 0x1, [@nested={0x4, 0xed}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@local}, @typed={0xc, 0x5b, 0x0, 0x0, @u64=0x8}, @generic="ba8ce1821f2bb205c65e46443ccf0ca944e0b073a570680957da3935c58fc3db2b"]}, @nested={0x27d, 0x68, 0x0, 0x1, [@generic="66f4390e546cf46960a957b6bbaea4bea87246ec73fe04d821b4e319b3ebef351b61882454916ff0f6ef35ba96f0a4aa491cc077f770014268240be7d6897a48670cf22a0225b12c591b1f364b395de251acbc145d9bc2e82d8fddeac6f49bbb6cf153ca86eac51dab7907b2d583844c36b6972fc60e1570e1ea200b1d6209858f0fcb5deb6b747bd82833a7a412f6187075edd2ae2b9f9f1fb8416c0d6032ed74c51ef011535ad07056f673541aeaa00b9e109edd997781820989785b1f476b39f0e9e5fb3653", @generic="2f2752a64f17666693301755c12eb5dc7b979c5ff0d6b9452bba69be65720f4bae917f3b9e3ebdc98d9c7974e97e9cbffe21c8fa27544500049ded2def4c150d7c51f9f362ff73cbb181b659ea3989687c02879b1449210b4d6a77207cd9dd352ef06e40b8ec075f30db13b5e78dfcac17e1266fd5c2db4a8c65c430f3c5cd8842360fd94f65014e016946247824e06f8d28f7b561e508c9ba4fe5fe2203f5b4d05d86aba808e6bdbabd5628cb9f4e4e8369795937821683b63f7394f90b88377a0d", @generic="f600b8e434af0f9cb7e8668af1437815155cb3d39952616e5126eff20e5bbb20c371c0c24922c8ca15883f291e82882e285d7c6c2f4c8dcfa68e6921c36824bf22fe51e4aca0efdc175309b399b314aaa5d36bb63325e711e9964674841c5380c01be09de66542c482a55df37c6d734fb630ffc22c3cb2818024d9887368a342a35d36b319d058caa3f7bae3c1cc739c31e614a5c12d610232b4bc6849e2ce813503aeedcf89a3d3819f3c7c732d3d4d6230e80fa380831ef0e5d7e64da6b632b0edece9a1146094ba517ef8f21d37a1", @nested={0x4, 0xd5}, @nested={0x4, 0x13c}, @typed={0x14, 0x44, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @typed={0x4, 0x52}]}]}, 0x500}, 0x1, 0x0, 0x0, 0x880}, 0xc040401) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008008b000000000008000c00a80a7fb81400080070696d367265673100006d0b000000000c00100005000000000000004ab2cd12077154ef3adcad6db9a0fe35ccfde3eac4939385837a5f4f2ba810c66cf3e2633f4e54e3ba06a75374afe6aab723d8fb7f6b99e0c9a2646fac920ecedfc6ca395536e179f1ea685e5227c4d7d5c54e4289e920a4f5bee475a7d2ee884136bb0813c509284f952430c2d093c0384af980310ed48275f522d9400b9bca04b97e11b5a756a29e37563ebc94e334df9f47e4cc5e7b123313aaa79a5d0390d263c40d0cfb37ba21298f9861eb57de996644c2e859f99f2eded938788581c6d3b03e505a4191f53eae7b3c81884bcba01ec1bd6d8aae45389a0a1c320072f956608ddb2ef54fd46b46e7af60ff4605838f015d58c9f4c478e280f375a8072adf9278e12b67c66d7a995c0ea368b174cb367cb628f4b99e91031fabba52594b895916029d0826c2085a5708ee7c4044a152a3cf05185c465982e44a702a8a0313de9c0323f353ff2439362c965bc8edf9de38c2acb4fc2fa63068c11a3445c6e16df061c021863df578037fbe76c88f0798dd2de70090ee725d13aed76302"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 3.08025719s ago: executing program 2 (id=233): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x1}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000005}, 0x800) 2.993513578s ago: executing program 1 (id=234): timer_create(0x1, &(0x7f0000000180)={0x0, 0x11, 0x1, @thr={&(0x7f0000000080)="32eda64890d70f8f8427", 0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfdfffffffffffffd) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700090582020002"], 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="3d003300509c06000802110000010802110000015050505050502a1004008d4100000000010000006400020004060806ffff00007107ff0000010209400000000a00cd"], 0x68}, 0x1, 0x0, 0x0, 0x6a845ecb6f243ee8}, 0x24008080) syz_open_dev$loop(&(0x7f00000000c0), 0x72cc541e, 0x12000) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x6dd68c91, 0x6, 0x10, 0xfff, 0x0, 0xc0000000, 0x402, 0x3, 0x5, 0x7b, 0x3, 0x6, 0x7f, 0xfffffffc, 0x0, 0x800002, 0x80000000, 0x2, 0x1ff, 0xfffffff9, 0xc}}) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r10, &(0x7f00000025c0)=[{&(0x7f0000001240)=""/195, 0xc3}, {0x0}], 0x2, 0x1ff, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.926433475s ago: executing program 2 (id=235): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd07ad08828"], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12f38b011103000000106d0403ca40000102030109022d00010104100c090400090203010207092140000901224b04090581030004f60509090502032000090203"], &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x8, 0x3, 0x5, 0x10, 0x5e}, 0x20, &(0x7f0000000140)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0xa, 0xfffd}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x1, 0x2, 0x984}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x8, 0x8}]}, 0x8, [{0xab, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x58, &(0x7f0000000440)=@string={0x58, 0x3, "9df8a29538aad104b8727b324b574259d369045c5ff0101f46a13e81804d90dc3a3dbadc1e714192abcc43da6f2ec7e1adbae9c3ce1035541e14257d5b66dbb91d8498387aec79076fdbab659a05b41382a8fb7964a6"}}]}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_pts(0xffffffffffffffff, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @remote, 0xffffffff}}, 0x24) r6 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x8b2f, 0x0, 0x0, 0x1bd}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) 2.925228071s ago: executing program 3 (id=236): preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) (async, rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) syz_open_dev$sg(0x0, 0x0, 0x48802) (async, rerun: 64) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (rerun: 64) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) (async, rerun: 64) landlock_create_ruleset(0x0, 0x0, 0x0) (rerun: 64) r7 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="b918009fbde790c2fc8c956c4f4b9aed4f2cef8b172f7442365f44aae42950be5d953108e80e95e936a22de4532a76761bcc9889d2536f1ee2ac7949b447ab6f48cf71e49f63f216233a4e90fef4aba54c283ffc7a043fe7eb398fc40c9a09000e7c13a96a8780c9fc515494a75111a62971fc4ee40c3efa95cdd2ff889a77", 0x7f}], 0x1}, 0x4000821) (async) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, &(0x7f0000000000)=""/11, 0xb}, 0x40000010) (async) io_uring_enter(r4, 0x20af, 0x5dc1, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000440)={r2, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c03, r2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd, 0x0, 0x0, 0x6, 0x4, 0x2, {0x0, 0x0, r8}}) (async, rerun: 64) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) unshare(0x2c020400) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269bb, 0x10010, 0xffffffffffffffff, 0xffffe000) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r10, @ANYRES64=r10], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc054) 2.867466708s ago: executing program 3 (id=237): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket(0x10, 0x3, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000180)=ANY=[@ANYBLOB="04000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000060000000000000000000000f1ffffff0000000000000000000000000000000000000000312f1aefffffffff000000000900000001100000010000800800000000000000000000000000000001000080ffffffff070000000800000005000000100100000300"/168]) r6 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) ftruncate(r2, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r6, r6, 0x0, 0x200001) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r7, 0x540b, 0xfffffffffffeffff) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000080)={0x9, 0x5, 0xa55}) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 2.598869354s ago: executing program 3 (id=238): syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400010000000900010073797a300000000060000000030a010100000000000000000100000008000b400000000014000480080002400000000008000140000000000900010073"], 0xa8}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000680009010000000000000000020003000000000008001000", @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_misc(r1, &(0x7f0000000180)="1868c83e", 0x4) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0xff, 0xff}) (rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff"], 0x50}}, 0x200c405a) (async, rerun: 64) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) (async, rerun: 64) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) (async) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000000), 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @mcast1, 0x4}, 0x1c) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='net/udplite6\x00') read$FUSE(r8, &(0x7f0000004600)={0x2020}, 0x2020) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r5, &(0x7f0000000300)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="40020c0000000c21f027d9ada8e1cdc1f670"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.488961955s ago: executing program 3 (id=240): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, &(0x7f0000000540)}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) r4 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x983a, 0x2, 0x1003, 0xea}, &(0x7f0000000240)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) io_uring_enter(r4, 0x3058, 0xdf5e, 0x7, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) r9 = dup(r8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$setregs(0xd, r10, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r10, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) r11 = syz_open_procfs$pagemap(r10, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r11, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1, 0x0, 0x60, 0x0, 0x5c}) r12 = open(&(0x7f0000000040)='./bus\x00', 0x40d00, 0x20) sendfile(r9, r12, 0x0, 0x8000fffffffe) memfd_secret(0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}}, 0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={r2, 0x31, "ac74f87172f896363dfdd99a7e59e3f0091a9e3f087c6e5fd9e65ba8711d190827cf89701f27560bddf23d83b138f9bf5a"}, &(0x7f0000000040)=0x39) 2.381430947s ago: executing program 4 (id=241): openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x400000000000137, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) (async) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r3 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) readlink(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0xc000) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 2.380940273s ago: executing program 0 (id=242): r0 = socket(0x10, 0x803, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r1, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x2400008c}, 0x0) 2.286263366s ago: executing program 0 (id=243): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000000), &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x7f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaedc}, 0x94) 2.218618325s ago: executing program 4 (id=244): r0 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000480)={0x0, 0x0, r2, r3, 0x7fff, 0xb, 0xe, 0xfffffff6, {0x403, 0x1, 0x3, 0x8, 0x6, 0x7, 0x5, 0x6, 0x22, 0x5, 0x7f, 0x9c14, 0x200008, 0x8d12074f, "0010b45adb3bdf6bbf43f7e7bdcf42a72e6ca213e20b354ba4e274f7720904f6"}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000302d251004160580a8ce010203010902120001000000000904d9f60032cdda00891993aa75a331b1d073393ad415ec2d4aa12aa6b92b86dceb1072d298c0853a99e3b546b67d403c97aaa2603f8ec942a4729e8f2a3e63e04c5cb688be3af97518924077ad52b1e0280c2516563b33f88098cbb033144c3cd4cdde5635b7dee894675026a23ab400888cdb26091e3e890687ac3fbad99a0d097ac125916ba98dc35814b83b0fc1fa024e756a0873d56c73829c5404e39ea16150e3afe0049d1bf22b53026bcb88b282ab743c00"/218], 0x0) 2.195865247s ago: executing program 0 (id=245): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x300000, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)={0x10, 0x7, 0x2, {{0x3, '@,$'}}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'erspan0\x00', r1, 0x8, 0x700, 0x5690, 0x9, {{0xd, 0x4, 0x1, 0x1d, 0x34, 0x66, 0x0, 0xf, 0x2f, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0xc, 0xc3, 0x3, 0x6, [{@private=0xa010102, 0x8}]}, @cipso={0x86, 0x11, 0x3, [{0x6, 0xb, "21b16ee183841407c0"}]}, @end, @end]}}}}}) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) sendto(r0, &(0x7f0000000180), 0x0, 0x8050, &(0x7f00000001c0)=@l2={0x1f, 0x6, @none, 0x50, 0x1}, 0x80) getsockname$tipc(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000006c0)={0x3, 0x0, 0x20, 0x13, 0x19, &(0x7f00000002c0)}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa9}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000900)=0x220100, 0x4) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000980)={0x0, @sco, @in={0x2, 0x4e24, @multicast2}, @ethernet={0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0xb, &(0x7f0000000940)='veth1_to_bridge\x00', 0x1, 0x5, 0x9}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000000a00)={{r4}, "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"}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001a00)=0x800) write$sndseq(r0, &(0x7f0000001a80)=[{0x5, 0x2, 0x2, 0xc, @tick=0x61a, {0xc0, 0x9}, {0x7, 0xe0}, @addr={0x7, 0xf5}}, {0xe, 0xe3, 0x2, 0x8, @time={0x0, 0x40}, {0x4, 0x20}, {0x3, 0x9}, @time=@time={0x5, 0xa}}, {0x0, 0x7, 0x0, 0x1, @time={0x7, 0x9}, {0x29, 0xca}, {0x3, 0xb}, @raw8={"9a55397aff31fe7290600f01"}}, {0x6, 0x81, 0x5, 0x4, @time={0x40, 0x1000}, {0xf7, 0x6}, {0x8, 0xfc}, @raw32={[0x6, 0xfff, 0x10]}}, {0x1, 0x9, 0x4, 0x4, @time={0x200, 0x101}, {0xfc, 0x47}, {0x0, 0x9}, @queue={0x80, {0x2, 0x7}}}, {0x81, 0x2, 0x0, 0x10, @tick=0x2, {0x9, 0xa}, {0x38, 0x3}, @quote={{0xcd, 0x81}, 0x6, &(0x7f0000001a40)={0x0, 0x76, 0x7, 0x81, @time={0x2, 0x10001}, {0x5, 0x5}, {0x0, 0x8}, @control={0xb, 0x308ce908, 0x1}}}}], 0xa8) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x38}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x316}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000001c80)=""/13) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d13, &(0x7f0000001cc0)) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d40)={0x94, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000041}, 0x40000) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001e80)={@dev={0xfe, 0x80, '\x00', 0xe}, 0x46, r1}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001ec0)={0x3, 0x4}, 0x4) ioctl$TCSETA(r2, 0x5406, &(0x7f0000001f00)={0x3ff, 0x6, 0x1, 0x4, 0x16, "bfd2b82e47428df5"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), r6) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000001f80)={0x0, 0x6, 0x20, 0x8, 0xb0}, &(0x7f0000001fc0)=0x18) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000002000)={r7, 0x1ff}, 0x8) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000002040)=[0x1, 0x2], 0x2) sendto(r6, &(0x7f0000002080)="a0ba7f44b533080d5102b516c357db5986d68ca332cb727c937c8dd02bf232a193a2d783cbd592e4f76822f7378374430f447325a2a2f58a21028ea07f7d425bb8802c05aa497588f398fd9cc8cac548d237894040fdad022249b9b97c5f9b2fd0626b7805ac3fcedec6348dd177bf6ad69376edc17dd73f2df7521594ade10e72cfbce5de5e82eaa174e28ce244728e1ec15070c4c1b5d42effee35593554da34b2a42a19efba8a6a45edb0e5ed9148b4928b94814c0a28e36781cecf9a872b8c5ace66645e7a8765bbd2af40007bf16ca629f5c5960c896184f0fe59f9fb92ad918884cc11bb7fb74d2502ba92", 0xee, 0x8400, 0x0, 0x0) 2.127273076s ago: executing program 0 (id=246): syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r1 = io_uring_setup(0x1612, &(0x7f0000000100)={0x0, 0x9a23, 0x20, 0xffffffff, 0x2, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_enter(r1, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) unshare(0x22020600) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000240)={0x0, &(0x7f00000001c0)}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="1300400065ffff0300201050f343724c72ab90b61749734a21f3200cbf113bac6a49fce5c17fff7f000000000000efb7d3ba4243e9a57d5fd9fd3535c9f1191940b0286b33219e66189a04343067f0a480ed12f4747f3ba951ed26523d7ff532cf500c1be42f2757af66a7751556831f01633a55803a58c376c21b30b529ec7b79c53f43615787d660cb214763c792b10b532a506bc9f143840446f5ef8bf9158b7bafb9afa83d8c72dd485f634f39a47dcbb57b"], 0x13) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f00000024c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)="0acd", 0x2}], 0x1}}], 0x1, 0x40088d4) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r8, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000025000/0x4000)=nil, 0x3, 0x5, 0x2}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0xfff, @empty, 0x7f}}}, 0x90) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 1.874528165s ago: executing program 3 (id=247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x96, @empty, 0x9}, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f000090588"], 0x0) 1.18416968s ago: executing program 0 (id=248): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r4, 0x541e, &(0x7f0000000040)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r6) socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x42, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r9, &(0x7f0000000880)={0x2c2, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x6a, {0x40}, 0x10000000, 0x2000000, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00'/31, 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xfb\xe1a\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x5e, '\xf8\xf6~\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf1\x99V\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xe6Od\xb1\xd6?&ym\xcb\xecI\x86#\xd6\xa88\xc6\x9ai\xdf\xcc\x9c\xddY\x06\xf1t\xa6f\xa8R\x9aEw4\a\xdb\xda\xb2\x88[\xaf\x05\x00\x00\x00\x00\x00'}, 0x1b3, 'odev-n\xb1{#\x00\xf9\xda\xa1\xee#&n\xcf\x85\xfe\xa6^\xb2\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\xbd\x7f=\x7f)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x01\x00\x00\x00\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\xcf>\xe3\x88@\x02\xa9\x1cTR\x8b\x80z\x89\xca\x18M\x16d_\x06\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f)\x9f\x06\x1fu\xb7y|\xe1\xe4\x11\xea\x91\x8e\xbd\x88\x8c\x1e\x15k\x84V\x93\x1d.\xa7&\xba\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9G\x8f}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00ta\xb0\xcc\xaa\xa1\x93:\x0e\x8a\x82k\x14\xd4\xfc\xb2\x98\x9f\xfa\xaa\x1a\xcf\xfa\x80T\xe9U\x9d\xfa\xe4iz\xa0\v\x03\xb3\xd8\x0eU$\xf8I_\xee~\x8d\x88\xcbZ\x04\x03\x02\xac\xb0\xd1&\x0f%\x84\xdbH\xe8\xd9\x06N\x8c\xe1x\xce9n\x85\xb9~H\x86D@I\x81\x0f%\xf1\xce\xca\x97]\xebI\x1a\x12[\xf0\xd7/\x87\xcc\x10\xb0\x15N\b\x93m\xaa\xdd\x8b\x1e\x97'}}, 0x2c2) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 793.803287ms ago: executing program 4 (id=249): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000300)={r4, @in6={{0xa, 0x4e21, 0x7, @mcast2, 0x5}}}, &(0x7f0000000040)=0x84) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x86c}}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x81001, 0x0) close_range(r0, r5, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x40044160, 0x3) 678.558388ms ago: executing program 4 (id=250): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x800, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd30, 0x1) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 537.11428ms ago: executing program 4 (id=251): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b040000000000000000020000002c0004802800018007ced5000100633665465100028008000140000000020800024000000016080004400000000c0900010073"], 0x74}}, 0x80) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000180)=0x4b, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r1, 0x1, 0x2}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000200)={'veth0_to_bond\x00', @remote}) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x280180, 0x0) write$6lowpan_enable(r4, &(0x7f00000001c0)='1', 0x1) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 503.98479ms ago: executing program 1 (id=252): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc02000000000000000000000000000000000000000000000000000000000000000000034e2300000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/493], 0x23c}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00006ac000/0x3000)=nil, 0x3000, 0x3000000, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000001740)=[{{&(0x7f0000000140)=@alg, 0x80, &(0x7f0000001400)=[{&(0x7f0000001200)=""/228, 0xe4}, {&(0x7f0000001300)=""/253, 0xfd}], 0x2, &(0x7f00000017c0)=""/108, 0x6c}, 0xd2}, {{&(0x7f0000001500)=@xdp, 0x80, &(0x7f0000001680)=[{&(0x7f0000001580)=""/190, 0xbe}, {&(0x7f0000001440)=""/41, 0x29}], 0x2, &(0x7f00000016c0)=""/73, 0x49}, 0xb}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f00000001c0)=""/4103, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0xfffffff8, @loopback, 0x401}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x18) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x200) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') mmap$xdp(&(0x7f0000571000/0x1000)=nil, 0x1000, 0x0, 0x8010, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000001480)=ANY=[@ANYBLOB="12010902240001fc0000000904fe01", @ANYRES8=r6, @ANYRES8=0x0], 0x0) 386.445501ms ago: executing program 3 (id=253): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="85952b177328da2f8757c9343d6559eb7a", 0x11, 0xfffffffffffffffd) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="66663d879b91e658f091ad21ac391931df1baeb5d677a338", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) r6 = inotify_init1(0x800) inotify_add_watch(r6, &(0x7f0000000240)='./file0\x00', 0x8000005b) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) (async) umount2(&(0x7f0000000080)='./file0\x00', 0x9) (async) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r7, r4}, &(0x7f00000000c0)=""/80, 0x50, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80441, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) (async) sendto$inet(r1, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) (async) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x12, 0x4}, 0x9c) (async) bind$inet6(r0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) 386.151183ms ago: executing program 4 (id=254): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x10, 0x2}, 0x41) r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0xf, 0x60, {0x5, 0xf, 0x60, 0x3, [@generic={0x3, 0x10, 0xb}, @wireless={0xb, 0x10, 0x1, 0x4, 0x60, 0x7f, 0x0, 0x1, 0x6}, @generic={0x4d, 0x10, 0x1, "02447d08334bea7b1d94d35f8620b1a756e793ca3a663e4917f621b68f2e0b08b094da0a25f2d4c19ef1c368e16c11bd31d59bbe0dfcc0fb33291a7f013e709db7e6fea962557c49564b"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 0s ago: executing program 0 (id=255): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffff}, [@migrate={0x9c, 0x11, [{@in=@loopback, @in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0xfe}, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x810) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) move_pages(0x0, 0x1, &(0x7f0000002600)=[&(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffff}, [@migrate={0x9c, 0x11, [{@in=@loopback, @in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0xfe}, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x810) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) move_pages(0x0, 0x1, &(0x7f0000002600)=[&(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000000), 0x0) (async) kernel console output (not intermixed with test programs): _adv: batadv0: Adding interface: batadv_slave_1 [ 53.288393][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.314429][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.340559][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.348087][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.374042][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.388984][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.396046][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.422251][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.469240][ T5870] hsr_slave_0: entered promiscuous mode [ 53.475758][ T5870] hsr_slave_1: entered promiscuous mode [ 53.481570][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 53.487356][ T5870] Cannot create hsr debugfs directory [ 53.530944][ T5872] hsr_slave_0: entered promiscuous mode [ 53.537069][ T5872] hsr_slave_1: entered promiscuous mode [ 53.542840][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 53.548634][ T5872] Cannot create hsr debugfs directory [ 53.556810][ T5871] hsr_slave_0: entered promiscuous mode [ 53.562711][ T5871] hsr_slave_1: entered promiscuous mode [ 53.569059][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 53.575014][ T5871] Cannot create hsr debugfs directory [ 53.624576][ T5875] hsr_slave_0: entered promiscuous mode [ 53.630682][ T5875] hsr_slave_1: entered promiscuous mode [ 53.637420][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 53.643138][ T5875] Cannot create hsr debugfs directory [ 53.653525][ T5860] Bluetooth: hci1: command tx timeout [ 53.733882][ T5863] Bluetooth: hci2: command tx timeout [ 53.739398][ T5863] Bluetooth: hci4: command tx timeout [ 53.745060][ T5857] Bluetooth: hci0: command tx timeout [ 53.750537][ T5860] Bluetooth: hci3: command tx timeout [ 53.770103][ T5869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.805181][ T5869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.831453][ T5869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.854129][ T5869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.928141][ T5872] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.937624][ T5872] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.952620][ T5872] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.966340][ T5872] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.995324][ T5870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.008437][ T5870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.026008][ T5870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.035088][ T5870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.070234][ T5871] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.082915][ T5871] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.093161][ T5871] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.102220][ T5871] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.159646][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.167728][ T5875] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.176443][ T5875] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.187553][ T5875] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.208162][ T5875] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.235166][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.263312][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.272647][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.279757][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.304087][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.327819][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.334908][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.354256][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.361351][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.372093][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.379206][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.424118][ T5872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.434677][ T5872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.449835][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.487817][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.507223][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.520532][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.535128][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.548515][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.555616][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.572777][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.586780][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.593880][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.610040][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.619493][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.626591][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.646651][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.653757][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.667806][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.674917][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.685304][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.692343][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.718341][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.761555][ T5872] veth0_vlan: entered promiscuous mode [ 54.806739][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.817692][ T5875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.832732][ T5869] veth0_vlan: entered promiscuous mode [ 54.843309][ T5872] veth1_vlan: entered promiscuous mode [ 54.855740][ T5869] veth1_vlan: entered promiscuous mode [ 54.889724][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.911744][ T5872] veth0_macvtap: entered promiscuous mode [ 54.923179][ T5872] veth1_macvtap: entered promiscuous mode [ 54.941559][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.950328][ T5869] veth0_macvtap: entered promiscuous mode [ 54.958808][ T5869] veth1_macvtap: entered promiscuous mode [ 54.977264][ T5870] veth0_vlan: entered promiscuous mode [ 54.990489][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.009022][ T5870] veth1_vlan: entered promiscuous mode [ 55.025494][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.038317][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.056948][ T5871] veth0_vlan: entered promiscuous mode [ 55.064540][ T4827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.073248][ T4827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.090416][ T5875] veth0_vlan: entered promiscuous mode [ 55.099031][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.107385][ T4827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.116512][ T4827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.136537][ T5871] veth1_vlan: entered promiscuous mode [ 55.148791][ T5875] veth1_vlan: entered promiscuous mode [ 55.160719][ T1154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.170269][ T1154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.189911][ T5870] veth0_macvtap: entered promiscuous mode [ 55.196399][ T1154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.205640][ T1154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.224170][ T5870] veth1_macvtap: entered promiscuous mode [ 55.250297][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.265213][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.290322][ T5875] veth0_macvtap: entered promiscuous mode [ 55.300090][ T5871] veth0_macvtap: entered promiscuous mode [ 55.310851][ T4827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.323360][ T4827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.349270][ T5875] veth1_macvtap: entered promiscuous mode [ 55.357680][ T5871] veth1_macvtap: entered promiscuous mode [ 55.365657][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.374151][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.375587][ T4827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.390653][ T4827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.401459][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.409520][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.418703][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.441444][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.469364][ T1154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.479808][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.488620][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.499023][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.510814][ T1154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.519905][ T1154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.548941][ T1154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.559766][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.571066][ T5872] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.599740][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.610259][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.639917][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.652597][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.664941][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.672407][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.686636][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.713995][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.733969][ T5860] Bluetooth: hci1: command tx timeout [ 55.760560][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.777770][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.794058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.824515][ T30] audit: type=1326 audit(1755398248.957:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.1.2" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d8398ebe9 code=0x0 [ 55.826329][ T5860] Bluetooth: hci3: command tx timeout [ 55.851417][ T5863] Bluetooth: hci4: command tx timeout [ 55.856909][ T5863] Bluetooth: hci0: command tx timeout [ 55.861227][ T5949] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 55.862297][ T5857] Bluetooth: hci2: command tx timeout [ 55.938971][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.950729][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.971714][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.993090][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.054050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.062704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.175777][ T4827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.185032][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.192826][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.204042][ T4827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.366426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.412199][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 56.421203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.445117][ T5912] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 56.608231][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 56.623577][ T1219] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 56.624928][ T5912] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 56.641284][ T5977] usb usb8: usbfs: process 5977 (syz.3.9) did not claim interface 0 before use [ 56.651655][ T5912] usb 1-1: config 0 has no interface number 0 [ 56.664917][ T5912] usb 1-1: config 0 interface 230 has no altsetting 0 [ 56.674230][ T5912] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 56.686325][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.695641][ T5912] usb 1-1: Product: syz [ 56.697287][ T5979] tipc: Started in network mode [ 56.699808][ T5912] usb 1-1: Manufacturer: syz [ 56.708708][ T5979] tipc: Node identity fe9cc5c77462, cluster identity 4711 [ 56.709633][ T5912] usb 1-1: SerialNumber: syz [ 56.716554][ T5979] tipc: Enabled bearer , priority 0 [ 56.724237][ T5912] usb 1-1: config 0 descriptor?? [ 56.735335][ T5912] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 56.740051][ T5979] syzkaller0: entered promiscuous mode [ 56.744972][ T5912] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 56.750876][ T5979] syzkaller0: entered allmulticast mode [ 56.764770][ T5940] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 56.786374][ T1219] usb 5-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 56.796274][ T5979] tipc: Resetting bearer [ 56.803226][ T1219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.815140][ T1219] usb 5-1: config 0 descriptor?? [ 56.824364][ T5978] tipc: Resetting bearer [ 56.831557][ T5978] tipc: Disabling bearer [ 56.905011][ T5940] usb 3-1: device descriptor read/64, error -71 [ 56.934122][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 57.063952][ T10] usb 4-1: device descriptor read/64, error -71 [ 57.163708][ T5940] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 57.303603][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 57.303909][ T5940] usb 3-1: device descriptor read/64, error -71 [ 57.347735][ T5986] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.362541][ T5986] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11'. [ 57.372221][ T5986] binder_alloc: 5985: binder_alloc_buf, no vma [ 57.378984][ T5986] binder: 5985:5986 ioctl c0306201 200000000240 returned -11 [ 57.444509][ T5940] usb usb3-port1: attempt power cycle [ 57.452659][ T10] usb 4-1: device descriptor read/64, error -71 [ 57.545669][ T5996] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 57.576443][ T10] usb usb4-port1: attempt power cycle [ 57.709290][ T6002] sit1: entered promiscuous mode [ 57.714521][ T6002] sit1: entered allmulticast mode [ 57.793668][ T5940] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 57.815285][ T5862] Bluetooth: hci1: command tx timeout [ 57.822156][ T5940] usb 3-1: device descriptor read/8, error -71 [ 57.894106][ T5862] Bluetooth: hci2: command tx timeout [ 57.899528][ T5860] Bluetooth: hci0: command tx timeout [ 57.899552][ T5857] Bluetooth: hci4: command tx timeout [ 57.913637][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 57.945171][ T10] usb 4-1: device descriptor read/8, error -71 [ 57.973633][ T5857] Bluetooth: hci3: command tx timeout [ 58.073766][ T5940] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 58.105775][ T5940] usb 3-1: device descriptor read/8, error -71 [ 58.183600][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 58.203904][ T10] usb 4-1: device descriptor read/8, error -71 [ 58.236032][ T5940] usb usb3-port1: unable to enumerate USB device [ 58.313713][ T10] usb usb4-port1: unable to enumerate USB device [ 59.055906][ T5912] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 59.072804][ T5912] usb 1-1: USB disconnect, device number 2 [ 59.373662][ T5912] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 59.376213][ T1219] usbhid 5-1:0.0: can't add hid device: -71 [ 59.395452][ T6009] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.399288][ T1219] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 59.423319][ T1219] usb 5-1: USB disconnect, device number 2 [ 59.542934][ T5912] usb 1-1: device descriptor read/64, error -71 [ 59.543082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.709258][ T6024] block device autoloading is deprecated and will be removed. [ 59.717227][ T6024] syz.4.18: attempt to access beyond end of device [ 59.717227][ T6024] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 59.730354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 59.740837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.749364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.863698][ T5912] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 59.874346][ T6032] FAULT_INJECTION: forcing a failure. [ 59.874346][ T6032] name failslab, interval 1, probability 0, space 0, times 1 [ 59.894780][ T5857] Bluetooth: hci1: command tx timeout [ 59.909572][ T6032] CPU: 0 UID: 0 PID: 6032 Comm: syz.2.22 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 59.909596][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 59.909605][ T6032] Call Trace: [ 59.909610][ T6032] [ 59.909617][ T6032] dump_stack_lvl+0x189/0x250 [ 59.909640][ T6032] ? __pfx____ratelimit+0x10/0x10 [ 59.909662][ T6032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.909680][ T6032] ? __pfx__printk+0x10/0x10 [ 59.909699][ T6032] ? netlink_unicast+0x82c/0x9e0 [ 59.909719][ T6032] ? ___sys_sendmsg+0x21f/0x2a0 [ 59.909735][ T6032] ? do_syscall_64+0xfa/0x3b0 [ 59.909756][ T6032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.909776][ T6032] should_fail_ex+0x414/0x560 [ 59.909798][ T6032] should_failslab+0xa8/0x100 [ 59.909820][ T6032] kmem_cache_alloc_noprof+0x73/0x3c0 [ 59.909841][ T6032] ? skb_clone+0x212/0x3a0 [ 59.909859][ T6032] skb_clone+0x212/0x3a0 [ 59.909877][ T6032] __netlink_deliver_tap+0x404/0x850 [ 59.909903][ T6032] ? netlink_deliver_tap+0x2e/0x1b0 [ 59.909925][ T6032] netlink_deliver_tap+0x19c/0x1b0 [ 59.909947][ T6032] netlink_sendskb+0x68/0x140 [ 59.909967][ T6032] netlink_unicast+0x397/0x9e0 [ 59.909985][ T6032] ? __asan_memcpy+0x40/0x70 [ 59.910005][ T6032] ? __pfx_netlink_unicast+0x10/0x10 [ 59.910027][ T6032] netlink_rcv_skb+0x28c/0x470 [ 59.910048][ T6032] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 59.910071][ T6032] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 59.910100][ T6032] netlink_unicast+0x82c/0x9e0 [ 59.910123][ T6032] ? __pfx_netlink_unicast+0x10/0x10 [ 59.910142][ T6032] ? netlink_sendmsg+0x642/0xb30 [ 59.910163][ T6032] ? skb_put+0x11b/0x210 [ 59.910179][ T6032] netlink_sendmsg+0x805/0xb30 [ 59.910204][ T6032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.910226][ T6032] ? aa_sock_msg_perm+0xf1/0x1d0 [ 59.910242][ T6032] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 59.910263][ T6032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.910285][ T6032] __sock_sendmsg+0x219/0x270 [ 59.910305][ T6032] ____sys_sendmsg+0x505/0x830 [ 59.910323][ T6032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 59.910343][ T6032] ? import_iovec+0x74/0xa0 [ 59.910361][ T6032] ___sys_sendmsg+0x21f/0x2a0 [ 59.910384][ T6032] ? __pfx____sys_sendmsg+0x10/0x10 [ 59.910414][ T6032] ? __fget_files+0x2a/0x420 [ 59.910427][ T6032] ? __fget_files+0x3a0/0x420 [ 59.910444][ T6032] __x64_sys_sendmsg+0x19b/0x260 [ 59.910460][ T6032] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 59.910480][ T6032] ? __pfx_ksys_write+0x10/0x10 [ 59.910499][ T6032] ? rcu_is_watching+0x15/0xb0 [ 59.910517][ T6032] ? rcu_is_watching+0x15/0xb0 [ 59.910534][ T6032] do_syscall_64+0xfa/0x3b0 [ 59.910555][ T6032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.910571][ T6032] ? clear_bhb_loop+0x60/0xb0 [ 59.910588][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.910604][ T6032] RIP: 0033:0x7f9be818ebe9 [ 59.910625][ T6032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.910638][ T6032] RSP: 002b:00007f9be8ffc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.910655][ T6032] RAX: ffffffffffffffda RBX: 00007f9be83b5fa0 RCX: 00007f9be818ebe9 [ 59.910667][ T6032] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 59.910677][ T6032] RBP: 00007f9be8ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 59.910688][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.910698][ T6032] R13: 00007f9be83b6038 R14: 00007f9be83b5fa0 R15: 00007f9be84dfa28 [ 59.910716][ T6032] [ 60.163548][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 60.166576][ C0] vkms_vblank_simulate: vblank timer overrun [ 60.271543][ C0] vkms_vblank_simulate: vblank timer overrun [ 60.277504][ C0] hrtimer: interrupt took 364052226 ns [ 60.285049][ T5857] Bluetooth: hci2: command tx timeout [ 60.290472][ T5857] Bluetooth: hci0: command tx timeout [ 60.296654][ T5857] Bluetooth: hci4: command tx timeout [ 60.302057][ T5862] Bluetooth: hci3: command tx timeout [ 60.377523][ C0] vkms_vblank_simulate: vblank timer overrun [ 60.404280][ T5912] usb 1-1: device descriptor read/64, error -71 [ 60.454864][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 60.466087][ T24] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 60.513723][ T24] usb 4-1: config 0 has no interface number 0 [ 60.515343][ T5912] usb usb1-port1: attempt power cycle [ 60.583515][ T979] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.588451][ T24] usb 4-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0x44, changing to 0x4 [ 60.719959][ T24] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 60.720811][ T30] audit: type=1326 audit(1755398253.757:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be818ebe9 code=0x7ffc0000 [ 60.745828][ T24] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x4 has invalid maxpacket 16706, setting to 1024 [ 60.780990][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 60.790890][ T24] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 60.801048][ T24] usb 4-1: Product: syz [ 60.805453][ T24] usb 4-1: SerialNumber: syz [ 60.811158][ T24] usb 4-1: config 0 descriptor?? [ 60.851450][ T979] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 60.869256][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.877907][ T979] usb 2-1: Product: syz [ 60.882075][ T979] usb 2-1: Manufacturer: syz [ 60.886770][ T5912] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 60.895608][ T30] audit: type=1326 audit(1755398253.757:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f9be818ebe9 code=0x7ffc0000 [ 60.920104][ T979] usb 2-1: SerialNumber: syz [ 60.925852][ T979] usb 2-1: config 0 descriptor?? [ 60.933430][ T30] audit: type=1326 audit(1755398253.757:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be818ebe9 code=0x7ffc0000 [ 60.961011][ C0] vkms_vblank_simulate: vblank timer overrun [ 60.967393][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 60.974288][ T30] audit: type=1326 audit(1755398253.757:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be818ebe9 code=0x7ffc0000 [ 61.002405][ T30] audit: type=1326 audit(1755398253.757:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9be818ebe9 code=0x7ffc0000 [ 61.024241][ C0] vkms_vblank_simulate: vblank timer overrun [ 61.033521][ T5912] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 61.048710][ T5912] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 61.113297][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 61.121478][ T5912] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 61.384525][ T6054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.399863][ T6054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.409132][ T24] usb 4-1: invalid MIDI in EP 0 [ 61.527869][ T979] usb-storage 2-1:0.0: USB Mass Storage device detected [ 61.547833][ T5912] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.610180][ T24] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 61.630946][ T30] audit: type=1326 audit(1755398253.757:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be818ebe9 code=0x7ffc0000 [ 61.637434][ T24] usb 4-1: USB disconnect, device number 6 [ 61.654118][ T5912] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 61.679759][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.687912][ T30] audit: type=1326 audit(1755398253.757:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be818ebe9 code=0x7ffc0000 [ 61.709884][ C0] vkms_vblank_simulate: vblank timer overrun [ 61.729514][ T30] audit: type=1326 audit(1755398253.757:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9be818ebe9 code=0x7ffc0000 [ 61.807386][ T6068] udevd[6068]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 62.007547][ T5912] usb 1-1: GET_CAPABILITIES returned 0 [ 62.013182][ T5912] usbtmc 1-1:16.0: can't read capabilities [ 62.048173][ T5912] usb 1-1: USB disconnect, device number 5 [ 62.100504][ T6073] netlink: 144 bytes leftover after parsing attributes in process `syz.3.30'. [ 62.225198][ T6073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30'. [ 62.802337][ T9] usb 2-1: USB disconnect, device number 2 [ 63.013689][ T1219] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 63.123747][ T30] audit: type=1326 audit(1755398256.267:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba018ebe9 code=0x7ffc0000 [ 63.207356][ T1219] usb 3-1: config 0 has no interfaces? [ 63.222500][ T30] audit: type=1326 audit(1755398256.267:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba018ebe9 code=0x7ffc0000 [ 63.335243][ T1219] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 63.404436][ T5940] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 63.415470][ T1219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.428689][ T1219] usb 3-1: Product: syz [ 63.432865][ T1219] usb 3-1: Manufacturer: syz [ 63.437747][ T1219] usb 3-1: SerialNumber: syz [ 63.443130][ T30] audit: type=1326 audit(1755398256.267:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f7ba018ebe9 code=0x7ffc0000 [ 63.443542][ T5912] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 63.465718][ T1219] usb 3-1: config 0 descriptor?? [ 63.616007][ T5940] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.653221][ T5940] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 63.705770][ T5940] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 63.734651][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.764926][ T5926] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 63.848471][ T5940] usb 1-1: config 0 descriptor?? [ 63.857873][ T5940] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 63.863578][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 63.865193][ T5940] dvb-usb: bulk message failed: -22 (3/0) [ 63.884795][ T5940] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 63.991045][ T5926] usb 2-1: device descriptor read/64, error -71 [ 64.054965][ T5940] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 64.063716][ T5940] usb 1-1: media controller created [ 64.070661][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 64.088720][ T5940] dvb-usb: bulk message failed: -22 (6/0) [ 64.099098][ T5940] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 64.104384][ T5912] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 64.141929][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.150679][ T5912] usb 4-1: Product: syz [ 64.154902][ T5912] usb 4-1: Manufacturer: syz [ 64.155011][ T5940] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 64.159486][ T5912] usb 4-1: SerialNumber: syz [ 64.186973][ T5912] usb 4-1: config 0 descriptor?? [ 64.203209][ T5912] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 64.232274][ T5912] usb 4-1: setting power ON [ 64.246002][ T5912] dvb-usb: bulk message failed: -22 (2/0) [ 64.253561][ T5926] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 64.272365][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 64.281988][ T5912] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 64.290461][ T5912] usb 4-1: media controller created [ 64.304232][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 64.324513][ T5940] dvb-usb: schedule remote query interval to 150 msecs. [ 64.335509][ T5940] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 64.392143][ T5912] usb 4-1: selecting invalid altsetting 6 [ 64.401756][ T6102] dvb-usb: bulk message failed: -22 (4/0) [ 64.433576][ T5926] usb 2-1: device descriptor read/64, error -71 [ 64.492757][ T5912] usb 4-1: digital interface selection failed (-22) [ 64.493613][ T5940] dvb-usb: bulk message failed: -22 (1/0) [ 64.505432][ T5912] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 64.526464][ T5940] dvb-usb: error while querying for an remote control event. [ 64.526468][ T5912] usb 4-1: setting power OFF [ 64.526484][ T5912] dvb-usb: bulk message failed: -22 (2/0) [ 64.544916][ T5926] usb usb2-port1: attempt power cycle [ 64.558898][ T5912] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 64.568426][ T5912] (NULL device *): no alternate interface [ 64.587130][ T5912] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 64.606887][ T5912] usb 4-1: USB disconnect, device number 7 [ 64.743579][ T5940] dvb-usb: bulk message failed: -22 (1/0) [ 64.749357][ T5940] dvb-usb: error while querying for an remote control event. [ 64.853163][ T6114] netlink: 36 bytes leftover after parsing attributes in process `syz.4.40'. [ 64.904135][ T5926] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 64.923669][ T5940] dvb-usb: bulk message failed: -22 (1/0) [ 64.929521][ T5940] dvb-usb: error while querying for an remote control event. [ 64.944326][ T5926] usb 2-1: device descriptor read/8, error -71 [ 65.114290][ T5940] dvb-usb: bulk message failed: -22 (1/0) [ 65.122127][ T5940] dvb-usb: error while querying for an remote control event. [ 65.193574][ T5926] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 65.214258][ T5926] usb 2-1: device descriptor read/8, error -71 [ 65.266173][ T6122] loop9: detected capacity change from 0 to 3 [ 65.283675][ T5940] dvb-usb: bulk message failed: -22 (1/0) [ 65.285938][ T5849] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.289483][ T5940] dvb-usb: error while querying for an remote control event. [ 65.307643][ T5849] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.316185][ T5849] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.325675][ T5849] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.333933][ T5926] usb usb2-port1: unable to enumerate USB device [ 65.334234][ T5849] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.348671][ T5849] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.357007][ T5849] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.365531][ T5849] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.399208][ T5912] usb 3-1: USB disconnect, device number 6 [ 65.408688][ T5849] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.418753][ T5849] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.464200][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 65.470027][ T5926] dvb-usb: error while querying for an remote control event. [ 65.599522][ T9] usb 1-1: USB disconnect, device number 6 [ 65.621501][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 65.753611][ T5912] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 65.923644][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 65.930288][ T5912] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 65.940568][ T5912] usb 3-1: config 0 has no interface number 0 [ 65.947728][ T5912] usb 3-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 65.959744][ T5912] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 65.969987][ T5912] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 65.980239][ T5912] usb 3-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 65.993438][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 66.000945][ T5912] usb 3-1: config 0 interface 41 has no altsetting 0 [ 66.009530][ T5912] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 66.018613][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.026617][ T5912] usb 3-1: Product: syz [ 66.030786][ T5912] usb 3-1: Manufacturer: syz [ 66.035719][ T5912] usb 3-1: SerialNumber: syz [ 66.042052][ T5912] usb 3-1: config 0 descriptor?? [ 66.047688][ T6125] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 66.055091][ T6125] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 66.093556][ T979] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 66.133622][ T9] usb 1-1: device descriptor read/64, error -71 [ 66.245120][ T979] usb 5-1: config 3 has an invalid interface number: 40 but max is 2 [ 66.253569][ T979] usb 5-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 66.262267][ T979] usb 5-1: config 3 has an invalid interface number: 124 but max is 2 [ 66.270590][ T979] usb 5-1: config 3 has an invalid interface number: 213 but max is 2 [ 66.272991][ T6125] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 66.278841][ T979] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 66.288861][ T6125] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 66.296485][ T979] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 66.318422][ T979] usb 5-1: config 3 has an invalid interface number: 63 but max is 2 [ 66.328436][ T979] usb 5-1: config 3 has an invalid descriptor of length 218, skipping remainder of the config [ 66.338999][ T979] usb 5-1: config 3 has 4 interfaces, different from the descriptor's value: 3 [ 66.348801][ T979] usb 5-1: config 3 has no interface number 0 [ 66.355101][ T979] usb 5-1: config 3 has no interface number 1 [ 66.361209][ T979] usb 5-1: config 3 has no interface number 2 [ 66.362469][ T6134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'. [ 66.368825][ T979] usb 5-1: config 3 has no interface number 3 [ 66.383388][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 66.391148][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 66.392780][ T979] usb 5-1: config 3 interface 40 altsetting 3 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 66.411835][ T979] usb 5-1: config 3 interface 40 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 66.422695][ T979] usb 5-1: config 3 interface 40 altsetting 3 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 66.434034][ T979] usb 5-1: config 3 interface 40 altsetting 3 endpoint 0x1 has invalid maxpacket 2031, setting to 1024 [ 66.445218][ T979] usb 5-1: config 3 interface 40 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 66.457254][ T979] usb 5-1: config 3 interface 40 altsetting 3 endpoint 0x8F has invalid maxpacket 512, setting to 64 [ 66.468269][ T979] usb 5-1: config 3 interface 40 altsetting 3 endpoint 0x3 has an invalid bInterval 224, changing to 7 [ 66.479667][ T979] usb 5-1: config 3 interface 40 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 66.490521][ T979] usb 5-1: config 3 interface 124 altsetting 67 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 66.503859][ T979] usb 5-1: config 3 interface 213 altsetting 6 has an invalid endpoint descriptor of length 6, skipping [ 66.515630][ T9] usb 1-1: device descriptor read/64, error -71 [ 66.522027][ T979] usb 5-1: config 3 interface 213 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 66.533160][ T979] usb 5-1: config 3 interface 213 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 13 [ 66.546560][ T979] usb 5-1: config 3 interface 63 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 66.560476][ T979] usb 5-1: config 3 interface 40 has no altsetting 0 [ 66.567189][ T979] usb 5-1: config 3 interface 124 has no altsetting 0 [ 66.573985][ T979] usb 5-1: config 3 interface 213 has no altsetting 0 [ 66.580757][ T979] usb 5-1: config 3 interface 63 has no altsetting 0 [ 66.587916][ T979] usb 5-1: string descriptor 0 read error: -22 [ 66.594648][ T979] usb 5-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=89.82 [ 66.603919][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.613197][ T979] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 66.621953][ T979] usb 5-1: no configuration chosen from 1 choice [ 66.629424][ T9] usb usb1-port1: attempt power cycle [ 66.723557][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 66.747224][ T5912] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -32 [ 66.883636][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 66.891223][ T10] usb 2-1: config 0 has an invalid interface number: 180 but max is 0 [ 66.899688][ T10] usb 2-1: config 0 has no interface number 0 [ 66.907394][ T10] usb 2-1: New USB device found, idVendor=0421, idProduct=0134, bcdDevice=11.72 [ 66.916583][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.924795][ T10] usb 2-1: Product: syz [ 66.928953][ T10] usb 2-1: Manufacturer: syz [ 66.933566][ T10] usb 2-1: SerialNumber: syz [ 66.939058][ T10] usb 2-1: config 0 descriptor?? [ 66.945354][ T10] usb 2-1: bad CDC descriptors [ 66.983736][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 67.003944][ T9] usb 1-1: device descriptor read/8, error -71 [ 67.149576][ T10] usb 2-1: USB disconnect, device number 7 [ 67.243511][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 67.264092][ T9] usb 1-1: device descriptor read/8, error -71 [ 67.373630][ T9] usb usb1-port1: unable to enumerate USB device [ 67.449668][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.458286][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.923507][ T5940] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 68.063993][ T5940] usb 2-1: device descriptor read/64, error -71 [ 68.216585][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.49'. [ 68.313621][ T5940] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 68.443524][ T5940] usb 2-1: device descriptor read/64, error -71 [ 68.491821][ T5855] usb 3-1: USB disconnect, device number 7 [ 68.574236][ T5940] usb usb2-port1: attempt power cycle [ 68.603559][ T5926] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 68.708617][ T6154] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 68.731589][ T6154] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 68.741919][ T6154] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 68.762401][ T6154] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 68.773178][ T6154] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 68.792831][ T6154] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 68.801480][ T6154] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 68.817082][ T5926] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 68.832259][ T5926] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 68.866325][ T5912] usb 5-1: USB disconnect, device number 3 [ 68.882882][ T6154] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 68.891600][ T6154] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 68.900231][ T6154] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 68.973583][ T5940] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 68.994884][ T5926] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 69.018364][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.034112][ T5940] usb 2-1: device descriptor read/8, error -71 [ 69.152241][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 69.152257][ T30] audit: type=1326 audit(1755398262.297:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71d78ebe9 code=0x7ffc0000 [ 69.196292][ T30] audit: type=1326 audit(1755398262.347:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71d78ebe9 code=0x7ffc0000 [ 69.222972][ T30] audit: type=1326 audit(1755398262.347:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fb71d78ebe9 code=0x7ffc0000 [ 69.273557][ T5940] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 69.620752][ T6144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.632550][ T6144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.669862][ T5940] usb 2-1: device descriptor read/8, error -71 [ 69.721357][ T30] audit: type=1326 audit(1755398262.347:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71d78ebe9 code=0x7ffc0000 [ 69.750744][ T30] audit: type=1326 audit(1755398262.347:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71d78ebe9 code=0x7ffc0000 [ 69.924510][ T5940] usb usb2-port1: unable to enumerate USB device [ 69.932783][ T30] audit: type=1326 audit(1755398262.347:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb71d78ebe9 code=0x7ffc0000 [ 70.041633][ T30] audit: type=1326 audit(1755398262.347:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71d78ebe9 code=0x7ffc0000 [ 70.199930][ T30] audit: type=1326 audit(1755398262.347:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71d78ebe9 code=0x7ffc0000 [ 70.434765][ T30] audit: type=1326 audit(1755398262.347:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb71d78ebe9 code=0x7ffc0000 [ 70.456845][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.793531][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 70.953548][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 71.193873][ T6191] fuse: Bad value for 'fd' [ 71.210750][ T9] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 71.220407][ T9] usb 5-1: config 0 has no interface number 0 [ 71.283945][ T6192] netlink: 60 bytes leftover after parsing attributes in process `syz.0.61'. [ 71.284381][ T5926] usb 4-1: USB disconnect, device number 8 [ 71.331399][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 71.344579][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.353097][ T9] usb 5-1: Product: syz [ 71.359692][ T9] usb 5-1: Manufacturer: syz [ 71.370252][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.390647][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.549837][ T9] usb 5-1: SerialNumber: syz [ 71.694836][ T9] usb 5-1: config 0 descriptor?? [ 72.113573][ T9] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 72.119979][ T9] usb 5-1: No valid video chain found. [ 72.165603][ T9] usb 5-1: USB disconnect, device number 4 [ 72.193678][ T5926] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 72.392493][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 72.437739][ T5926] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 72.446381][ T5926] usb 3-1: config 127 has no interface number 1 [ 72.452637][ T5926] usb 3-1: config 127 interface 0 altsetting 10 endpoint 0xA has invalid wMaxPacketSize 0 [ 72.494717][ T5926] usb 3-1: config 127 interface 171 has no altsetting 0 [ 72.505927][ T5926] usb 3-1: config 127 interface 0 has no altsetting 0 [ 72.520489][ T5926] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 72.529927][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.533552][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 72.539040][ T5926] usb 3-1: Product: syz [ 72.551202][ T5926] usb 3-1: Manufacturer: syz [ 72.556731][ T5926] usb 3-1: SerialNumber: syz [ 72.699561][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 72.710109][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 72.720827][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 72.741151][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 72.761341][ T9] usb 5-1: Product: syz [ 72.835497][ T9] usb 5-1: Manufacturer: syz [ 72.840502][ T9] usb 5-1: SerialNumber: syz [ 72.854290][ T9] usb 5-1: config 0 descriptor?? [ 72.888172][ T9] usb 5-1: selecting invalid altsetting 0 [ 73.089077][ T6223] input: syz0 as /devices/virtual/input/input7 [ 73.469875][ T5926] xr_serial 3-1:127.171: xr_serial converter detected [ 73.480576][ T6232] netlink: 'syz.3.70': attribute type 1 has an invalid length. [ 73.509691][ T6232] netlink: 'syz.3.70': attribute type 1 has an invalid length. [ 73.549929][ T5926] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 73.619464][ T5926] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 73.703068][ T5926] usb 3-1: USB disconnect, device number 8 [ 73.715966][ T5926] xr_serial 3-1:127.171: device disconnected [ 73.905897][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 73.983777][ T5940] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 74.122789][ T9] usb 4-1: config index 0 descriptor too short (expected 255, got 146) [ 74.153012][ T6256] IPv6: sit2: Disabled Multicast RS [ 74.159198][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.173934][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 74.175993][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.198877][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 74.208116][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.216583][ T9] usb 4-1: SerialNumber: syz [ 74.390597][ T6258] process 'syz.1.76' launched './file0' with NULL argv: empty string added [ 74.412232][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.442773][ T5940] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.470124][ T5940] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.490219][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.528680][ T9] usb 4-1: cannot find UAC_HEADER [ 74.548728][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 74.561110][ T9] usb 4-1: USB disconnect, device number 9 [ 74.588866][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 74.608033][ T5940] usb 1-1: config 0 descriptor?? [ 74.928081][ T5940] usbhid 1-1:0.0: can't add hid device: -71 [ 74.943111][ T5940] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 74.984877][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 74.999450][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.032705][ T5940] usb 1-1: USB disconnect, device number 11 [ 75.305102][ T1219] usb 5-1: USB disconnect, device number 5 [ 75.373645][ T5926] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 75.387796][ T6276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.81'. [ 75.402820][ T6276] erspan0: entered promiscuous mode [ 75.410482][ T6276] erspan0: left promiscuous mode [ 75.580542][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 75.653629][ T5940] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 75.756216][ T24] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 75.764634][ T24] usb 3-1: config 0 has no interface number 0 [ 75.772121][ T24] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 75.784052][ T24] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 75.793194][ T5926] usb 2-1: unable to get BOS descriptor or descriptor too short [ 75.801546][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.811635][ T5926] usb 2-1: not running at top speed; connect to a high speed hub [ 75.819590][ T5940] usb 1-1: Using ep0 maxpacket: 32 [ 75.824999][ T24] usb 3-1: config 0 descriptor?? [ 75.831322][ T5926] usb 2-1: config 1 has an invalid interface number: 138 but max is 0 [ 75.840713][ T24] ttusbir 3-1:0.83: cannot find expected altsetting [ 75.847417][ T5940] usb 1-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 75.856523][ T5926] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.871205][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.880024][ T5926] usb 2-1: config 1 has no interface number 0 [ 75.888337][ T5940] usb 1-1: config 0 descriptor?? [ 75.896460][ T5926] usb 2-1: config 1 interface 138 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 75.914163][ T5940] go7007 1-1:0.0: The Lifeview TV Walker Ultra is not supported. Sorry! [ 75.922590][ T5926] usb 2-1: config 1 interface 138 has no altsetting 0 [ 75.973795][ T5926] usb 2-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 75.982880][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.991267][ T5926] usb 2-1: Product: syz [ 75.995517][ T5926] usb 2-1: Manufacturer: syz [ 76.000215][ T5926] usb 2-1: SerialNumber: syz [ 76.054079][ T6272] program syz.2.82 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.093382][ T5940] usb 3-1: USB disconnect, device number 9 [ 76.114071][ T6270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.123774][ T6270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.158945][ T1219] usb 1-1: USB disconnect, device number 12 [ 76.232920][ T5926] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 76.300201][ T5926] usb 2-1: USB disconnect, device number 12 [ 76.464024][ T43] cfg80211: failed to load regulatory.db [ 76.554825][ T6291] create_pit_timer: 19 callbacks suppressed [ 76.554843][ T6291] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 76.702533][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.87'. [ 76.751499][ T6291] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 76.759712][ T6291] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 76.774203][ T6291] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 76.804806][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'. [ 76.818191][ T6291] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 76.826349][ T6291] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 76.834300][ T6291] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 76.893019][ T6291] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 76.928967][ T6291] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 76.937110][ T6291] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 77.094848][ T5926] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 77.328545][ T5926] usb 3-1: Invalid ep0 maxpacket: 32 [ 77.483606][ T5926] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 77.494388][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 77.599606][ T6318] bond0: entered allmulticast mode [ 77.607357][ T6318] bond_slave_0: entered allmulticast mode [ 77.616861][ T6318] bond_slave_1: entered allmulticast mode [ 77.630229][ T6318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.640016][ T6318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.653547][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 77.661683][ T9] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 77.670947][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.679769][ T9] usb 1-1: Product: syz [ 77.684081][ T9] usb 1-1: Manufacturer: syz [ 77.685261][ T5926] usb 3-1: Invalid ep0 maxpacket: 32 [ 77.688740][ T9] usb 1-1: SerialNumber: syz [ 77.705617][ T9] usb 1-1: config 0 descriptor?? [ 77.711801][ T5926] usb usb3-port1: attempt power cycle [ 77.713714][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 77.883589][ T5940] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 78.053727][ T5926] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 78.063241][ T5940] usb 2-1: Using ep0 maxpacket: 8 [ 78.072549][ T5940] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 78.081943][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.090735][ T5926] usb 3-1: Invalid ep0 maxpacket: 32 [ 78.097223][ T5940] usb 2-1: Product: syz [ 78.101396][ T5940] usb 2-1: Manufacturer: syz [ 78.106397][ T5940] usb 2-1: SerialNumber: syz [ 78.112234][ T5940] usb 2-1: config 0 descriptor?? [ 78.120287][ T5940] gspca_main: sq930x-2.14.0 probing 2770:930c [ 78.225387][ T5926] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 78.253913][ T5926] usb 3-1: Invalid ep0 maxpacket: 32 [ 78.265773][ T5926] usb usb3-port1: unable to enumerate USB device [ 78.287741][ T6323] syz.4.94 uses obsolete (PF_INET,SOCK_PACKET) [ 78.294980][ T6322] syzkaller1: entered promiscuous mode [ 78.300475][ T6322] syzkaller1: entered allmulticast mode [ 78.321710][ T6318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.350720][ T6318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.366803][ T5940] gspca_sq930x: reg_r 001f failed -32 [ 78.372357][ T5940] sq930x 2-1:0.0: probe with driver sq930x failed with error -32 [ 78.650995][ T6329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.95'. [ 78.666577][ T6329] erspan0: entered promiscuous mode [ 78.673266][ T6329] erspan0: left promiscuous mode [ 78.747679][ T5912] usb 2-1: USB disconnect, device number 13 [ 78.955442][ T6334] gtp0: entered promiscuous mode [ 78.961122][ T6334] gtp0: entered allmulticast mode [ 79.178010][ T9] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 79.418914][ T6338] netlink: 48 bytes leftover after parsing attributes in process `syz.1.99'. [ 79.562456][ T6349] netlink: 'syz.4.101': attribute type 12 has an invalid length. [ 79.571143][ T6349] netlink: 211856 bytes leftover after parsing attributes in process `syz.4.101'. [ 79.587078][ T6349] netlink: 'syz.4.101': attribute type 1 has an invalid length. [ 79.601079][ T6349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.613569][ T5926] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 79.616113][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 79.665019][ T6349] bond1: (slave veth3): Enslaving as an active interface with a down link [ 79.804628][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 79.817090][ T5926] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 79.835317][ T5926] usb 4-1: can't read configurations, error -22 [ 79.979687][ T5940] usb 1-1: USB disconnect, device number 13 [ 79.985828][ T5926] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 80.047667][ T6369] Zero length message leads to an empty skb [ 80.191624][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 80.201241][ T5926] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 80.293320][ T5926] usb 4-1: can't read configurations, error -22 [ 80.317106][ T6378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.638231][ T5926] usb usb4-port1: attempt power cycle [ 81.014810][ T5926] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 81.033965][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 81.040748][ T5926] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 81.053434][ T5926] usb 4-1: can't read configurations, error -22 [ 81.062264][ T6391] bridge0: entered promiscuous mode [ 81.116956][ T6392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.111'. [ 81.131833][ T6392] erspan0: entered promiscuous mode [ 81.138868][ T6392] erspan0: left promiscuous mode [ 81.383586][ T5926] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 81.424198][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 81.431025][ T5926] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 81.439219][ T5926] usb 4-1: can't read configurations, error -22 [ 81.452667][ T5926] usb usb4-port1: unable to enumerate USB device [ 81.633552][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 81.795541][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.807787][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.817795][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 81.826895][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.836493][ T9] usb 2-1: config 0 descriptor?? [ 81.943618][ T5912] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 81.983609][ T5926] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 82.093507][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 82.100156][ T5912] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 82.110109][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.120625][ T5912] usb 1-1: config 0 descriptor?? [ 82.128755][ T5912] gspca_main: sq930x-2.14.0 probing 041e:403c [ 82.143852][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 82.151660][ T5926] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 82.159605][ T5926] usb 3-1: can't read configurations, error -61 [ 82.245806][ T9] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 82.253221][ T9] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 82.262107][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0001/input/input10 [ 82.277979][ T9] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 82.294005][ T5926] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 82.452856][ T6395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.461686][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 82.462300][ T6395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.468402][ T5926] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 82.485381][ T5926] usb 3-1: can't read configurations, error -61 [ 82.491920][ T5926] usb usb3-port1: attempt power cycle [ 82.492192][ T9] usb 2-1: USB disconnect, device number 14 [ 82.601197][ T6409] netlink: 'syz.4.121': attribute type 5 has an invalid length. [ 82.609052][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.121'. [ 82.778062][ T43] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 82.874065][ T5926] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 82.904056][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 82.910962][ T5926] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 82.920445][ T5926] usb 3-1: can't read configurations, error -61 [ 82.963547][ T5912] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 82.976048][ T43] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 82.984311][ T43] usb 4-1: config 0 has no interface number 0 [ 82.990381][ T43] usb 4-1: config 0 interface 122 has no altsetting 0 [ 82.999865][ T43] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 83.009004][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.017670][ T43] usb 4-1: Product: syz [ 83.021869][ T43] usb 4-1: Manufacturer: syz [ 83.024704][ T5912] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 83.027037][ T43] usb 4-1: SerialNumber: syz [ 83.045607][ T43] usb 4-1: config 0 descriptor?? [ 83.051986][ T5912] usb 1-1: USB disconnect, device number 14 [ 83.063548][ T5926] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 83.102796][ T6417] netlink: 52 bytes leftover after parsing attributes in process `syz.1.123'. [ 83.113421][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 83.120297][ T5926] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 83.129589][ T5926] usb 3-1: can't read configurations, error -61 [ 83.141271][ T5926] usb usb3-port1: unable to enumerate USB device [ 83.403526][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 83.486731][ T43] usb 4-1: USB disconnect, device number 14 [ 83.498379][ T43] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 83.543052][ T9] usb 2-1: device descriptor read/64, error -71 [ 83.766042][ T6430] netlink: 16 bytes leftover after parsing attributes in process `syz.4.126'. [ 83.782590][ T6430] erspan0: entered promiscuous mode [ 83.790506][ T6430] erspan0: left promiscuous mode [ 83.836021][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 83.843672][ T5940] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 83.983556][ T9] usb 2-1: device descriptor read/64, error -71 [ 83.993562][ T5940] usb 1-1: Using ep0 maxpacket: 16 [ 84.006347][ T5940] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 84.021080][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.029418][ T5940] usb 1-1: Product: syz [ 84.034230][ T5940] usb 1-1: Manufacturer: syz [ 84.038845][ T5940] usb 1-1: SerialNumber: syz [ 84.064258][ T5940] usb 1-1: config 0 descriptor?? [ 84.093693][ T9] usb usb2-port1: attempt power cycle [ 84.434261][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 84.464200][ T9] usb 2-1: device descriptor read/8, error -71 [ 84.714591][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 84.734718][ T9] usb 2-1: device descriptor read/8, error -71 [ 84.743634][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 84.843825][ T9] usb usb2-port1: unable to enumerate USB device [ 85.213551][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 85.223431][ T43] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 85.236209][ T43] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 85.247882][ T43] usb 5-1: config 4 has no interface number 0 [ 85.257312][ T43] usb 5-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 85.270886][ T43] usb 5-1: config 4 interface 51 has no altsetting 0 [ 85.279395][ T6443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.131'. [ 85.291534][ T43] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 85.302408][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.310564][ T43] usb 5-1: Product: syz [ 85.315692][ T43] usb 5-1: Manufacturer: syz [ 85.320513][ T43] usb 5-1: SerialNumber: syz [ 85.330668][ T43] cdc_eem 5-1:4.51: probe with driver cdc_eem failed with error -22 [ 85.839214][ T6455] netlink: 52 bytes leftover after parsing attributes in process `syz.3.134'. [ 86.117807][ T6460] netlink: 'syz.3.135': attribute type 13 has an invalid length. [ 86.142481][ T6462] wlan1: mtu greater than device maximum [ 86.373646][ T5926] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 86.423641][ T43] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 86.438316][ T6468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.138'. [ 86.451796][ T6468] erspan0: entered promiscuous mode [ 86.460062][ T6468] erspan0: left promiscuous mode [ 86.493636][ T5940] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 86.521510][ T5940] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 86.532541][ T5940] usb 1-1: USB disconnect, device number 15 [ 86.541923][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 86.565429][ T5926] usb 4-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 86.576984][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.589153][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 86.600759][ T43] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 86.609516][ T43] usb 3-1: config 8 has no interface number 0 [ 86.687157][ T43] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 86.707150][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.730672][ T43] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0 [ 86.744265][ T5926] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 86.908854][ T43] usb 3-1: config 8 interface 177 has no altsetting 0 [ 86.916460][ T5926] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 86.925764][ T43] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 86.936287][ T5926] usb 4-1: Manufacturer: syz [ 86.945897][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.954555][ T5926] usb 4-1: config 0 descriptor?? [ 86.965221][ T6464] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 87.180083][ T6464] netlink: 40 bytes leftover after parsing attributes in process `syz.2.137'. [ 87.214244][ T43] usb 3-1: string descriptor 0 read error: -71 [ 87.221151][ T43] ir_toy 3-1:8.177: required endpoints not found [ 87.229678][ T43] usb 3-1: USB disconnect, device number 18 [ 87.493532][ T5912] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 87.528150][ T6479] netlink: 'syz.3.135': attribute type 1 has an invalid length. [ 87.557770][ T24] usb 5-1: USB disconnect, device number 6 [ 87.654912][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 87.666057][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 87.681943][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.696524][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 87.708156][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 87.720949][ T5912] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 87.730108][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.742872][ T5912] usb 2-1: config 0 descriptor?? [ 87.750788][ T6476] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 87.763203][ T5912] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 87.771643][ T5912] usb 2-1: MIDIStreaming interface descriptor not found [ 87.907011][ T6496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.145'. [ 87.962880][ T43] usb 2-1: USB disconnect, device number 19 [ 87.993676][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 88.163547][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 88.169915][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.181099][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.190894][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.203865][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 88.212900][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.225033][ T24] usb 5-1: config 0 descriptor?? [ 88.283576][ T5926] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 88.433280][ T6500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.442999][ T24] koneplus 0003:1E7D:2E22.0002: item fetching failed at offset 0/2 [ 88.451118][ T6500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.459100][ T24] koneplus 0003:1E7D:2E22.0002: parse failed [ 88.470174][ T5926] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 88.479439][ T24] koneplus 0003:1E7D:2E22.0002: probe with driver koneplus failed with error -22 [ 88.496430][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.515359][ T5926] usb 3-1: config 0 descriptor?? [ 88.535344][ T5926] cp210x 3-1:0.0: cp210x converter detected [ 88.634370][ T43] usb 5-1: USB disconnect, device number 7 [ 88.825150][ T5912] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 88.974605][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 88.981793][ T5912] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 88.990351][ T5912] usb 2-1: config 0 has no interface number 0 [ 88.996502][ T5912] usb 2-1: config 0 interface 184 has no altsetting 0 [ 89.005130][ T5912] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 89.015230][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.023236][ T5912] usb 2-1: Product: syz [ 89.028484][ T5912] usb 2-1: Manufacturer: syz [ 89.033126][ T5912] usb 2-1: SerialNumber: syz [ 89.041346][ T5912] usb 2-1: config 0 descriptor?? [ 89.048356][ T5912] smsc75xx v1.0.0 [ 89.057104][ T5912] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 89.068010][ T5912] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 89.116498][ T24] usb 4-1: USB disconnect, device number 15 [ 89.266859][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.278601][ T6503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.290444][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.298188][ T6503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.413613][ T5912] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 89.573562][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 89.586898][ T5912] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 89.620717][ T5912] usb 5-1: config 0 has no interface number 0 [ 89.638107][ T5912] usb 5-1: config 0 interface 12 has no altsetting 0 [ 89.662804][ T5912] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 89.687366][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.706930][ T5912] usb 5-1: Product: syz [ 89.711130][ T5912] usb 5-1: Manufacturer: syz [ 89.721529][ T5912] usb 5-1: SerialNumber: syz [ 89.742364][ T5912] usb 5-1: config 0 descriptor?? [ 90.509846][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054537400: rx timeout, send abort [ 90.633529][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 90.693520][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 90.785314][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 90.794080][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.805318][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 90.815846][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.825946][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.834024][ T24] usb 4-1: Product: syz [ 90.838283][ T24] usb 4-1: Manufacturer: syz [ 90.848614][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.859562][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 90.870906][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.884363][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 90.893421][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.902975][ T10] usb 1-1: config 0 descriptor?? [ 90.972378][ T5912] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 90.980894][ T5912] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 90.989969][ T5912] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 90.998049][ T5912] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 91.007270][ T5926] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 91.009618][ T5912] usb 5-1: USB disconnect, device number 8 [ 91.020682][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054537400: abort rx timeout. Force session deactivation [ 91.045350][ T5926] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 91.072529][ T5926] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 91.086407][ T5926] usb 3-1: cp210x converter now attached to ttyUSB0 [ 91.105542][ T5926] usb 3-1: USB disconnect, device number 19 [ 91.112764][ T6540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.136516][ T5926] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 91.146239][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.161861][ T5926] cp210x 3-1:0.0: device disconnected [ 91.164850][ T9] usb 4-1: USB disconnect, device number 16 [ 91.169123][ T6540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.193110][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.203549][ T10] ath6kl: Failed to submit usb control message: -71 [ 91.210192][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 91.220287][ T10] ath6kl: Unable to send get target info: -71 [ 91.227212][ T10] ath6kl: Failed to init ath6kl core: -71 [ 91.235337][ T10] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 91.246196][ T10] usb 1-1: USB disconnect, device number 16 [ 91.523677][ T5926] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 91.540843][ T10] usb 2-1: USB disconnect, device number 20 [ 91.702690][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 91.742898][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 91.755164][ T5926] usb 3-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 91.764849][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.776551][ T5926] usb 3-1: Product: syz [ 91.787098][ T5926] usb 3-1: Manufacturer: syz [ 91.796260][ T5926] usb 3-1: SerialNumber: syz [ 91.840425][ T6566] tipc: Started in network mode [ 91.846983][ T6566] tipc: Node identity eac12fcd0b79, cluster identity 4711 [ 91.855134][ T5926] usb 3-1: config 0 descriptor?? [ 91.939682][ T5926] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 91.940083][ T6566] tipc: Enabled bearer , priority 0 [ 91.955577][ T5926] usb 3-1: Detected SIO [ 91.959747][ T5926] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 91.967156][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 91.969696][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 91.975891][ T6569] syzkaller0: entered promiscuous mode [ 92.055571][ T5926] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 92.074963][ T6569] syzkaller0: entered allmulticast mode [ 92.091411][ T5926] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 92.124823][ T9] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 92.139476][ T6543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.154574][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.174820][ T6543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.185415][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 92.187637][ T5926] usb 3-1: USB disconnect, device number 20 [ 92.216402][ T5926] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 92.227157][ T5926] ftdi_sio 3-1:0.0: device disconnected [ 92.263583][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 92.264038][ T9] usb 5-1: config 0 descriptor?? [ 92.308777][ T10] usb 2-1: config index 0 descriptor too short (expected 1828, got 36) [ 92.318603][ T10] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 92.347150][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.362168][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 92.373705][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 92.385746][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.401048][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 92.412090][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.422151][ T10] usb 2-1: Product: syz [ 92.428006][ T10] usb 2-1: Manufacturer: syz [ 92.432873][ T10] usb 2-1: SerialNumber: syz [ 92.446463][ T10] usb 2-1: config 0 descriptor?? [ 92.453716][ T10] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 92.464897][ T10] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 92.472757][ T10] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 92.485060][ T10] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 92.493090][ T10] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 92.505069][ T10] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 92.513864][ T10] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 92.525200][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 92.533071][ T10] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 92.547171][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.561484][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.580136][ T10] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 92.591058][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.592478][ T10] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 92.610808][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.611333][ T10] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 92.627310][ T10] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 92.627617][ T24] usb 4-1: Product: syz [ 92.634944][ T10] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 92.677822][ T24] usb 4-1: Manufacturer: syz [ 92.682500][ T24] usb 4-1: SerialNumber: syz [ 92.688069][ T6565] tipc: Resetting bearer [ 92.718633][ T6565] tipc: Disabling bearer [ 92.789304][ T10] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 92.804509][ T10] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 92.836320][ T10] usb 2-1: USB disconnect, device number 21 [ 92.857707][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 92.911511][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 92.959618][ T10] keyspan 2-1:0.0: device disconnected [ 93.048453][ T5912] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 93.100241][ T9] usb 5-1: Cannot set MAC address [ 93.107147][ T9] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 93.135260][ T9] usb 5-1: USB disconnect, device number 9 [ 93.179372][ T6585] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 93.214135][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 93.220570][ T5912] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 93.229667][ T5912] usb 3-1: config 0 has no interface number 0 [ 93.250132][ T5912] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 93.293529][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.309790][ T5912] usb 3-1: Product: syz [ 93.317779][ T5912] usb 3-1: Manufacturer: syz [ 93.322671][ T5912] usb 3-1: SerialNumber: syz [ 93.329412][ T5912] usb 3-1: config 0 descriptor?? [ 93.340578][ T5912] smsc95xx v2.0.0 [ 93.553637][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 93.573613][ T5940] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 93.652707][ T6593] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 93.723540][ T5940] usb 1-1: Using ep0 maxpacket: 32 [ 93.724885][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 93.735875][ T5940] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 93.736678][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 93.763601][ T5940] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 93.776318][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 93.788965][ T5940] usb 1-1: config 0 has no interface number 0 [ 93.798838][ T5940] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 93.800255][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.813251][ T5940] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 93.832366][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 93.843879][ T5940] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 93.844930][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 93.858025][ T5940] usb 1-1: config 0 has no interface number 0 [ 93.864273][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 93.880059][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 93.884418][ T5940] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 93.894721][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.916088][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 93.921264][ T5940] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 93.955986][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 93.983063][ T5940] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 93.991850][ T5940] usb 1-1: config 0 has no interface number 0 [ 94.001332][ T5940] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.016817][ T5940] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 94.031631][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 94.045302][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 94.057693][ T5940] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 94.066732][ T5940] usb 1-1: config 0 has no interface number 0 [ 94.071508][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.101690][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 94.104611][ T5940] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.130698][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 94.146262][ T5940] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 94.157931][ T5940] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 94.169567][ T5940] usb 1-1: config 0 has no interface number 0 [ 94.176465][ T9] usb 2-1: string descriptor 0 read error: -22 [ 94.182750][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 94.187153][ T5940] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.203422][ T5940] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 94.215493][ T5940] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 94.223872][ T5940] usb 1-1: config 0 has no interface number 0 [ 94.230316][ T5940] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.240614][ T5940] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 94.241033][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.252045][ T5940] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 94.375449][ T9] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 94.389274][ T5940] usb 1-1: config 0 has no interface number 0 [ 94.395783][ T5940] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.424488][ T5940] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 94.436566][ T5940] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 94.446385][ T5940] usb 1-1: config 0 has no interface number 0 [ 94.453085][ T5940] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.463170][ T5940] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 94.533408][ T5940] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 94.544478][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.552670][ T5940] usb 1-1: Product: syz [ 94.558213][ T5940] usb 1-1: Manufacturer: syz [ 94.565747][ T5912] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 94.581233][ T5912] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 94.594922][ T6591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.604375][ T6591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.625431][ T5941] usb 2-1: USB disconnect, device number 22 [ 94.631980][ T5940] usb 1-1: SerialNumber: syz [ 94.642143][ T5940] usb 1-1: config 0 descriptor?? [ 94.652395][ T5940] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz) [ 94.666813][ T5912] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 94.723346][ T5912] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 94.746296][ T6615] netlink: 'syz.1.174': attribute type 10 has an invalid length. [ 94.762317][ T5912] usb 3-1: USB disconnect, device number 21 [ 94.773123][ T6615] netlink: 40 bytes leftover after parsing attributes in process `syz.1.174'. [ 94.811526][ T6615] team0: Port device geneve0 added [ 94.858669][ T5940] etas_es58x 1-1:0.2: could not retrieve the product info string [ 94.873130][ T24] usb 4-1: 0:2 : does not exist [ 94.885568][ T24] usb 4-1: USB disconnect, device number 17 [ 94.930038][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.982803][ T5940] usb 1-1: USB disconnect, device number 17 [ 95.005464][ T5940] etas_es58x 1-1:0.2: Disconnecting syz syz [ 95.089727][ T6617] syz.3.175: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 95.125211][ T6617] CPU: 0 UID: 0 PID: 6617 Comm: syz.3.175 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 95.125235][ T6617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 95.125244][ T6617] Call Trace: [ 95.125250][ T6617] [ 95.125257][ T6617] dump_stack_lvl+0x189/0x250 [ 95.125281][ T6617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.125299][ T6617] ? __pfx__printk+0x10/0x10 [ 95.125318][ T6617] ? lock_release+0x4b/0x3e0 [ 95.125339][ T6617] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 95.125357][ T6617] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 95.125373][ T6617] warn_alloc+0x214/0x310 [ 95.125403][ T6617] ? __pfx_warn_alloc+0x10/0x10 [ 95.125425][ T6617] ? __get_vm_area_node+0x28f/0x300 [ 95.125444][ T6617] ? hash_netport_create+0x358/0xfe0 [ 95.125459][ T6617] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 95.125480][ T6617] ? do_syscall_64+0xfa/0x3b0 [ 95.125509][ T6617] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 95.125531][ T6617] ? rcu_is_watching+0x15/0xb0 [ 95.125547][ T6617] ? hash_netport_create+0x358/0xfe0 [ 95.125561][ T6617] ? hash_netport_create+0x358/0xfe0 [ 95.125573][ T6617] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 95.125591][ T6617] ? hash_netport_create+0x358/0xfe0 [ 95.125604][ T6617] ? hash_netport_create+0x2fe/0xfe0 [ 95.125618][ T6617] hash_netport_create+0x358/0xfe0 [ 95.125634][ T6617] ? __nla_parse+0x40/0x60 [ 95.125654][ T6617] ? __pfx_hash_netport_create+0x10/0x10 [ 95.125668][ T6617] ip_set_create+0xa97/0x1940 [ 95.125687][ T6617] ? ip_set_create+0x4a2/0x1940 [ 95.125708][ T6617] ? __pfx_ip_set_create+0x10/0x10 [ 95.125730][ T6617] ? rcu_is_watching+0x15/0xb0 [ 95.125744][ T6617] ? lock_release+0x4b/0x3e0 [ 95.125764][ T6617] ? __nla_parse+0x40/0x60 [ 95.125784][ T6617] nfnetlink_rcv_msg+0xb4d/0x1130 [ 95.125802][ T6617] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 95.125826][ T6617] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 95.125841][ T6617] ? kasan_save_free_info+0x46/0x50 [ 95.125875][ T6617] netlink_rcv_skb+0x208/0x470 [ 95.125893][ T6617] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 95.125910][ T6617] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 95.125934][ T6617] ? bpf_lsm_capable+0x9/0x20 [ 95.125953][ T6617] ? security_capable+0x7e/0x2e0 [ 95.125977][ T6617] nfnetlink_rcv+0x26a/0x2520 [ 95.125995][ T6617] ? __dev_queue_xmit+0x1d79/0x3b50 [ 95.126016][ T6617] ? __dev_queue_xmit+0x27b/0x3b50 [ 95.126037][ T6617] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 95.126056][ T6617] ? __pfx___dev_queue_xmit+0x10/0x10 [ 95.126076][ T6617] ? ref_tracker_free+0x63a/0x7d0 [ 95.126095][ T6617] ? __asan_memcpy+0x40/0x70 [ 95.126110][ T6617] ? __pfx_ref_tracker_free+0x10/0x10 [ 95.126128][ T6617] ? __skb_clone+0x63/0x7a0 [ 95.126144][ T6617] ? __skb_clone+0x483/0x7a0 [ 95.126160][ T6617] ? skb_clone+0x246/0x3a0 [ 95.126177][ T6617] ? __netlink_deliver_tap+0x807/0x850 [ 95.126195][ T6617] ? netlink_deliver_tap+0x2e/0x1b0 [ 95.126216][ T6617] ? rcu_is_watching+0x15/0xb0 [ 95.126230][ T6617] ? netlink_deliver_tap+0x2e/0x1b0 [ 95.126249][ T6617] ? lock_release+0x4b/0x3e0 [ 95.126272][ T6617] netlink_unicast+0x82c/0x9e0 [ 95.126294][ T6617] ? __pfx_netlink_unicast+0x10/0x10 [ 95.126313][ T6617] ? netlink_sendmsg+0x642/0xb30 [ 95.126332][ T6617] ? skb_put+0x11b/0x210 [ 95.126347][ T6617] netlink_sendmsg+0x805/0xb30 [ 95.126370][ T6617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.126399][ T6617] ? aa_sock_msg_perm+0xf1/0x1d0 [ 95.126415][ T6617] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 95.126432][ T6617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.126453][ T6617] __sock_sendmsg+0x219/0x270 [ 95.126473][ T6617] ____sys_sendmsg+0x505/0x830 [ 95.126491][ T6617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.126510][ T6617] ? import_iovec+0x74/0xa0 [ 95.126529][ T6617] ___sys_sendmsg+0x21f/0x2a0 [ 95.126545][ T6617] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.126563][ T6617] ? futex_wake+0x4b2/0x560 [ 95.126593][ T6617] ? __fget_files+0x2a/0x420 [ 95.126606][ T6617] ? __fget_files+0x3a0/0x420 [ 95.126623][ T6617] __x64_sys_sendmsg+0x19b/0x260 [ 95.126640][ T6617] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 95.126660][ T6617] ? rcu_is_watching+0x15/0xb0 [ 95.126677][ T6617] ? rcu_is_watching+0x15/0xb0 [ 95.126693][ T6617] do_syscall_64+0xfa/0x3b0 [ 95.126715][ T6617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.126730][ T6617] ? clear_bhb_loop+0x60/0xb0 [ 95.126747][ T6617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.126763][ T6617] RIP: 0033:0x7f7ba018ebe9 [ 95.126778][ T6617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.126791][ T6617] RSP: 002b:00007f7ba106f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.126809][ T6617] RAX: ffffffffffffffda RBX: 00007f7ba03b5fa0 RCX: 00007f7ba018ebe9 [ 95.126821][ T6617] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000a [ 95.126832][ T6617] RBP: 00007f7ba0211e19 R08: 0000000000000000 R09: 0000000000000000 [ 95.126842][ T6617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.126851][ T6617] R13: 00007f7ba03b6038 R14: 00007f7ba03b5fa0 R15: 00007f7ba04dfa28 [ 95.126869][ T6617] [ 95.126888][ T6617] Mem-Info: [ 95.565382][ T6640] netlink: 52 bytes leftover after parsing attributes in process `syz.0.178'. [ 95.662504][ T6642] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 95.680785][ T6617] active_anon:7314 inactive_anon:0 isolated_anon:0 [ 95.680785][ T6617] active_file:11908 inactive_file:39861 isolated_file:0 [ 95.680785][ T6617] unevictable:768 dirty:148 writeback:0 [ 95.680785][ T6617] slab_reclaimable:10814 slab_unreclaimable:97108 [ 95.680785][ T6617] mapped:33551 shmem:2656 pagetables:1471 [ 95.680785][ T6617] sec_pagetables:0 bounce:0 [ 95.680785][ T6617] kernel_misc_reclaimable:0 [ 95.680785][ T6617] free:1315851 free_pcp:13461 free_cma:0 [ 95.957758][ T6617] Node 0 active_anon:34304kB inactive_anon:0kB active_file:47632kB inactive_file:159244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138996kB dirty:592kB writeback:0kB shmem:13772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12388kB pagetables:5696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 96.060918][ T6617] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 96.112315][ T6617] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 96.153655][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 96.192947][ T6617] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 96.203377][ T6617] Node 0 DMA32 free:1357568kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29856kB inactive_anon:0kB active_file:47632kB inactive_file:157668kB unevictable:1536kB writepending:592kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:43476kB local_pcp:24304kB free_cma:0kB [ 96.247830][ T6617] lowmem_reserve[]: 0 0 1 1 1 [ 96.252648][ T6617] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 96.333527][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 96.340039][ T9] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 96.358888][ T6617] lowmem_reserve[]: 0 0 0 0 0 [ 96.366672][ T6617] Node 1 Normal free:3883224kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20612kB local_pcp:11428kB free_cma:0kB [ 96.398245][ T6617] lowmem_reserve[]: 0 0 0 0 0 [ 96.403623][ T9] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 96.412425][ T6617] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 96.422890][ T9] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 96.458384][ T9] usb 3-1: config 8 has no interface number 0 [ 96.471543][ T9] usb 3-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 96.472029][ T6617] Node 0 [ 96.482968][ T9] usb 3-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 96.497457][ T9] usb 3-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.510661][ T6617] DMA32: 1358*4kB (UE) 697*8kB (UME) 216*16kB (UE) 136*32kB (UME) 112*64kB (UME) 77*128kB (UME) 61*256kB (UME) 11*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 316*4096kB (UM) = 1357568kB [ 96.513828][ T9] usb 3-1: config 8 interface 223 has no altsetting 0 [ 96.537976][ T6617] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 96.551765][ T6617] Node 1 Normal: 184*4kB (UE) 53*8kB (UME) 47*16kB (UME) 57*32kB (UME) 25*64kB [ 96.552108][ T9] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 96.573731][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.581865][ T6617] (UME) 6*128kB (UME) 7*256kB (UME) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 945*4096kB (M) = 3883224kB [ 96.596185][ T9] usb 3-1: Product: syz [ 96.600431][ T9] usb 3-1: Manufacturer: syz [ 96.605201][ T5912] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 96.613995][ T9] usb 3-1: SerialNumber: syz [ 96.617913][ T6617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.632454][ T6617] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 96.642939][ T6645] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 96.651485][ T6617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.662877][ T6617] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 96.673064][ T6617] 54517 total pagecache pages [ 96.678185][ T6617] 0 pages in swap cache [ 96.682415][ T6617] Free swap = 124996kB [ 96.687438][ T6617] Total swap = 124996kB [ 96.691664][ T6617] 2097051 pages RAM [ 96.698452][ T6617] 0 pages HighMem/MovableOnly [ 96.703201][ T6617] 425656 pages reserved [ 96.710064][ T6617] 0 pages cma reserved [ 96.733603][ T979] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 96.763577][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 96.774288][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 96.784737][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 96.839875][ T5912] usb 2-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 96.852337][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.861674][ T5912] usb 2-1: Product: syz [ 96.867624][ T5912] usb 2-1: Manufacturer: syz [ 96.872174][ T6642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.874793][ T5912] usb 2-1: SerialNumber: syz [ 96.882227][ T6642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.894834][ T5912] usb 2-1: config 0 descriptor?? [ 96.912491][ T9] usb 3-1: USB disconnect, device number 22 [ 96.918533][ T979] usb 5-1: Using ep0 maxpacket: 16 [ 96.928225][ T979] usb 5-1: config index 0 descriptor too short (expected 42, got 18) [ 96.937685][ T979] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 96.950718][ T979] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 96.979235][ T979] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 96.988951][ T979] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 96.998553][ T979] usb 5-1: Product: syz [ 97.002807][ T979] usb 5-1: SerialNumber: syz [ 97.016674][ T979] r8152-cfgselector 5-1: Unknown version 0x0000 [ 97.022928][ T979] r8152-cfgselector 5-1: config 0 descriptor?? [ 97.032356][ T979] hub 5-1:0.0: bad descriptor, ignoring hub [ 97.038855][ T979] hub 5-1:0.0: probe with driver hub failed with error -5 [ 97.077423][ T6676] capability: warning: `syz.3.184' uses 32-bit capabilities (legacy support in use) [ 97.089090][ T6676] netlink: 32 bytes leftover after parsing attributes in process `syz.3.184'. [ 97.098494][ T6676] (unnamed net_device) (uninitialized): option ad_select: invalid value (48) [ 97.135210][ T5940] usb 2-1: USB disconnect, device number 23 [ 97.293529][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 97.443539][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 97.449831][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 97.457914][ T24] usb 1-1: config 0 has no interface number 0 [ 97.464044][ T24] usb 1-1: too many endpoints for config 0 interface 1 altsetting 5: 102, using maximum allowed: 30 [ 97.475609][ T24] usb 1-1: config 0 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 97.488772][ T24] usb 1-1: config 0 interface 1 has no altsetting 0 [ 97.497578][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 97.508820][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.523249][ T24] usb 1-1: Product: syz [ 97.527537][ T24] usb 1-1: Manufacturer: syz [ 97.532421][ T24] usb 1-1: SerialNumber: syz [ 97.539311][ T24] usb 1-1: config 0 descriptor?? [ 97.546824][ T6685] tmpfs: Unknown parameter 'r%Ҵ\wӠR(4;a; [ 97.546824][ T6685] MUg6&x@2<5ʍ2TZ5wVU]TmPZ<M;xY9]gŞn;O훌u [ 97.546824][ T6685] ~^>Ƥr&Dq.;쀯<2AU' [ 97.573026][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.001183][ T6694] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 98.073663][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 98.243496][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 98.355420][ T9] usb 1-1: USB disconnect, device number 18 [ 98.418165][ T24] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 98.582716][ T6707] binder: 6706:6707 ioctl c0306201 2000000003c0 returned -14 [ 98.594371][ T6707] binder: 6706:6707 ioctl c05c5340 200000000040 returned -22 [ 98.601826][ T5941] r8152-cfgselector 5-1: USB disconnect, device number 10 [ 98.671176][ T6707] loop2: detected capacity change from 0 to 7 [ 98.754564][ T6707] loop2: p1 [ 98.757809][ T6707] loop2: partition table partially beyond EOD, truncated [ 98.771250][ T6693] syz.1.188 (6693): drop_caches: 2 [ 98.784720][ T6707] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 98.841234][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 98.886024][ T24] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 98.901703][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.966078][ T24] usb 3-1: Product: syz [ 98.973195][ T24] usb 3-1: Manufacturer: syz [ 98.993515][ T24] usb 3-1: SerialNumber: syz [ 99.005053][ T24] usb 3-1: config 0 descriptor?? [ 99.025882][ T24] usb 3-1: bad CDC descriptors [ 99.031396][ T24] usb 3-1: unsupported MDLM descriptors [ 99.091239][ T6721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.192'. [ 99.107682][ T6721] erspan0: entered promiscuous mode [ 99.116085][ T6721] erspan0: left promiscuous mode [ 99.383545][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 99.466561][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 99.537558][ T9] usb 1-1: config 1 has an invalid descriptor of length 18, skipping remainder of the config [ 99.563651][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.603234][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 99.617825][ T6740] tipc: Enabling of bearer rejected, failed to enable media [ 99.633169][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 99.643094][ T9] usb 1-1: SerialNumber: syz [ 99.703714][ T979] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 99.776771][ T24] IPVS: starting estimator thread 0... [ 99.783415][ T6745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.863746][ T6746] IPVS: using max 45 ests per chain, 108000 per kthread [ 99.883585][ T979] usb 2-1: Using ep0 maxpacket: 8 [ 99.890988][ T979] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 99.904752][ T6753] input: syz0 as /devices/virtual/input/input11 [ 99.917440][ T979] usb 2-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 99.990925][ T979] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 100.015905][ T979] usb 2-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 100.031697][ T979] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 100.042493][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.051217][ T979] usb 2-1: Product: syz [ 100.055874][ T979] usb 2-1: Manufacturer: syz [ 100.060576][ T979] usb 2-1: SerialNumber: syz [ 100.079642][ T979] hso 2-1:6.0: Can't find BULK OUT endpoint [ 100.277329][ T979] usb 2-1: USB disconnect, device number 24 [ 100.503546][ T5941] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 100.640800][ T979] usb 3-1: USB disconnect, device number 23 [ 100.673794][ T5941] usb 4-1: Using ep0 maxpacket: 8 [ 100.721713][ T6760] netlink: 68 bytes leftover after parsing attributes in process `syz.2.207'. [ 100.736606][ T6760] netlink: 68 bytes leftover after parsing attributes in process `syz.2.207'. [ 100.751879][ T5941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.818784][ T5941] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 100.859214][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.886998][ T5941] usb 4-1: Product: syz [ 100.899499][ T5941] usb 4-1: Manufacturer: syz [ 100.914726][ T5941] usb 4-1: SerialNumber: syz [ 100.924778][ T5941] usb 4-1: config 0 descriptor?? [ 100.948722][ T5941] cdc_phonet 4-1:0.0: skipping garbage [ 100.960275][ T5941] cdc_phonet 4-1:0.0: probe with driver cdc_phonet failed with error -22 [ 101.163660][ T6758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 101.373781][ T979] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 101.550163][ T979] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 101.581163][ T979] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.615312][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.756802][ T979] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 102.103574][ T5912] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 102.111372][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 102.150379][ T979] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 102.166903][ T9] usb 1-1: 0:2 : does not exist [ 102.228223][ T9] usb 1-1: USB disconnect, device number 19 [ 102.295870][ T5912] usb 2-1: device descriptor read/64, error -32 [ 102.348044][ T6069] udevd[6069]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.406430][ T6788] program syz.1.215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.733324][ T6800] netlink: 16 bytes leftover after parsing attributes in process `syz.1.218'. [ 102.773687][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 102.924786][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 102.931445][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 102.946142][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.965637][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.986464][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.996541][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.007208][ T9] usb 1-1: Product: syz [ 103.011287][ T6814] tipc: Enabling of bearer rejected, failed to enable media [ 103.011427][ T9] usb 1-1: Manufacturer: syz [ 103.029629][ T979] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 103.037311][ T9] usb 1-1: SerialNumber: syz [ 103.065984][ T6816] netlink: 3176 bytes leftover after parsing attributes in process `syz.1.224'. [ 103.186213][ T979] usb 5-1: Using ep0 maxpacket: 16 [ 103.193282][ T979] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 108, changing to 10 [ 103.207009][ T979] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.219530][ T979] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 103.233918][ T979] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.240639][ T979] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 103.260934][ T6793] binder: BINDER_SET_CONTEXT_MGR already set [ 103.267935][ T6793] binder: 6792:6793 ioctl 4018620d 200000000040 returned -16 [ 103.277455][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.294355][ T979] usb 5-1: config 0 descriptor?? [ 103.478248][ T9] usb 1-1: 0:2 : does not exist [ 103.727302][ T979] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 103.735341][ T979] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 103.742764][ T979] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 103.750531][ T979] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 103.757957][ T979] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 103.765431][ T979] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 103.772841][ T979] hid-generic 0003:045E:05DA.0003: unbalanced collection at end of report description [ 103.782892][ T979] hid-generic 0003:045E:05DA.0003: probe with driver hid-generic failed with error -22 [ 103.818608][ T979] usb 4-1: USB disconnect, device number 18 [ 103.876338][ T6838] capability: warning: `syz.3.230' uses deprecated v2 capabilities in a way that may be insecure [ 103.938449][ T5912] usb 3-1: USB disconnect, device number 24 [ 104.001979][ T5941] usb 5-1: USB disconnect, device number 11 [ 104.126569][ T9] usb 1-1: USB disconnect, device number 20 [ 104.160471][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.353550][ T979] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 104.380646][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 104.389624][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 104.423926][ T5912] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 104.503818][ T979] usb 2-1: Using ep0 maxpacket: 32 [ 104.513573][ T979] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 104.526724][ T979] usb 2-1: config 0 has no interface number 0 [ 104.537099][ T979] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 104.565315][ T979] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 104.573335][ T979] usb 2-1: Product: syz [ 104.577581][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 104.583079][ T979] usb 2-1: Manufacturer: syz [ 104.591149][ T5912] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 104.599878][ T5912] usb 3-1: config 0 has no interface number 0 [ 104.608666][ T979] usb 2-1: config 0 descriptor?? [ 104.618346][ T5912] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 104.646243][ T5912] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 104.682631][ T5912] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 104.714446][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 104.724185][ T5912] usb 3-1: Product: syz [ 104.734146][ T5912] usb 3-1: SerialNumber: syz [ 104.740088][ T5912] usb 3-1: config 0 descriptor?? [ 104.762714][ T5912] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 104.785825][ T5912] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input13 [ 104.984684][ T6852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.989693][ T30] audit: type=1326 audit(1755398298.137:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.0.246" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7eca18ebe9 code=0x0 [ 105.002709][ T6852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.105243][ T6911] loop6: detected capacity change from 0 to 63 [ 105.116024][ T5849] buffer_io_error: 10 callbacks suppressed [ 105.116039][ T5849] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.146080][ T6911] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.155551][ T5849] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.163922][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 105.177476][ T6911] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.187593][ T5849] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.206244][ T6911] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.216319][ T5849] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.225216][ T6911] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.233201][ T6914] Buffer I/O error on dev loop6, logical block 2, async page read [ 105.241795][ T6914] Buffer I/O error on dev loop6, logical block 2, async page read [ 105.335785][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 105.345750][ T24] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 105.354869][ T24] usb 5-1: config 0 has no interface number 0 [ 105.365824][ T24] usb 5-1: config 0 interface 217 has no altsetting 0 [ 105.382958][ T24] usb 5-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=ce.a8 [ 105.392367][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.415644][ T24] usb 5-1: Product: syz [ 105.427681][ T24] usb 5-1: Manufacturer: syz [ 105.433614][ T5912] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 105.447717][ T24] usb 5-1: SerialNumber: syz [ 105.460007][ T24] usb 5-1: config 0 descriptor?? [ 105.593620][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 105.619908][ T5912] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 105.651860][ T5912] usb 4-1: config 0 has no interface number 0 [ 105.673894][ T5912] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 105.690109][ T24] usb 5-1: USB disconnect, device number 12 [ 105.720411][ T5912] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 105.739297][ T5912] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 105.775851][ T5912] usb 4-1: Product: syz [ 105.794427][ T5912] usb 4-1: Manufacturer: syz [ 105.820542][ T5912] usb 4-1: SerialNumber: syz [ 105.845489][ T5912] usb 4-1: config 0 descriptor?? [ 105.865270][ T5912] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 105.885181][ T5912] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 105.893114][ T5912] keyspan 4-1:0.107: unsupported endpoint type 0 [ 105.905161][ T5912] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 105.908052][ T24] usb 2-1: USB disconnect, device number 27 [ 105.920329][ T5912] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 105.922263][ T5912] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 105.927028][ T5912] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 105.928131][ T5912] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 105.958913][ T5912] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 105.959920][ T5912] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 105.962738][ T5912] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 106.074028][ T5941] usb 4-1: USB disconnect, device number 19 [ 106.084361][ T5941] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 106.095389][ T5941] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 106.160404][ T6920] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 106.206093][ T5941] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 106.220262][ T5941] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 106.233034][ T5941] keyspan 4-1:0.107: device disconnected [ 106.280294][ T6922] random: crng reseeded on system resumption [ 106.366185][ T6924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.250'. [ 106.391978][ T6924] netlink: 'syz.4.250': attribute type 7 has an invalid length. [ 106.400699][ T6924] netlink: 'syz.4.250': attribute type 8 has an invalid length. [ 106.425824][ T6924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.250'. [ 106.452309][ T6924] gretap0: entered promiscuous mode [ 106.474320][ T6924] batadv_slave_1: entered promiscuous mode [ 106.569627][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.251'. [ 106.586927][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.252'. [ 106.671393][ T6933] mmap: syz.1.252 (6933) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.943522][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 107.083593][ T24] usb 2-1: device descriptor read/64, error -71 [ 107.101688][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 107.108658][ C0] ------------[ cut here ]------------ [ 107.114116][ C0] URB ffff88802f570900 submitted while active [ 107.120784][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:379 usb_submit_urb+0xfc1/0x1830 [ 107.130075][ C0] Modules linked in: [ 107.133961][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 107.145568][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.155604][ C0] RIP: 0010:usb_submit_urb+0xfc1/0x1830 [ 107.161139][ C0] Code: 44 89 f2 e8 31 ea 00 fa e9 13 fc ff ff e8 67 01 94 fa c6 05 7b cd 61 08 01 90 48 c7 c7 20 fc 34 8c 48 89 de e8 f0 9f 57 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 41 01 94 fa eb 11 e8 3a 01 94 fa bd [ 107.180825][ C0] RSP: 0018:ffffc900000077b8 EFLAGS: 00010046 [ 107.186896][ C0] RAX: ef19197f0dae4d00 RBX: ffff88802f570900 RCX: 0000000000040000 [ 107.194863][ C0] RDX: ffffc900021a1000 RSI: 0000000000006a4e RDI: 0000000000006a4f [ 107.202827][ C0] RBP: 000000000000000f R08: ffff8880b8624253 R09: 1ffff110170c484a [ 107.210785][ C0] R10: dffffc0000000000 R11: ffffed10170c484b R12: dffffc0000000000 [ 107.218745][ C0] R13: ffff888024505030 R14: ffff88802f570908 R15: 0000000000000820 [ 107.226705][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 107.235620][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.242220][ C0] CR2: 00007f7ecb01ff98 CR3: 00000000308aa000 CR4: 00000000003526f0 [ 107.250184][ C0] Call Trace: [ 107.253452][ C0] [ 107.256291][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 107.261483][ C0] cm109_urb_irq_callback+0x709/0xca0 [ 107.266848][ C0] __usb_hcd_giveback_urb+0x417/0x690 [ 107.272211][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 107.278105][ C0] ? rcu_is_watching+0x15/0xb0 [ 107.282887][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 107.288265][ C0] dummy_timer+0x862/0x4550 [ 107.292769][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 107.298134][ C0] ? rcu_is_watching+0x15/0xb0 [ 107.302883][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 107.307815][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 107.312752][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 107.317683][ C0] __hrtimer_run_queues+0x529/0xc60 [ 107.322875][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 107.328583][ C0] ? read_tsc+0x9/0x20 [ 107.332648][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 107.338442][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 107.343542][ C0] handle_softirqs+0x283/0x870 [ 107.348299][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 107.353049][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 107.358319][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 107.363506][ C0] __irq_exit_rcu+0xca/0x1f0 [ 107.368077][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 107.373260][ C0] irq_exit_rcu+0x9/0x30 [ 107.377482][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 107.383101][ C0] [ 107.386011][ C0] [ 107.388925][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 107.394888][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 107.400598][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 c7 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 107.420184][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 107.426237][ C0] RAX: ef19197f0dae4d00 RBX: ffffffff81968308 RCX: ef19197f0dae4d00 [ 107.434192][ C0] RDX: 0000000000000001 RSI: ffffffff8be334e0 RDI: ffffffff81968308 [ 107.442142][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 107.450096][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38130 [ 107.458057][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 107.466010][ C0] ? do_idle+0x1e8/0x510 [ 107.470244][ C0] ? do_idle+0x1e8/0x510 [ 107.474470][ C0] default_idle+0x13/0x20 [ 107.478780][ C0] default_idle_call+0x74/0xb0 [ 107.483524][ C0] do_idle+0x1e8/0x510 [ 107.487575][ C0] ? __pfx_do_idle+0x10/0x10 [ 107.492160][ C0] cpu_startup_entry+0x44/0x60 [ 107.496902][ C0] rest_init+0x2de/0x300 [ 107.501127][ C0] start_kernel+0x3a9/0x410 [ 107.505616][ C0] x86_64_start_reservations+0x24/0x30 [ 107.511070][ C0] x86_64_start_kernel+0x143/0x1c0 [ 107.516168][ C0] common_startup_64+0x13e/0x147 [ 107.521099][ C0] [ 107.524103][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 107.531361][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(full) [ 107.542969][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.553011][ C0] Call Trace: [ 107.556274][ C0] [ 107.559100][ C0] dump_stack_lvl+0x99/0x250 [ 107.563679][ C0] ? __asan_memcpy+0x40/0x70 [ 107.568253][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.573434][ C0] ? __pfx__printk+0x10/0x10 [ 107.578022][ C0] vpanic+0x281/0x750 [ 107.581991][ C0] ? __pfx__printk+0x10/0x10 [ 107.586569][ C0] ? __pfx_vpanic+0x10/0x10 [ 107.591061][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 107.596340][ C0] panic+0xb9/0xc0 [ 107.600050][ C0] ? __pfx_panic+0x10/0x10 [ 107.604453][ C0] __warn+0x31b/0x4b0 [ 107.608420][ C0] ? usb_submit_urb+0xfc1/0x1830 [ 107.613340][ C0] ? usb_submit_urb+0xfc1/0x1830 [ 107.618260][ C0] report_bug+0x2be/0x4f0 [ 107.622589][ C0] ? usb_submit_urb+0xfc1/0x1830 [ 107.627506][ C0] ? usb_submit_urb+0xfc1/0x1830 [ 107.632865][ C0] ? usb_submit_urb+0xfc3/0x1830 [ 107.637782][ C0] handle_bug+0x84/0x160 [ 107.642005][ C0] exc_invalid_op+0x1a/0x50 [ 107.646492][ C0] asm_exc_invalid_op+0x1a/0x20 [ 107.651321][ C0] RIP: 0010:usb_submit_urb+0xfc1/0x1830 [ 107.656848][ C0] Code: 44 89 f2 e8 31 ea 00 fa e9 13 fc ff ff e8 67 01 94 fa c6 05 7b cd 61 08 01 90 48 c7 c7 20 fc 34 8c 48 89 de e8 f0 9f 57 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 41 01 94 fa eb 11 e8 3a 01 94 fa bd [ 107.676434][ C0] RSP: 0018:ffffc900000077b8 EFLAGS: 00010046 [ 107.682482][ C0] RAX: ef19197f0dae4d00 RBX: ffff88802f570900 RCX: 0000000000040000 [ 107.690442][ C0] RDX: ffffc900021a1000 RSI: 0000000000006a4e RDI: 0000000000006a4f [ 107.698396][ C0] RBP: 000000000000000f R08: ffff8880b8624253 R09: 1ffff110170c484a [ 107.706350][ C0] R10: dffffc0000000000 R11: ffffed10170c484b R12: dffffc0000000000 [ 107.714305][ C0] R13: ffff888024505030 R14: ffff88802f570908 R15: 0000000000000820 [ 107.722276][ C0] ? usb_submit_urb+0xfc0/0x1830 [ 107.727200][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 107.732391][ C0] cm109_urb_irq_callback+0x709/0xca0 [ 107.737754][ C0] __usb_hcd_giveback_urb+0x417/0x690 [ 107.743127][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 107.749007][ C0] ? rcu_is_watching+0x15/0xb0 [ 107.753760][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 107.759120][ C0] dummy_timer+0x862/0x4550 [ 107.763618][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 107.768980][ C0] ? rcu_is_watching+0x15/0xb0 [ 107.773732][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 107.778662][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 107.783590][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 107.788513][ C0] __hrtimer_run_queues+0x529/0xc60 [ 107.793699][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 107.799398][ C0] ? read_tsc+0x9/0x20 [ 107.803458][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 107.809250][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 107.814346][ C0] handle_softirqs+0x283/0x870 [ 107.819092][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 107.823845][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 107.829120][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 107.834304][ C0] __irq_exit_rcu+0xca/0x1f0 [ 107.838875][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 107.844060][ C0] irq_exit_rcu+0x9/0x30 [ 107.848283][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 107.853902][ C0] [ 107.856814][ C0] [ 107.859728][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 107.865692][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 107.871398][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 c7 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 107.890988][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 107.897044][ C0] RAX: ef19197f0dae4d00 RBX: ffffffff81968308 RCX: ef19197f0dae4d00 [ 107.905005][ C0] RDX: 0000000000000001 RSI: ffffffff8be334e0 RDI: ffffffff81968308 [ 107.912970][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 107.920929][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38130 [ 107.928886][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 107.936841][ C0] ? do_idle+0x1e8/0x510 [ 107.941071][ C0] ? do_idle+0x1e8/0x510 [ 107.945296][ C0] default_idle+0x13/0x20 [ 107.949606][ C0] default_idle_call+0x74/0xb0 [ 107.954350][ C0] do_idle+0x1e8/0x510 [ 107.958400][ C0] ? __pfx_do_idle+0x10/0x10 [ 107.962974][ C0] cpu_startup_entry+0x44/0x60 [ 107.967721][ C0] rest_init+0x2de/0x300 [ 107.971945][ C0] start_kernel+0x3a9/0x410 [ 107.976432][ C0] x86_64_start_reservations+0x24/0x30 [ 107.981879][ C0] x86_64_start_kernel+0x143/0x1c0 [ 107.986978][ C0] common_startup_64+0x13e/0x147 [ 107.991914][ C0] [ 107.995046][ C0] Kernel Offset: disabled [ 107.999351][ C0] Rebooting in 86400 seconds..