last executing test programs: 11.374670248s ago: executing program 0 (id=1727): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r4, r2, r3, 0xa000000, 0x80000001, 0x80000001, 0x0, 0x0, 0x4000000, 0xd, 0x20000}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x5c, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 11.212521737s ago: executing program 0 (id=1728): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)={0x40, 0x3}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000002c0)={0x60, 0x1, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0xffffffff, &(0x7f0000000100)=[{0x0, 0x7, 0x970}, {0xe62, 0x2, 0xc}, {0x7, 0x81, 0xffff}, {0x93d, 0xb, 0x9}, {0x8, 0x6, 0x8}, {0x8, 0x80, 0x35d}, {0x1363, 0x1ff, 0x7fff}, {0xfffffffffffeffff, 0x3, 0x8}, {0xd10, 0xfffffffffffffffa}], 0x9, 0x100000000, 0x4, 0xa, 0x20, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0x80000b}, 0x1c) listen(r3, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x60, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.06497708s ago: executing program 0 (id=1737): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304f500"/20, @ANYRES32=0x0, @ANYBLOB="ef050000000000003000128009000100766c616e00000000200002800c0002000a0000001f000000060001000ffe000006000500"], 0x60}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000000) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x2, 'l'}, @main=@item_012={0x2, 0x0, 0x8, '\nZ'}, @local=@item_012={0x1, 0x2, 0x5, 'P'}]}}, 0x0}, 0x0) 7.948353694s ago: executing program 4 (id=1739): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) (async) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000980)={0x0, 0x12, 0x2, "0231"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x80, {}, 0x7fff, 0x2}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) (async) io_uring_enter(r0, 0x47f6, 0x0, 0x5, 0x0, 0x0) 6.615266099s ago: executing program 3 (id=1743): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc020000000000000000000000ff80000000000000000000000000000000000000000003000200000a00000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005703000000000000000000000000000000000000000000000000000000000000dd0200000000000000000000000000000000000000000000c4000500ac14143b000000000000000000000000000000002bba000000000000ac14140c000000000000000000000000000000000000ff00000000000000000001000000fc020000000000000000000000000000000000003200000000000000fe880000000000000000000000000001000000000000000000000000000000008000000000000000000000000000000000000001000000003c0000000a000000ac1414bb000000000000000000000000000037adc3"], 0x17c}}, 0x0) 6.428816005s ago: executing program 3 (id=1744): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000180)={0x40, 0x3, 0x2, "3283"}, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x1135) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {0x7, 0x0}}}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) map_shadow_stack(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 6.157795115s ago: executing program 4 (id=1746): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x400) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100) r2 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280)={0x60000008}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r5 = socket(0x200000100000011, 0x3, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r9}) close_range(r5, r9, 0x0) sendmsg$inet6(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xfffff72e, @private1, 0xfffffe01}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="0bcfcc8b8f9e41dc2f59741c32dbbd98de411e97aa2a306f1fb091e7e8994029d76ccf27f73ec6fdda0475062dcdfc62858ee49dbed0fc7986da5df5ce69096275e3a0e5346985d7178021807642b01d2b5d5b3e9ed8794182b0792e1e2618b9a4fcd955d46ece7ce99cc7326dbeb249090d8d2b45759a56ce35bad7f6bcfdd6bac5db16528bf678a21c26bca3d55d0ab9f8820efaeb3f8e965501aef3a2a22ed60f1b777b3af0df007039e022af0306693b3d25d65a55b864a61403e9744f56f6a71d", 0xc3}, {&(0x7f0000000480)="24c751e6bd3906db3d411c2532e0b6e4ef65ca7cd609ab2a9e7907acb79eb0fc25432c0be758675d2a204ecfa174b9807e5f717a2faddda0a5a189eac119e58b4d37c0ca2e2187a97d27df6907224ebf2d24c70c4d5c60b58905089e38acc9f42c90e67d0f511430ad03a2037771f26aad15c2960fa27ea00231ed200cf0f13ae2287f0fb389ff952d4d783337a3d44949423eed7f45b3a02f66b1305d1178a8a43acd9c2d78503d688e9078df615db1fb39f56b5325060db3a2d3dfc95135b40f940dd0d4fdeb2f8bf3", 0xca}, {&(0x7f0000000580)="b0e1591e8b024f6c43d140ff6d19afdf0fe19cffb6e0b7dbc3d1026ecc8d55a498615034548a3579f9bd7697e6b74cc32ea3d6cd6579b720e5253fda4ef2e350c2b2f49c6f1e52bbd5fcf0e52284e1703da3e00f6fafaa84ea09b05ab5af2739701dd9", 0x63}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000290000003e000000090000004c0000002900000036000000290600000000000007300000000102c5031d9400000000000002000000000000000700000000000000010000000000008002000000000000000400000000009a6674ed8b45200105b35067be8a0f06ba8f7f880f57779444cd6788bd2cd1f105e10adab0e8e9e23ea379d4cc5226f26d03e0aa15531b5a5034a21b4cdb5ca69e57f546c72b82955d37780f35d59c"], 0x5c}, 0x1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r10, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) 4.988532562s ago: executing program 0 (id=1748): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe10, 0x2000870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x6d4, 0xba2, 0xc, 0x30, {0x8, 0x9}, 0xd0, 0x9}}) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x200000001000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000005540)={0x0, 0x0}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000800)={0xa, 0xe22, 0x2, @mcast2, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ef1785600000000000010902240001400000000904000821030000000921000008012205000905810300"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005300)=[{{&(0x7f0000000040)=@rc, 0x80, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f00000002c0)=""/249, 0xf9}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f00000004c0)=""/40, 0x28}, {&(0x7f0000000500)=""/82, 0x52}, {&(0x7f0000000580)=""/255, 0xff}, {&(0x7f0000000680)=""/107, 0x6b}], 0x8, &(0x7f0000000780)=""/183, 0xb7}, 0x2}, {{&(0x7f0000000840)=@nfc_llcp, 0x80, &(0x7f0000000c80)=[{&(0x7f00000008c0)=""/67, 0x43}, {&(0x7f0000000940)=""/3, 0x3}, {&(0x7f0000000980)=""/224, 0xe0}, {&(0x7f0000000a80)=""/199, 0xc7}, {&(0x7f0000000b80)=""/197, 0xc5}], 0x5}, 0xff}, {{&(0x7f0000000d00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000d80)=""/96, 0x60}, {&(0x7f0000000e00)=""/98, 0x62}, {&(0x7f0000000e80)=""/15, 0xf}], 0x3}}, {{&(0x7f0000000f00)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000f80)=""/4084, 0xff4}, {&(0x7f0000001f80)=""/125, 0x7d}], 0x2, &(0x7f0000002040)=""/172, 0xac}, 0xfffffffc}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000002100)=""/248, 0xf8}, {&(0x7f0000002200)=""/4092, 0xffc}, {&(0x7f0000003200)=""/47, 0x2f}, {&(0x7f0000003240)=""/171, 0xab}, {&(0x7f0000003300)=""/242, 0xf2}, {&(0x7f0000003400)=""/138, 0x8a}, {&(0x7f00000034c0)=""/4096, 0x1000}], 0x7, &(0x7f0000004540)=""/154, 0x9a}, 0x8}, {{&(0x7f0000004600)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004680)=""/27, 0x1b}, {&(0x7f00000046c0)=""/251, 0xfb}, {&(0x7f00000047c0)=""/54, 0x36}, {&(0x7f0000004800)=""/203, 0xcb}, {&(0x7f0000004900)=""/191, 0xbf}, {&(0x7f00000049c0)=""/164, 0xa4}, {&(0x7f0000004a80)=""/233, 0xe9}, {&(0x7f0000004b80)=""/92, 0x5c}], 0x8, &(0x7f0000004c80)=""/209, 0xd1}, 0x5}, {{&(0x7f0000004d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000004e80)=[{&(0x7f0000004e00)=""/92, 0x5c}], 0x1, &(0x7f0000004ec0)=""/97, 0x61}, 0x7}, {{&(0x7f0000004f40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000005040)=[{&(0x7f0000004fc0)=""/112, 0x70}], 0x1}, 0x8}, {{&(0x7f0000005080)=@nfc, 0x80, &(0x7f0000005200)=[{&(0x7f0000005100)=""/218, 0xda}], 0x1, &(0x7f0000005240)=""/161, 0xa1}, 0x76}], 0x9, 0x3, &(0x7f0000005580)={r4, r5+60000000}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000005640)={r1, 0x7, 0x8, 0xfffffffffffffff8}) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x4) ioctl$KVM_SET_CPUID(r15, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000000000700000000000000ffff00000800000005000000000000000d000000010000000300000002000000215c00000000000001000000000000f8f7ffffffffffff7f6d09c86d2c"]) ioctl$KVM_SET_CPUID(r15, 0x4008ae8a, &(0x7f0000005600)) setsockopt$inet6_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f00000055c0)=@ccm_128={{0x304}, "ef3f2fb15ac0e386", "f68eb64d9a5943947d7494ac8f676a0e", "f2a8a220", "6a47710f4349beff"}, 0x28) 4.887380518s ago: executing program 1 (id=1749): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0608262300", 0x7, 0xfffffffffffffffc) open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x7e, 0xe1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_pidfd_open(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01f20000bbbb8a5c"]) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xc0}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x809000}}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080) 4.300485357s ago: executing program 3 (id=1750): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x400, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x20, 0x6d, 0x1}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008010) syz_emit_ethernet(0x12b, &(0x7f0000000440)={@local, @random="56460a7cef90", @void, {@ipv6={0x86dd, @dccp_packet={0x1, 0x6, "d93c84", 0xf5, 0x21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[@routing={0x0, 0xe, 0x0, 0x67, 0x0, [@private0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xc}, @empty]}, @routing={0x84, 0x6, 0x0, 0x8, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x16}]}], {{0x4e20, 0x4e22, 0x4, 0x1, 0x6, 0x0, 0x0, 0x7, 0x4, "5ef3e9", 0x0, "ec09fd"}, "20f09d354e29339b0abd25d88b7f5df8d68ae2185a8ad19e94b1d654624f87ea5827a553252bf4ab7bc7e435f025d8723a6886d837"}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x35, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x200a}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x31}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x2, 0x25dfdbfb, {0x7, 0x0, 0x0, r6, 0x40, 0x0, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40051}, 0x40c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback={0xb00000000000000}}]}, 0x28}}, 0x84) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_PREPARE_BUF(r10, 0xc058565d, &(0x7f0000000300)=@multiplanar_userptr={0x7, 0x4, 0x4, 0x5a34254a35a0129f, 0x4, {0x77359400}, {0x5, 0x1, 0xd, 0x6, 0x9, 0x0, "f1567ca6"}, 0x8000, 0x2, {0x0}, 0xf}) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5758621d46}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20008040) r12 = socket(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r12}, 0x8) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1b, 0x4, &(0x7f0000002000)=ANY=[@ANYBLOB="3d737e9112fd2d5345d6bff43efdbd1c7c73fddff05bd6e6bc66fe4ed8ea9bffddf86db112131520ece8c5eb09c1d56e6a507b2fc85a9b64eb496dae5cade1ae6d7d3d7234f903bf606917a7bb34fe842bf8770bf3c68b19df9310a8830211d4e2e19402", @ANYBLOB="487b443749883a87186676dbd0335e316a858d5326f7fc4cf05ace8e07a0aea5b3195e237997731af58ab1e32a168de675b97ae791339b72e27c626287747ebf92331bec52f4e032018a74a787753a3c9d3afe650d47826cdcafd2ca347d18eb0663050a357423d8520643705baa2ee741694aa52b0b1dce4227f5ed", @ANYRES32=r7, @ANYBLOB="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", @ANYRES64=r8, @ANYRES32], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x7f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x46, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r14 = syz_io_uring_setup(0x77ce, &(0x7f0000000200)={0x0, 0x2f8b, 0x20000, 0x2, 0x2e2, 0x0, r13}, &(0x7f0000000040), &(0x7f00000000c0)=0x0) r16 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r14, 0x230c, 0xe1cd, 0x10, &(0x7f0000000400)={[0x4240]}, 0x8) syz_io_uring_submit(r1, r15, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x50, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x1, 0x12, 0x0, {0x0, r16}}) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r12, 0x0, 0x0, 0xfffffd49, 0x20044080, 0x1}) 4.161057433s ago: executing program 3 (id=1751): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e20, 0x3, 'none\x00', 0x25, 0x5, 0x60}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e20, 0x3, 'none\x00', 0x25, 0x5, 0x60}, 0x2c) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fec000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fec000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xc5, 0x80012d58, 0x12d5c}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xc5, 0x80012d58, 0x12d5c}}, 0x44) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000240), 0x1000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) (async) ptrace(0x8, r2) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xcc201, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x155e, &(0x7f0000000740)={0x0, 0x1c29, 0x20, 0x1, 0x345, 0x0, r5}, &(0x7f0000000180), &(0x7f00000001c0)) write$UHID_DESTROY(r5, &(0x7f0000000380), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'veth1_to_hsr\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x80}) (async) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x80}) wait4(0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, r2, 0x0) (async) ioprio_set$pid(0x2, r2, 0x0) syz_pidfd_open(r2, 0x0) (async) syz_pidfd_open(r2, 0x0) fsmount(0xffffffffffffffff, 0x1, 0xc) (async) r6 = fsmount(0xffffffffffffffff, 0x1, 0xc) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @broadcast}, @in={0x2, 0x4000, @multicast1}}}, 0x118) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0xfffffffc, "da8c2d561e14496e96815c46dc103c8e81b8d0ef90e0dcef8729d79f06d1da83c09b42190f933cec44c9281bec5d62cf971886181c6e640d29a6f8fd7b68fdfc0442ad2a15aa548ce15d9c90c22e1436a4e7d669f27ac45be99b357bc3d5d32a141ea3f3bcbf46bb71822aac317e2723c06d75b9fae89ab039b259f94dfe8fa10192d181150211b3a2408389bca5ad8cba27d176f0c1f697dc0fb8b3d36154fb7f350ea0f5e9c90fffa16cc381b4402db89497d83023e4a759bea59e484d908ee8fd73dc0101dff8ad6ebd86d4ad273409a529321304dbedf9206ead4156ad2aecf40c40c1c6af01e406a8003c44c1290dfe1372be62476356d63a5e0fc74846", 0x5, 0x69, 0xc6, 0xf2, 0x2, 0x9, 0x1}, r8}}, 0x120) (async) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0xfffffffc, "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", 0x5, 0x69, 0xc6, 0xf2, 0x2, 0x9, 0x1}, r8}}, 0x120) 4.136588649s ago: executing program 4 (id=1752): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7020100ff020000bfa3000000000000070300c000feffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xff90, 0x10, &(0x7f0000000000), 0xffffffbf, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.952499712s ago: executing program 4 (id=1753): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x3, 0x80, 0xf4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xf7, 0x9, 0x6, {0x7, 0x25, 0x1, 0x83, 0x2, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x26, 0x6, 0x1, {0x7, 0x25, 0x1, 0x3, 0x8, 0xdd60}}}}}}}]}}, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x1006, 0x8) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001"], 0x0) (async) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000001000)=ANY=[], 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001000)=ANY=[], 0x0) syz_usb_control_io(r1, &(0x7f0000001380)={0x2c, 0x0, &(0x7f0000001180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000007c0)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000900)={&(0x7f0000ff2000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000fed000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000800)="f3d4d5ed856b88b8f2292d8cb3d9fdd5ddb614589eed446025da1687397ea331f0f022c44fb8deadbbe4bb5878f5198d6bc630aa8933d01b561fecb7df94a3f0de5fc94906f94a0dd11324fd70bef1d12846fb809361f1f7e416b7eef4cc401f3334adcf7d98f1a350b0fd68f0e51d1768f48be6773b90b8ea008e17a4b5f6163d434af388afb7a033a3c76fe30806be3c9056323f426b6b40fd9c1a49c095b096eca9cfb1303ff5949c3c7aa9f95c2f32b2686aceb06e2609161a7048f719e12ab40f52217648fdb721ebfb587a2704be65066b6c4a83fdf0a66abb06d1d69438f5dda927fbe90473dd4b19243fbbe6566302cf7f25483c", 0xf8, r0}, 0x68) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000440)={0x20, 0x8, 0x1, "d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) lsm_get_self_attr(0x68, 0xfffffffffffffffe, &(0x7f0000000040), 0x1) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x0) (async) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x0, 0x11, 0x1, "f5"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) (async) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) (async) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) syz_usb_control_io$printer(r5, &(0x7f0000000140)={0x14, &(0x7f0000000480)={0x20, 0xe, 0xee, {0xee, 0x23, "f78cfa6f3b3674618240614428a78923dc698dcba2fddbf0181291805643b89c08bae10e1945c9fdd21cc258e524b5c76c7b0222f53cb289aacd73849f4aad6f57590b48ee9be99454b4c04a3e3db3659421aa7958c4e0b75d9884f27b98003f7f0fae98b2fefd3f106e31511ea2302349507d7c2d0a487cbabbe13fa443f9ec14458fb943e6d521f38acf01970a78b49250afd4c34e2338fe72bcf37e1a01b20652cd6f9e93a5f599353af929499b173bcdd6da6ce89499938c148b2842ceb6a1fde9276d6e076255bdf15e325c79c9b7920e538c2e00cef2f6d20dd2517a2a14a1ae26d0675d58cc350a28"}}, &(0x7f00000000c0)={0x0, 0x3, 0x2b, @string={0x2b, 0x3, "ce24e58a1e046201f94ff3b06f9f4ec79314ee5b882e978e835205598137af42f5063eea68c35c856a"}}}, &(0x7f0000000580)={0x34, &(0x7f0000000180)={0x40, 0x17, 0x22, "ccb082f70ee04b8570e7e9743e5db023e4e5aa02a43f8ecac7ff0741a21ff21f4131"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x0, 0x5f, {0x5d, "f44b8a55f068807447709d4de8412750e1f96621f7d81be246ac098a702c196a26889aa28a01d8c627c44dedcc543592c2e3ae9ff7befbe9a390d25b24ab1b4238e88573f38c8f007b920051347b77d41ae37752176ee789076bd796f8"}}, &(0x7f0000000300)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0xfc}}) (async) syz_usb_control_io$printer(r5, &(0x7f0000000140)={0x14, &(0x7f0000000480)={0x20, 0xe, 0xee, {0xee, 0x23, "f78cfa6f3b3674618240614428a78923dc698dcba2fddbf0181291805643b89c08bae10e1945c9fdd21cc258e524b5c76c7b0222f53cb289aacd73849f4aad6f57590b48ee9be99454b4c04a3e3db3659421aa7958c4e0b75d9884f27b98003f7f0fae98b2fefd3f106e31511ea2302349507d7c2d0a487cbabbe13fa443f9ec14458fb943e6d521f38acf01970a78b49250afd4c34e2338fe72bcf37e1a01b20652cd6f9e93a5f599353af929499b173bcdd6da6ce89499938c148b2842ceb6a1fde9276d6e076255bdf15e325c79c9b7920e538c2e00cef2f6d20dd2517a2a14a1ae26d0675d58cc350a28"}}, &(0x7f00000000c0)={0x0, 0x3, 0x2b, @string={0x2b, 0x3, "ce24e58a1e046201f94ff3b06f9f4ec79314ee5b882e978e835205598137af42f5063eea68c35c856a"}}}, &(0x7f0000000580)={0x34, &(0x7f0000000180)={0x40, 0x17, 0x22, "ccb082f70ee04b8570e7e9743e5db023e4e5aa02a43f8ecac7ff0741a21ff21f4131"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x0, 0x5f, {0x5d, "f44b8a55f068807447709d4de8412750e1f96621f7d81be246ac098a702c196a26889aa28a01d8c627c44dedcc543592c2e3ae9ff7befbe9a390d25b24ab1b4238e88573f38c8f007b920051347b77d41ae37752176ee789076bd796f8"}}, &(0x7f0000000300)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0xfc}}) 3.607575599s ago: executing program 2 (id=1755): capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)={0x3, 0x7, 0x1, 0x3, 0x8001, 0x401}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d413600000000000002900000004000000", 0x6033) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x7c}}, 0x0) 3.464989607s ago: executing program 2 (id=1756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r1, &(0x7f0000000080)="36e2365320", 0x5, 0xc17) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xfffffffffffffff7]}, 0x8, 0x800) r3 = socket$tipc(0x1e, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x40044160, 0x3) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) unshare(0x40400) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x3ff, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) 3.193088479s ago: executing program 3 (id=1757): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000010300)=[{0x0}, {&(0x7f0000010380)=""/47, 0x2f}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x4000000, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 3.083759967s ago: executing program 1 (id=1758): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0xc, "00629a7d82090100000000000000f7fffffb00"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) close_range(r4, r1, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r5, 0x402c542c, &(0x7f0000000000)) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1) 3.028748261s ago: executing program 2 (id=1759): shmctl$SHM_UNLOCK(0x0, 0xc) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f0000000000)={0x1}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x57b6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @multicast}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) write$sndseq(r8, &(0x7f0000001940)=[{0xff, 0x1, 0x0, 0x8, @time={0x3ff800, 0xe}, {0x6, 0x6}, {0xff, 0x8}, @connect={{0x5, 0x1}, {0x4, 0x2}}}], 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r11, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r11, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x8}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x24008001) sendmsg$inet(r6, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x5c8}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000cc0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1ca4b45c9e22b2de", 0xe3}, {&(0x7f0000000380)="c58cf2a0f0f863621a483b19e7ecfce0d34e53fbf2959272146847c314ac0cdfd79dc1815274c3ee57068b3793c243bc98585fab48eb353478689f452328afb023f75f93227bbe5a4aa3fea049ec0862c493e14eb44aacf27f9060bc2c826383c904750402dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e6", 0x87}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff", 0x80}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b2374095ca6f14a6d13e03375c7029e28592c419bfb8957ac024ba8dc90ab15427410b870f3035ff95146d6e29f9b56ac096281d2f2b249f20c9fdc3239f838acc6b3433571d3043d", 0xaf}, {&(0x7f0000000500)="8700144add194dc92e62bfdc1de91e98227f67410fae0aa2958eeb11856055f582d7ed3b9ca5bf48d2e97becf8673e1532a8", 0x32}, {&(0x7f0000000b00)="6aa7e221ef79afca996dde651fad6b8f1085c4567b3af29b90b3221f98f93ce7f8d32156d842e64f2dd8e9b969c22d076b5dbfb714449b029ff42ec0e2a2c1785d5129cf4ece18ae01", 0x49}], 0x8, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback}}}], 0x20}, 0x0) r12 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast2, @in=@broadcast, 0x4e21, 0x0, 0x4e22, 0xffff, 0x2, 0x80, 0x20, 0x6, r2, r12}, {0xb743, 0x7, 0x8000c, 0xca, 0x79, 0xfffffffffffffb8e, 0x8, 0x4}, {0x3, 0x3, 0x3, 0x92}, 0xa8cb, 0x6e6bb5, 0x1, 0x1, 0x2, 0x2}, {{@in6=@mcast1, 0x4d4, 0xff}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x3104, 0x3, 0x1, 0x8, 0xd2, 0x7ff, 0x9974}}, 0xe8) 2.65121525s ago: executing program 2 (id=1760): syz_usb_connect(0x5, 0xebc, &(0x7f0000000c40)={{0x12, 0x1, 0x310, 0xc1, 0xd, 0xa1, 0x20, 0xe66, 0x1, 0x1af0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xeaa, 0x4, 0x10, 0x6, 0x90, 0x9, [{{0x9, 0x4, 0xd8, 0xf3, 0xc, 0xae, 0x93, 0xda, 0x0, [@uac_as, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x2800}, {0xd, 0x24, 0xf, 0x1, 0xa7, 0x2, 0x5, 0x9}, [@dmm={0x7, 0x24, 0x14, 0xa, 0x27e}, @mdlm={0x15, 0x24, 0x12, 0x5}, @ncm={0x6, 0x24, 0x1a, 0x10, 0x3c}]}], [{{0x9, 0x5, 0xd, 0x2, 0x19f, 0x8, 0x5, 0x1}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x6, 0xdc, [@generic={0x1d, 0x31, "19047ab4b40ed9a08a8d755a2d8d49ee8f9a12e9d34456bad05316"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x2}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x7b, 0x6, 0x61, [@generic={0x73, 0xa, "f4376dac0b72d636e803dba82bd96a9f00676f393f615621bdeefe383befa774b4e8c024023ee8b6cdae544bc406cb9da7bb66ab3ea532fcc95ea592c1e7db2800fc9d0706036d2ec96fba5a8880dbd4c8fa547cc50198c5d58314ccc726251a16529c0cb0c464b58962ef04256c0be755"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x1}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0xc7, 0x6, 0x7, [@generic={0xa7, 0x9, "07a1e378d2960d851586c440b431e39907f3351e114f315ae3ed77f5ac109a2e9dbdf1fa81df2f7871f7140c135f78ec5cc5fc8108eba0fbd0d10feedb0a3b322d2421fe6eec725d4363fe041851b47bf7a385c95a6d1ea013379757c9fe3f4e7c003868bd88eef0f66f85cea95f36d120b61b02544467f4115cb9055ade2975d5881b9bbc18a479af846f37ea773e62aa5c2f1916b43c22da879af53a44d9a4c9f00156ff"}, @generic={0xb5, 0xe, "ef9a92549efbb64fe55836c2371af55eb34b90af3e1b228a6ec38d06a152be3f8f460ff1ee4540325537a79a8c0ab1377a32711c02b9049e0760503f6abf4989954e502893a3893c3b6e1ddc2c4432849003321aed76eb2e00d5f892500526601658710a668057e085d444b7854b75d27f2df121053db6c272b1a9fa845e94d5d3db5a3e666bb114bce6c37152e34dee392055d919225d4200a2aab3347ba7f9736124d4da9b4b61bd8869d75c6879b8cd5f8e"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0xb, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xb}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x0, 0xc2, 0xd8, [@generic={0x91, 0xc, "ce565a120ba57d5969cefa0d688b86fe91f71032a06238826498f2ace6d1fc0920c2aab3357a563b7e649285f7a7bbf3947d193e723733c517e2b8d7a418cb18aa30c8482c676bbbe6909b52be565c134396c3eef9b1f43f87015605cbdfc3fafffbc7fb1dad6758c26cc71cd5bff0e247e5aa41509fdb00edb108a48995486ca035d44b9230a97fc3e35e681b4a95"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3af, 0x81, 0xc2, 0x48, [@generic={0xda, 0x3, "e2de5606987ebadacbe054fa48d52efbc6357e41bed4d1ca36c66fd78238775eed79fd4d07db290648ad5f27c9b883dd455cab182ac0b7d70f3ad11b13bd5875fea21c282cdd94e66e9dbc475903b6bd475081907327b9a0a01bc4838dda42f9ec228e5a6792608d0dc735026cb922c53b5937a4b240b2bcc73ce126c0d2a7d1a0f4c60d2d6e0af18781c7a66ecbb3cd7a35d24d638daa8122f0f0b90cabf99ccd862614a652f2d2910643e7014d68c388ce9d706ba7e8097cb80b1a0022387e8c44cd5a50127b1f2324a74399e773018514b65279331411"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x1, 0x17, 0x0, [@generic={0xc5, 0x4, "b3fa233b116f9cd88d876dbf0862b4fbffdd63b59a6e5296350a47bfac5c9215be3787628fac0df11f10e09135c5381909a0ae79f5014f8b2a1d87fb732a750c471cb91392e38d16652cbc0215374553dd8d46eed26d7ad77c77ea119725507a4474024203c57122497c1cf40f4cccec252a3b8f7932a8e0c913927f99d7a03b0d557fdf0ad5d4f5e95d864412172f36b631c9daa2d48d2aad96730dd43d210ddf86db4fa7cd5ca58e8b7b77b79ea30ace6ee95e960aeae57f77d740f122101376be49"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x7ff}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x2, 0x2, 0x0, [@generic={0x1c, 0x0, "0e2c5ade42d38a6acef4650266c02956189df80399ff3cff21a4"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x2}]}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0x6, 0xf5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x17, 0x4}, @generic={0xc, 0xc, "5f8c28323394df6d8d47"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x6, 0x1, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc0, 0x1ff}]}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0x4, 0x10, 0x8}}]}}, {{0x9, 0x4, 0x2e, 0x2, 0xf, 0x25, 0xa5, 0xf8, 0x3, [@hid_hid={0x9, 0x21, 0x6, 0x5, 0x1, {0x22, 0x574}}, @uac_control={{0xa, 0x24, 0x1, 0x8000, 0xe}, [@mixer_unit={0x7, 0x24, 0x4, 0x4, 0x8, "ffdf"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x1, 0x1, [0x1], 0x1}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x5, 0x2, [0xa, 0x3], 0x1}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0x4, 0x4, "a307c988f04b"}]}], [{{0x9, 0x5, 0x5, 0x0, 0x400, 0x37, 0x7f, 0x3, [@generic={0xa2, 0x21, "bef95a8b0695e92f4dc0237c50ff911f8e79dadf4e3826456e24c6afb7c94b8964659fb359149d6e45bb2d640e1623ae86ae29fc0251cc018c2ed91310ebbd8dd048bf6abc1fc12c63330d3773b27b75f261063fdd61a31a14e883b779dd461d551ee6bdbb67ec42839ad8610c4034131b9a4ef5a1ec8c6dd208528f303cb5ad38c8ec1c700f5faf7efd56071328cb42e9601df0184c6ca6ac0b5d70721ccc64"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x8}]}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x5, 0x40, 0x4f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0xc}]}}, {{0x9, 0x5, 0x10b, 0x0, 0x200, 0x2, 0x9, 0x3, [@generic={0x7a, 0x1, "a5dcf43bff57b361c9df4b4bad3e678f8d8e4247f1a1d4e97bc42d5502a62255e3f18d032066d333bba7fd3f0b2257fb8e4702ed5d71f19e50ff2eb9ab79c508e6e5623b1378b6029422bbefa4906c70cd7b73a4ffd84ce034ab58e5bd8b678a479d6c31d180e6ad0f952d2f7fec824aa9d6b818c5f7c5ef"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x600, 0xe6, 0x5, 0x0, [@generic={0x87, 0x31, "411f573d5aa372592fd1e062c2f817b00936a9ad84a0d37ab2d7c50c474c10cef8cdaac8eb9b2826fe56aef54e0cba1061e508bd26d4c10f4e4ae2aa7e846f7bc1ef65a72a5e06095e68c211caddc9ae37df66e82c3bb97e503e70da731f9d029be267fc26a81bddce8b3536a35e7ce9b92ac5cbb37fa3a714669e644072745245d5e985ec"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x11, 0x8, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0x2, 0x4, 0x10, 0x1, 0x12, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x293}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x81}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x3, 0xf1, 0x0, [@generic={0x21, 0x23, "270cd45cc57979079094d3ca5a75587651a9e96b3e345aea75a46e3c902d8a"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x4}]}}, {{0x9, 0x5, 0xe, 0x5da23fbdd5858e58, 0x400, 0x7f, 0x6a, 0x1}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x5, 0x32, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x3, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x429e}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x72c}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x85, 0x0, 0x8, [@generic={0xdb, 0x4, "607cbfe125fbdfdd13eaa5368758618050b60f23f410fc28c2f68b10ab2b8b0b7acc95d0f41b439b1015bdac6dbc1f46c6d6376cf2d1b3f429f9583a97e01131899e4ad3fdf9c7bcc46e04f225b984a011c16441bd8c59158ad2f6caab4ae846d7a921dff821e38dd6af15efc1dd6d9e4dbd388277a3ba8723e520d19d8609270b0c0913091bd23d2cc3771791463e49f839f1f29ec08aea2a9c0112ed8cf0f3fb947ddff11d03476e2509b29ad1a7c34d42a5461ba330a1bc076beeea4e548331cf8e3c8d7e1259292ab9ef7d784f159090efa8a52dfca557"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0xc8, 0xd, 0x81}}, {{0x9, 0x5, 0x80, 0x4, 0x3ff, 0x7f, 0x8, 0x8, [@generic={0xdd, 0x11, "944b024738105ac293bbb250b01fa376615cd4434903a9e13cdf75337fcdf9d6ec04bb71709161db569a305d87d762a68331b5ef5242c2f37de543c56b8c19e871161a51d28f91628b9e75a55d9e4dfbcac8646018e7c125ba5efe6e9a28350f36bbbaf5eed31630ef13d542fda9f26edab4c788934ccfdc758ad171f7f01222bc3c65007a3677c3dd7f7274346db02f98b91f8bf04b94091d710140fe12a27e90835288a4e7198553f57677f98f1e2f8d31fc1fa09a9d5d82430d46c43acfaf0c8b7bf1fa4329d19fcbf51ae6c2f8f1df3b81fcf95f133ff887d8"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6d}]}}, {{0x9, 0x5, 0x9, 0x1, 0x397, 0xab, 0x5, 0xfd, [@generic={0x3b, 0x1, "8a2368303a74acdc82c2c58d26f4128f7aedfa116339a52a64be039643cb7f1192023de8f97ad546c415219b3ddd81134314c91ba20db72981"}, @generic={0x17, 0xf, "702da46d92777d44347160a101076eaf1ee82b51c8"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x7d6f987bce75e60f, 0x5, 0xf8, 0x86}}]}}, {{0x9, 0x4, 0xc1, 0xf, 0x2, 0x78, 0x2e, 0x52, 0x7, [@generic={0x3a, 0x21, "3ddaab8907ea22d9fe9d8206993138a804394c6311b4efc982573efd2cc24ecc16661c96443bbf2bbbe8167b3fd7e3fd3ec96b1e68c6d9ca"}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "bf"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x96a9, 0xa, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x14}, [@mdlm={0x15, 0x24, 0x12, 0x9}]}], [{{0x9, 0x5, 0xf, 0x10, 0x200, 0x7f, 0x0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xee}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x2, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x8, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfa, 0x4}]}}]}}, {{0x9, 0x4, 0xa1, 0x2, 0x10, 0x2, 0x2, 0xff, 0x3, [@generic={0x68, 0x34, "757474e6ff3197861b40873fc13b79485120e8feb3cd909c935a22ba32a0f055c7aad79102882e14ff288538db0a2daeb9684fb498e9882525b84f46b284785aacfec0f728925be16bead2d6fba7de349a360f6eab1cc99a18aae8cba2d163dd047531091cf6"}], [{{0x9, 0x5, 0x5, 0xc, 0x400, 0x0, 0x0, 0x80}}, {{0x9, 0x5, 0xc, 0x1, 0x7ff, 0x5, 0xee, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xbf}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x0, 0x3, 0x1, [@generic={0x3a, 0x0, "8be1389058935f0e9deb2964cd894f5f4815d91382c724fee8973b3be04862837e99d7dd41b54e33bd329da50131942f58ddc9d6c94921eb"}, @generic={0x8c, 0x22, "eacf7683f480177a98eaf9de5e83f27295122d10da294450077ef3de3768fb62debff320da9c5853e5dc605c84dc84113860df536a13878ae8de1ddc582e47e5627ae757c23206813e09182abd8271a696f9889d93293591d79ba846666522f55613695806a19aec79681b65a533c7af74de9bbc66e828907eca530375e63763095f616eed5f6f121cf7"}]}}, {{0x9, 0x5, 0x5, 0x17, 0x40, 0x80, 0xa, 0x3e, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x8}]}}, {{0x9, 0x5, 0xd, 0x2, 0x10, 0x8, 0x3, 0xd8, [@generic={0xdb, 0xa, "30498e8fa58487aac93259d3640ffccdfc3a758c81b7ae16e64386aa3cb05fabe2440d959265bee990435bb67bbf0fac1f1f57cc240ed2453f977cf367c4379993e8faff7a609bd7d29b36fc495b38a915aeccba010e9cb378e0af89f46d5bb776fa62a36d8f9d3c3430f77168df556cfaccbbb1d8e346aeadeb849a683d8ff87ed6c1fd3c2e02487921139e2ad3504f904a8c89838808ba8b6e8240840d91dd92e29948c946d3878f6c146f64b9ac076f9485a73a779ab826700245b6c4c2a80bd31e267489e41ff4342a4cc393727f81ea5ad2aac6a24ee6"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x0, 0x1, 0x3}}, {{0x9, 0x5, 0xb, 0x0, 0x650, 0x7, 0x8, 0x2}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x6, 0x9, 0x1}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0xff, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xffff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x8, 0x7c, 0xf9}}, {{0x9, 0x5, 0x2, 0x4, 0x20, 0x19}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x5, 0x9, 0x6, [@generic={0x54, 0x4, "3bfa9f48963280b73ceca3e126d553ecb513c4ddeabac602819994b0c056cd99ed3453c667a71db461f17004e4cf7addb4977d4e6423ee52b0e2cb0e063d0ebd0e546bcae103ad44b087ecd5bd5704a6bd66"}, @generic={0xe3, 0xf, "ebfb48eca2787ef959326216ca26f200b7bb317d50b0db024c56d8375b30d5a495df98f1e759d81eda5d47672e311f4728096acddad03d454274b059f06452cbcc5bb06c1054aa2aef8f4a887352f380ccf46acc71a2b0387fa8388285bd0aec1e8154251f5919f60681125a17145d81873a14648ebf1d79a52f5e9df1acfb7a624146eb6c81e9089e404e7aa14ff1217b2ecc6aeb8e70e666bfa5c870bd866d421d524bd99dafd0fa6a9b29746efc98e1f63965ce3b9daf8383678a67ab03ff801561a7bfadbf60d9662bd104302a8939399b88127e98acff4452876c79df2f24"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x240, 0x7, 0x9, 0x35, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x85, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x5, 0x7, 0xe}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0xf3, 0x8, 0x10}}]}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x0, 0xd, 0x5, 0x8f}, 0x25, &(0x7f0000000040)={0x5, 0xf, 0x25, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x0, 0x5, 0x0, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x4, 0x3, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x52, 0x9, 0xff}]}, 0x4, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x140f}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x14}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = eventfd(0x0) r2 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000300)=r1, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e004c3c0000000000000000000000000000000100ff02000000000000000000000000000133"], 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000002480)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f000000000009050300000000000009050c00000002060209050f000000000000090507"], &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0}) 2.179681923s ago: executing program 3 (id=1761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002080)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c8, 0x2c0, 0x940c, 0x3002, 0x0, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3, 0x20}, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r1, &(0x7f0000002300)=""/102, 0x18) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x2, 0x0, 0x1}, &(0x7f0000002000), &(0x7f0000000000)=0x0) io_uring_enter(r2, 0x48e9, 0x0, 0x9, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e0000001000000000000000008001200000000000000000000000000060000000000000000000000000000007f000001000000000000000000000000ac1414bb000000000000000000000000030006000000000002000000ffffffff000000000000000008001900000000000a004e20"], 0xc0}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=r2, @ANYRES8=r3, @ANYRESOCT=r4, @ANYRES32=r1, @ANYRES64=r1, @ANYRES16=r1, @ANYRES16=r0], 0x0) 2.106061014s ago: executing program 1 (id=1762): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) (async) accept4(r0, 0x0, 0x0, 0x80800) (async) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xc, [0x0, 0x10, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0xff, 0x0, 0x0, 0x3], 0x0, [0x7f, 0x10, 0x2, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x106], [0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xfffe]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) (async) r6 = io_uring_setup(0x407625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000780)=[r2], 0x1) (async) syz_usb_control_io(r1, 0x0, 0x0) fsetxattr$security_ima(r6, &(0x7f0000000400), &(0x7f0000000440)=@md5={0x1, "b44d252afe714cd943529bfe703fd6f4"}, 0x11, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f0000000300)='./file0\x00', 0x0, r7) 1.815464688s ago: executing program 0 (id=1763): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffb0, 0x10, &(0x7f0000000000), 0xffffffbf, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.758767184s ago: executing program 0 (id=1764): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x460202, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = epoll_create(0x8) epoll_pwait2(r3, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x112]}, 0x8) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) shutdown(r4, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x4e24, 0x7ece, @dev={0xfe, 0x80, '\x00', 0x28}, 0x5}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000000080)=0x31, 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000024030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a30000000005e000740"], 0x1f4}}, 0x0) 1.666591376s ago: executing program 1 (id=1765): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYBLOB="0100400000000000020344000000", @ANYRES32=r2], 0x4c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000a06010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 969.039581ms ago: executing program 4 (id=1766): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) socket$key(0xf, 0x3, 0x2) (rerun: 64) r2 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async) close(0x3) r4 = accept4(r3, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010100}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r1}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x58840}, 0x0) 615.476972ms ago: executing program 4 (id=1767): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x7902, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x324, 0x30, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{0x310, 0x1, [@m_skbedit={0x1d8, 0xc, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0xa}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x0, 0xffffffffffffffff, 0x1, 0xfffffff9}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x1, 0xffffffffeffffffb, 0x6, 0x101}}]}, {0x169, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0xb0, 0x1c, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}]}, {0x75, 0x6, "ebb7905fe91e9be4677d59a9642fd119d19ac5e190bf4b0f9f2859657921b9c6fce506e2b627b610552adbd25f19af61b6f9b1603735a6e3d97188050bf1e9e04f7b370bf4a6645e82f7d27fe7ecb451e477ceac7c3e03294761182420c71011ec9e6197a94d09c8348554283a8308b47f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0x84, 0x20, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x136e, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xa8, 0x0, 0x3, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8000, 0x1000, 0xffffffffffffffff, 0xfffffff8, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2374, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2399}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x324}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x4, 0x4, 0x5, @vifc_lcl_addr=@remote, @loopback}, 0x10) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r7, r6, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x1000000, 0x0}) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r11, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x110, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x779ce5a2) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 212.093583ms ago: executing program 1 (id=1768): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000340)='cbc(cast6)\x00') pipe(&(0x7f0000000080)) socket(0x11, 0x800000003, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000300), 0x8000000800, 0x33037771052b49c9) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="2554839ac1aa8c5687420aef10ae261398d34d3e4f5db1cabcbf3e3d5d95d0bd1bc3bc954c645b3efadbf48f9d18992a815bbfe699ee24f9750c3b80d1451eed9b2d5011916c0c81c16ff38ae3991b394ec13ec6ab2392909a82c6af96268c0542d82ed4e63ddf13ebf37781c016042d586642977c44c2987b0a586e5464d13499ec5a704799ebf9de5847a1a16f466059ed7c312f1282cc015476b26e6f626ea83ddb5266b482d2a49f71fda0617d41944c8e1253c9d8ef35a176e259d7638f95b783b1cc469deb7e5728f3a84b51283179cd6481226b7375ee0538e79d8a03180d7909be669d8f8168bac1a98b", 0xee}, {&(0x7f0000000000)="efe51fe64069afe9c701d81e38f7d05c748bb39b97f374d25ce45f2059c84db79fbf29a54ef6004e2cbf6219185dcc564958009459a4df0cda03a8d07638b768f300cf", 0x43}, {&(0x7f0000000400)="eb3b32f3657b7d1d7758e2898a715c2f8e6270d5134967a1879ad54f694bcb2c69acdbd12d2116a74588895e7369e8340b8c249bfeee68e2600fbec602238826014517dc8f77c528068f573e6e91977da62f201c89aa974cca6bbc138e32ab398aac0564dc6c7cda731edbc8fedf2684a58e0acc646690fd5b7c14b2281c9059a0e26e16939d", 0x86}], 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1508}, 0x4008000) socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 185.364848ms ago: executing program 2 (id=1769): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x0, 0x50565559, 0x0, 0x0, 0x0, 0x6, 0xfee5cafe, 0x3, 0x6, 0x0, 0x5}}) (async, rerun: 64) r1 = socket$kcm(0x10, 0x0, 0x0) (rerun: 64) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fec0ffff00000e1208000f0100810401a80016ea1f0001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) r2 = socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711279000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) (async) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c100000000000224e0000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40500000000000071107f00000000004000000000000000950000dfef0000000100958f6bfd74f1e22f7787e789a58c218a23d9ef3458b779f076fbe8b6578b03f1ff8ff04523c2c772debc2378495dfe2585baf9be5ec0cb83e6b9a6a6d5392f8e61a561066e"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) fcntl$setstatus(r1, 0x4, 0x400) 8.693865ms ago: executing program 1 (id=1770): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0xffffffffffffff6f}) r4 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x6}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000400000000000000d28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c52995560a99956bed40cf5a8c1dfd3db7e2378d5afd35f4c16827f55b3af4d07fce7fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af915600020000000000000000000000000000004900", 0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'team_slave_1\x00', 'vxcan1\x00', {0xff}, {}, 0x29, 0x3, 0x3}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x200, 0x3d) sendmsg$sock(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="8c", 0x1}], 0x1, &(0x7f0000000040)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4800) 0s ago: executing program 2 (id=1771): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0xffffffffffffff6f}) socket$inet(0x2, 0x3, 0x8) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x200, 0x3d) sendmsg$sock(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="8c", 0x1}], 0x1, &(0x7f0000000040)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4800) kernel console output (not intermixed with test programs): un: left allmulticast mode [ 456.591978][ T5887] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 456.775489][T12573] wg1: entered promiscuous mode [ 456.781815][T12573] wg1: entered allmulticast mode [ 456.831833][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 456.855990][ T5887] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.868125][ T5887] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 456.877717][ T5887] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 456.893807][ T5887] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 456.903341][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.912270][ T5887] usb 2-1: Product: syz [ 456.916633][ T5887] usb 2-1: Manufacturer: syz [ 456.921254][ T5887] usb 2-1: SerialNumber: syz [ 457.029462][T12575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 457.166354][T12570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1319'. [ 457.199553][T12570] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1319'. [ 457.281101][T12570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1319'. [ 458.521852][ T47] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 458.667026][ T47] usb 3-1: USB disconnect, device number 63 [ 458.760639][T12595] fuse: Unknown parameter '' [ 459.031637][ T5886] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 459.312134][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 459.325328][ T5886] usb 4-1: unable to get BOS descriptor or descriptor too short [ 459.411369][ T5886] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 459.449327][ T5886] usb 4-1: config 1 has no interface number 1 [ 459.457570][ T5886] usb 4-1: too many endpoints for config 1 interface 2 altsetting 6: 223, using maximum allowed: 30 [ 459.472888][ T5886] usb 4-1: config 1 interface 2 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 459.495788][ T5886] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 99, changing to 7 [ 459.528441][ T5886] usb 4-1: config 1 interface 2 has no altsetting 2 [ 459.554196][ T5886] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 459.568278][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.577392][ T5886] usb 4-1: Product: syz [ 459.584488][ T5886] usb 4-1: Manufacturer: syz [ 459.599297][ T5886] usb 4-1: SerialNumber: syz [ 459.702249][ T5887] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 459.730847][ T5887] cdc_ncm 2-1:1.0: bind() failure [ 459.786607][ T5887] usb 2-1: USB disconnect, device number 81 [ 459.919288][T12598] binder: 12597:12598 ioctl c0306201 2000000001c0 returned -14 [ 460.364775][T12607] dvmrp5: entered allmulticast mode [ 460.401951][ T5887] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 460.562453][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 460.841781][ T5887] usb 2-1: unable to get BOS descriptor or descriptor too short [ 460.850726][ T5887] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 460.862629][ T5887] usb 2-1: config 0 has no interface number 0 [ 460.868821][ T5887] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 460.882627][ T5887] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 460.897630][ T5887] usb 2-1: config 0 interface 88 has no altsetting 0 [ 460.917557][ T5887] usb 2-1: language id specifier not provided by device, defaulting to English [ 461.010318][ T5887] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 461.024513][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 461.035774][ T5887] usb 2-1: Product: syz [ 461.040172][ T5887] usb 2-1: SerialNumber: syz [ 461.049891][ T5887] usb 2-1: config 0 descriptor?? [ 461.373013][ T5887] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input32 [ 461.429260][ T5887] usb 2-1: USB disconnect, device number 82 [ 461.479472][T12613] futex_wake_op: syz.2.1327 tries to shift op by -33; fix this program [ 461.488471][ T5886] usb 4-1: USB disconnect, device number 94 [ 461.502254][T12613] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 461.566536][T12613] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 461.574211][ T5839] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 461.741806][ T5839] usb 5-1: Using ep0 maxpacket: 32 [ 461.758583][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.776005][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.808595][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.829271][ T5940] udevd[5940]: Error opening device "/dev/input/event4": No such file or directory [ 461.854600][ T5940] udevd[5940]: Unable to EVIOCGABS device "/dev/input/event4" [ 461.873364][ T5839] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 461.878958][ T5940] udevd[5940]: Unable to EVIOCGABS device "/dev/input/event4" [ 461.951595][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.990788][ T5839] usb 5-1: config 0 descriptor?? [ 462.432088][ T5839] usbhid 5-1:0.0: can't add hid device: -71 [ 462.449580][ T5839] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 462.457949][ T47] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 462.570342][ T5839] usb 5-1: USB disconnect, device number 68 [ 462.754490][ T47] usb 4-1: unable to get BOS descriptor or descriptor too short [ 462.787544][ T47] usb 4-1: not running at top speed; connect to a high speed hub [ 462.809555][ T47] usb 4-1: config 12 has an invalid interface number: 184 but max is 0 [ 462.829819][ T47] usb 4-1: config 12 has no interface number 0 [ 462.858447][ T47] usb 4-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 462.943071][ T47] usb 4-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 462.975562][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.995515][ T47] usb 4-1: Product: syz [ 463.005630][ T47] usb 4-1: Manufacturer: syz [ 463.015093][ T47] usb 4-1: SerialNumber: syz [ 463.141701][ T5887] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 463.260562][ T47] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 463.318231][ T5887] usb 2-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 463.355975][ T5887] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 463.365407][ T47] usb 4-1: USB disconnect, device number 95 [ 463.394946][ T5887] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 463.414782][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.500679][ T5887] usb 2-1: config 0 descriptor?? [ 464.330506][T12645] fuse: Unknown parameter '' [ 464.457977][T12648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.469570][T12648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.751650][ T5888] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 464.901926][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 464.912620][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.972560][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.997858][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 465.012858][ T5888] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 465.022719][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.100452][ T5888] usb 5-1: config 0 descriptor?? [ 465.660632][ T5888] kovaplus 0003:1E7D:2D50.0013: item fetching failed at offset 0/3 [ 465.690335][ T5888] kovaplus 0003:1E7D:2D50.0013: parse failed [ 465.721880][ T5888] kovaplus 0003:1E7D:2D50.0013: probe with driver kovaplus failed with error -22 [ 465.986587][ T5839] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 466.004434][ T5886] usb 5-1: USB disconnect, device number 69 [ 466.018227][ T5887] usb 2-1: USB disconnect, device number 83 [ 466.156806][ T5839] usb 4-1: device descriptor read/64, error -71 [ 466.236556][T12668] netlink: 'syz.0.1347': attribute type 4 has an invalid length. [ 466.433866][ T5839] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 466.583880][ T5839] usb 4-1: device descriptor read/64, error -71 [ 466.713182][ T5839] usb usb4-port1: attempt power cycle [ 467.073238][ T5839] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 467.233477][ T5839] usb 4-1: device descriptor read/8, error -71 [ 467.471656][ T5839] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 467.492923][ T5839] usb 4-1: device descriptor read/8, error -71 [ 467.614862][ T5839] usb usb4-port1: unable to enumerate USB device [ 468.171984][T12703] fuse: Unknown parameter '' [ 468.200921][T12702] binder: 12701:12702 ioctl c0306201 2000000001c0 returned -22 [ 468.317492][T12705] kvm: kvm [12704]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa6f8 [ 468.333987][T12705] kvm: kvm [12704]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1531 [ 468.351303][T12705] kvm: kvm [12704]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4137 [ 468.367148][T12711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1361'. [ 468.395210][T12705] kvm: kvm [12704]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x27a2 [ 468.448616][T12705] kvm: kvm [12704]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x533a [ 468.517166][T12705] kvm: kvm [12704]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xc319 [ 468.528568][T12705] kvm: kvm [12704]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x149c [ 468.539939][T12705] kvm: kvm [12704]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x9770 [ 468.549250][T12705] kvm: kvm [12704]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xd880 [ 468.591647][ T5888] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 468.636277][T12705] kvm: kvm [12704]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2fd [ 468.645165][ T5887] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 468.837376][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 468.841708][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 468.869408][ T5888] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 468.877218][ T5888] usb 4-1: can't read configurations, error -61 [ 468.913633][ T5887] usb 3-1: config 0 has an invalid interface number: 17 but max is 0 [ 468.923648][ T5887] usb 3-1: config 0 has no interface number 0 [ 468.932659][ T5887] usb 3-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 468.945940][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.963928][ T5887] usb 3-1: Product: syz [ 468.969353][ T5887] usb 3-1: Manufacturer: syz [ 468.998907][ T5887] usb 3-1: SerialNumber: syz [ 469.011857][ T5888] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 469.041117][ T5887] usb 3-1: config 0 descriptor?? [ 469.069731][T12719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'. [ 469.088555][T12719] vlan3: entered allmulticast mode [ 469.171797][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 469.182389][ T5888] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 469.191593][ T5888] usb 4-1: can't read configurations, error -61 [ 469.199663][ T5888] usb usb4-port1: attempt power cycle [ 469.956138][ T5888] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 470.025231][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 470.062709][ T5888] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 470.070364][ T5888] usb 4-1: can't read configurations, error -61 [ 470.212002][ T5888] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 470.255978][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 470.290770][ T5888] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 470.308774][ T5888] usb 4-1: can't read configurations, error -61 [ 470.338233][T12725] FAULT_INJECTION: forcing a failure. [ 470.338233][T12725] name failslab, interval 1, probability 0, space 0, times 0 [ 470.379584][ T5888] usb usb4-port1: unable to enumerate USB device [ 470.399425][T12725] CPU: 0 UID: 0 PID: 12725 Comm: syz.1.1364 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 470.399456][T12725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 470.399469][T12725] Call Trace: [ 470.399477][T12725] [ 470.399487][T12725] dump_stack_lvl+0x189/0x250 [ 470.399526][T12725] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.399555][T12725] ? __pfx__printk+0x10/0x10 [ 470.399577][T12725] ? __pfx___might_resched+0x10/0x10 [ 470.399596][T12725] ? fs_reclaim_acquire+0x7d/0x100 [ 470.399629][T12725] should_fail_ex+0x414/0x560 [ 470.399666][T12725] should_failslab+0xa8/0x100 [ 470.399694][T12725] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 470.399719][T12725] ? __alloc_skb+0x112/0x2d0 [ 470.399746][T12725] __alloc_skb+0x112/0x2d0 [ 470.399773][T12725] alloc_skb_with_frags+0xca/0x890 [ 470.399807][T12725] ? register_lock_class+0x51/0x320 [ 470.399844][T12725] sock_alloc_send_pskb+0x857/0x990 [ 470.399891][T12725] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 470.399925][T12725] ? dev_get_by_index+0x22/0x2e0 [ 470.399953][T12725] ? dev_get_by_index+0x22/0x2e0 [ 470.399987][T12725] packet_sendmsg+0x3664/0x5400 [ 470.400043][T12725] ? __pfx___might_resched+0x10/0x10 [ 470.400063][T12725] ? __lock_acquire+0xaac/0xd20 [ 470.400096][T12725] ? __lock_acquire+0xaac/0xd20 [ 470.400126][T12725] ? __pfx_packet_sendmsg+0x10/0x10 [ 470.400145][T12725] ? aa_sk_perm+0x81e/0x950 [ 470.400171][T12725] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 470.400202][T12725] ? aa_sock_msg_perm+0x94/0x160 [ 470.400224][T12725] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 470.400246][T12725] ? __pfx_packet_sendmsg+0x10/0x10 [ 470.400269][T12725] __sock_sendmsg+0x219/0x270 [ 470.400304][T12725] ____sys_sendmsg+0x52d/0x830 [ 470.400336][T12725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.400371][T12725] ? import_iovec+0x74/0xa0 [ 470.400401][T12725] ___sys_sendmsg+0x21f/0x2a0 [ 470.400429][T12725] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.400492][T12725] ? __fget_files+0x2a/0x420 [ 470.400516][T12725] ? __fget_files+0x3a0/0x420 [ 470.400552][T12725] __sys_sendmmsg+0x227/0x430 [ 470.400586][T12725] ? __pfx___sys_sendmmsg+0x10/0x10 [ 470.400621][T12725] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 470.400665][T12725] ? ksys_write+0x1f0/0x250 [ 470.400685][T12725] ? rcu_is_watching+0x15/0xb0 [ 470.400726][T12725] __x64_sys_sendmmsg+0xa0/0xc0 [ 470.400754][T12725] do_syscall_64+0xf6/0x210 [ 470.400779][T12725] ? clear_bhb_loop+0x45/0xa0 [ 470.400810][T12725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.400829][T12725] RIP: 0033:0x7feb17d8e969 [ 470.400847][T12725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.400865][T12725] RSP: 002b:00007feb15bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 470.400887][T12725] RAX: ffffffffffffffda RBX: 00007feb17fb5fa0 RCX: 00007feb17d8e969 [ 470.400902][T12725] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000004 [ 470.400915][T12725] RBP: 00007feb15bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 470.400927][T12725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.400939][T12725] R13: 0000000000000000 R14: 00007feb17fb5fa0 R15: 00007feb180dfa28 [ 470.400969][T12725] [ 470.719533][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.218721][ T5887] usb 3-1: Found UVC 0.00 device syz (0408:4034) [ 471.232677][ T5887] usb 3-1: No valid video chain found. [ 471.269234][ T5887] usb 3-1: USB disconnect, device number 64 [ 471.288608][T12731] fuse: Bad value for 'fd' [ 471.411278][T12733] fuse: Bad value for 'fd' [ 471.938466][T12752] fuse: Bad value for 'user_id' [ 471.979203][T12752] fuse: Bad value for 'user_id' [ 472.117969][T12756] fuse: Unknown parameter '' [ 472.253248][T12759] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1374'. [ 472.581822][ T5888] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 473.305160][T12771] fuse: Unknown parameter '' [ 473.351800][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 473.363739][ T5888] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 116, changing to 10 [ 473.375377][ T5888] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 473.409901][ T5888] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 473.578723][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 473.707867][ T5888] usb 3-1: Product: syz [ 473.747485][ T5888] usb 3-1: Manufacturer: syz [ 473.757596][ T5888] usb 3-1: SerialNumber: syz [ 473.878555][T12777] netlink: 'syz.3.1379': attribute type 23 has an invalid length. [ 473.970240][ T5888] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input33 [ 474.342229][T12778] netlink: 'syz.3.1379': attribute type 23 has an invalid length. [ 474.510679][ T5888] IPVS: starting estimator thread 0... [ 474.679139][T12781] IPVS: using max 28 ests per chain, 67200 per kthread [ 475.396013][ T5887] usb 3-1: USB disconnect, device number 65 [ 475.465216][ T5887] appletouch 3-1:1.0: input: appletouch disconnected [ 475.753120][T12797] fuse: Bad value for 'fd' [ 476.100558][ T5887] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 476.325555][ T5887] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 476.408211][ T5887] usb 5-1: config 0 interface 0 has no altsetting 0 [ 476.494613][ T5887] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 476.509946][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 476.518874][ T5887] usb 5-1: Product: syz [ 476.523513][ T5887] usb 5-1: Manufacturer: syz [ 476.528195][ T5887] usb 5-1: SerialNumber: syz [ 476.536467][ T5887] usb 5-1: config 0 descriptor?? [ 476.552498][ T5887] usb 5-1: selecting invalid altsetting 0 [ 476.575121][T12817] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 476.589908][T12819] sctp: [Deprecated]: syz.2.1390 (pid 12819) Use of struct sctp_assoc_value in delayed_ack socket option. [ 476.589908][T12819] Use struct sctp_sack_info instead [ 476.919819][ T5887] usb 5-1: USB disconnect, device number 70 [ 477.271725][ T5888] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 477.521736][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 477.534654][ T5888] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 477.544271][ T5888] usb 2-1: config 0 has no interface number 0 [ 477.567009][ T5888] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 477.576409][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.584847][ T5888] usb 2-1: Product: syz [ 477.592783][ T5888] usb 2-1: Manufacturer: syz [ 477.598593][ T5888] usb 2-1: SerialNumber: syz [ 477.610742][ T5888] usb 2-1: config 0 descriptor?? [ 477.626855][ T5888] gspca_main: se401-2.14.0 probing 047d:5003 [ 477.828014][T12825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.837134][T12825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.253139][ T5888] usb 2-1: reset high-speed USB device number 84 using dummy_hcd [ 478.265856][ T5888] usb 2-1: device reset changed ep0 maxpacket size! [ 478.277318][ T5888] gspca_se401: read req failed req 0x06 error -19 [ 478.302116][ T5888] usb 2-1: USB disconnect, device number 84 [ 478.453472][T12845] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1397'. [ 478.481742][ T5888] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 478.641764][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 478.653303][ T5888] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 478.685090][ T5888] usb 2-1: config 0 has no interface number 0 [ 478.691877][ T5888] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 478.703518][ T5888] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 478.736673][ T5888] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 478.769165][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 478.804817][ T5888] usb 2-1: Product: syz [ 478.809048][ T5888] usb 2-1: SerialNumber: syz [ 478.842390][ T5888] usb 2-1: config 0 descriptor?? [ 478.865701][ T5888] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 478.870509][T12866] netlink: 'syz.2.1402': attribute type 1 has an invalid length. [ 478.886622][ T5888] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input34 [ 479.049493][T12866] 8021q: adding VLAN 0 to HW filter on device bond5 [ 479.080267][ C1] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 479.151176][T12870] veth5: entered promiscuous mode [ 479.249087][T12870] bond5: (slave veth5): Enslaving as an active interface with a down link [ 479.271496][T12869] erspan0: entered allmulticast mode [ 479.313383][T12869] bond5: (slave erspan0): making interface the new active one [ 479.335564][T12869] erspan0: entered promiscuous mode [ 479.352773][T12869] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 479.719073][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'. [ 479.764938][T12878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1405'. [ 480.309801][T12892] FAULT_INJECTION: forcing a failure. [ 480.309801][T12892] name failslab, interval 1, probability 0, space 0, times 0 [ 480.362782][T12892] CPU: 0 UID: 0 PID: 12892 Comm: syz.2.1408 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 480.362813][T12892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 480.362827][T12892] Call Trace: [ 480.362835][T12892] [ 480.362845][T12892] dump_stack_lvl+0x189/0x250 [ 480.362885][T12892] ? irqentry_exit+0x74/0x90 [ 480.362910][T12892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.362954][T12892] should_fail_ex+0x414/0x560 [ 480.362992][T12892] should_failslab+0xa8/0x100 [ 480.363019][T12892] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 480.363044][T12892] ? __alloc_skb+0x112/0x2d0 [ 480.363070][T12892] __alloc_skb+0x112/0x2d0 [ 480.363096][T12892] netlink_sendmsg+0x5c6/0xb30 [ 480.363129][T12892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.363154][T12892] ? aa_sock_msg_perm+0x94/0x160 [ 480.363176][T12892] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 480.363215][T12892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.363237][T12892] __sock_sendmsg+0x219/0x270 [ 480.363274][T12892] ____sys_sendmsg+0x505/0x830 [ 480.363305][T12892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 480.363340][T12892] ? import_iovec+0x74/0xa0 [ 480.363370][T12892] ___sys_sendmsg+0x21f/0x2a0 [ 480.363398][T12892] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.363462][T12892] ? __fget_files+0x2a/0x420 [ 480.363486][T12892] ? __fget_files+0x3a0/0x420 [ 480.363522][T12892] __x64_sys_sendmsg+0x19b/0x260 [ 480.363552][T12892] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 480.363595][T12892] ? do_syscall_64+0xba/0x210 [ 480.363624][T12892] do_syscall_64+0xf6/0x210 [ 480.363648][T12892] ? clear_bhb_loop+0x45/0xa0 [ 480.363672][T12892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.363693][T12892] RIP: 0033:0x7f6737d8e969 [ 480.363711][T12892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.363728][T12892] RSP: 002b:00007f6738c3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.363750][T12892] RAX: ffffffffffffffda RBX: 00007f6737fb5fa0 RCX: 00007f6737d8e969 [ 480.363764][T12892] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 480.363777][T12892] RBP: 00007f6738c3d090 R08: 0000000000000000 R09: 0000000000000000 [ 480.363789][T12892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.363801][T12892] R13: 0000000000000000 R14: 00007f6737fb5fa0 R15: 00007f67380dfa28 [ 480.363832][T12892] [ 480.607965][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.663148][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 480.670370][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 480.677790][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 480.686085][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 480.695277][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 480.703049][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 480.710402][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 480.717781][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 480.725263][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 480.732635][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 480.788219][ T5839] usb 2-1: USB disconnect, device number 85 [ 480.788276][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 480.829191][T12897] FAULT_INJECTION: forcing a failure. [ 480.829191][T12897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.859993][ T5839] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 480.882552][T12897] CPU: 0 UID: 0 PID: 12897 Comm: syz.2.1411 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 480.882577][T12897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 480.882586][T12897] Call Trace: [ 480.882593][T12897] [ 480.882600][T12897] dump_stack_lvl+0x189/0x250 [ 480.882625][T12897] ? __lock_acquire+0xaac/0xd20 [ 480.882648][T12897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.882670][T12897] ? __pfx__printk+0x10/0x10 [ 480.882686][T12897] ? __might_fault+0xb0/0x130 [ 480.882714][T12897] should_fail_ex+0x414/0x560 [ 480.882743][T12897] _copy_from_iter+0x1db/0x15a0 [ 480.882767][T12897] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 480.882784][T12897] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 480.882804][T12897] ? __pfx__copy_from_iter+0x10/0x10 [ 480.882833][T12897] ? __build_skb_around+0x257/0x3e0 [ 480.882854][T12897] ? netlink_sendmsg+0x642/0xb30 [ 480.882869][T12897] ? skb_put+0x11b/0x210 [ 480.882890][T12897] netlink_sendmsg+0x6b2/0xb30 [ 480.882914][T12897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.882934][T12897] ? aa_sock_msg_perm+0x94/0x160 [ 480.882952][T12897] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 480.882969][T12897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.882986][T12897] __sock_sendmsg+0x219/0x270 [ 480.883013][T12897] ____sys_sendmsg+0x505/0x830 [ 480.883037][T12897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 480.883064][T12897] ? import_iovec+0x74/0xa0 [ 480.883090][T12897] ___sys_sendmsg+0x21f/0x2a0 [ 480.883111][T12897] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.883159][T12897] ? __fget_files+0x2a/0x420 [ 480.883178][T12897] ? __fget_files+0x3a0/0x420 [ 480.883224][T12897] __x64_sys_sendmsg+0x19b/0x260 [ 480.883248][T12897] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 480.883283][T12897] ? do_syscall_64+0xba/0x210 [ 480.883324][T12897] do_syscall_64+0xf6/0x210 [ 480.883345][T12897] ? clear_bhb_loop+0x45/0xa0 [ 480.883367][T12897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.883384][T12897] RIP: 0033:0x7f6737d8e969 [ 480.883400][T12897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.883415][T12897] RSP: 002b:00007f6738c3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.883434][T12897] RAX: ffffffffffffffda RBX: 00007f6737fb5fa0 RCX: 00007f6737d8e969 [ 480.883446][T12897] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 480.883456][T12897] RBP: 00007f6738c3d090 R08: 0000000000000000 R09: 0000000000000000 [ 480.883467][T12897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.883477][T12897] R13: 0000000000000000 R14: 00007f6737fb5fa0 R15: 00007f67380dfa28 [ 480.883503][T12897] [ 481.153524][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.702054][ T5887] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 481.801926][ T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 481.861684][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 481.904317][ T5887] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 481.921761][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.937483][ T5887] usb 5-1: config 0 descriptor?? [ 481.955191][ T5887] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input36 [ 481.998687][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 482.018917][ T9] usb 3-1: too many configurations: 249, using maximum allowed: 8 [ 482.122403][ T9] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 482.168666][ T5184] bcm5974 5-1:0.0: could not read from device [ 482.182893][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 482.199538][ T5184] bcm5974 5-1:0.0: could not read from device [ 482.223714][ T5887] bcm5974 5-1:0.0: could not read from device [ 482.237913][ T9] usb 3-1: Product: syz [ 482.253312][ T9] usb 3-1: Manufacturer: syz [ 482.253327][ T5184] bcm5974 5-1:0.0: could not read from device [ 482.257971][ T9] usb 3-1: SerialNumber: syz [ 482.278444][ T5887] input: failed to attach handler mousedev to device input36, error: -5 [ 482.301224][ T9] usb 3-1: config 0 descriptor?? [ 482.319628][ T5184] bcm5974 5-1:0.0: could not read from device [ 482.335525][ T5887] usb 5-1: USB disconnect, device number 71 [ 482.370124][ T5943] bcm5974 5-1:0.0: could not read from device [ 482.380305][ T5184] bcm5974 5-1:0.0: could not read from device [ 482.404202][ T5184] bcm5974 5-1:0.0: could not read from device [ 482.634240][T12926] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 482.643571][T12926] netlink: 'syz.1.1420': attribute type 28 has an invalid length. [ 482.742664][T12927] netlink: 'syz.1.1420': attribute type 28 has an invalid length. [ 482.857373][T12929] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1421'. [ 484.348178][ T9] mdc800 3-1:0.0: probe fails -> wrong Number of Configuration [ 484.405063][ T9] usb 3-1: USB disconnect, device number 66 [ 484.950179][T12966] loop2: detected capacity change from 0 to 7 [ 484.989703][ T5840] Dev loop2: unable to read RDB block 7 [ 484.999234][ T5840] loop2: unable to read partition table [ 485.030219][ T5840] loop2: partition table beyond EOD, truncated [ 486.283710][T12979] netlink: 'syz.1.1431': attribute type 6 has an invalid length. [ 486.318530][ T6562] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.337811][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1431'. [ 486.361209][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1431'. [ 486.384520][T12979] netlink: 'syz.1.1431': attribute type 14 has an invalid length. [ 489.553218][T12987] delete_channel: no stack [ 489.957029][T12997] fuse: Unknown parameter '0x00000000000000060000000000000000000000600000000000000000000' [ 489.981938][ T30] audit: type=1326 audit(1746519941.879:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8202f8e969 code=0x7ffc0000 [ 490.016032][ T30] audit: type=1326 audit(1746519941.889:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8202f8e969 code=0x7ffc0000 [ 490.061348][ T30] audit: type=1326 audit(1746519941.889:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8202f8e969 code=0x7ffc0000 [ 490.100889][ T30] audit: type=1326 audit(1746519941.889:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8202f8e969 code=0x7ffc0000 [ 490.128578][ T30] audit: type=1326 audit(1746519941.889:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8202f8e969 code=0x7ffc0000 [ 490.173625][ T30] audit: type=1326 audit(1746519941.889:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8202f8e969 code=0x7ffc0000 [ 490.208233][ T30] audit: type=1326 audit(1746519941.889:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8202f8e969 code=0x7ffc0000 [ 490.235433][ T30] audit: type=1326 audit(1746519941.889:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8202f8e969 code=0x7ffc0000 [ 490.264674][ T30] audit: type=1326 audit(1746519941.889:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8202f8e969 code=0x7ffc0000 [ 490.299913][ T30] audit: type=1326 audit(1746519941.899:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.4.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8202f8e969 code=0x7ffc0000 [ 490.751635][ T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 490.881629][ T9] usb 2-1: device descriptor read/64, error -71 [ 491.141635][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 491.201659][ T5886] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 491.271726][ T9] usb 2-1: device descriptor read/64, error -71 [ 491.335490][ T975] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 491.335490][ T5835] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 491.397612][ T9] usb usb2-port1: attempt power cycle [ 491.427294][T13018] input: syz0 as /devices/virtual/input/input38 [ 491.450446][T13016] tipc: Started in network mode [ 491.460868][T13016] tipc: Node identity 6, cluster identity 4711 [ 491.469576][T13016] tipc: Node number set to 6 [ 491.499727][ T975] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 491.522917][ T975] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 491.536884][ T975] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 491.550784][ T975] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 491.564749][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.584366][ T5835] usb 5-1: Using ep0 maxpacket: 16 [ 491.592750][ T5835] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.599468][ T975] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 491.643375][ T975] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 491.734850][ T5835] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.777012][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 491.800759][T13013] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1439'. [ 491.817151][ T5835] usb 5-1: config 0 interface 0 has no altsetting 0 [ 491.824102][ T5835] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 491.882379][ T3003] erspan0: left promiscuous mode [ 491.903695][T13023] program syz.2.1444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 491.920915][ T9] usb 2-1: device descriptor read/8, error -71 [ 491.957521][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.032602][ T5835] usb 5-1: config 0 descriptor?? [ 492.192286][ T9] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 492.212621][ T9] usb 2-1: device descriptor read/8, error -71 [ 492.324391][ T9] usb usb2-port1: unable to enumerate USB device [ 492.461769][ T5886] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 492.503452][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.510797][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.524609][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.532898][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.540087][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.550599][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.563386][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.570832][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.579143][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.588269][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.596180][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.605554][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.613511][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.620945][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.629962][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.640078][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.640236][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short [ 492.658514][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.668531][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.678982][ T5886] usb 3-1: not running at top speed; connect to a high speed hub [ 492.688080][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.698677][ T5886] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 492.709865][ T5886] usb 3-1: config 1 interface 0 has no altsetting 0 [ 492.719235][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.727629][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.738239][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.747099][ T5886] usb 3-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.40 [ 492.753639][T13012] kvm: pic: non byte write [ 492.761465][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.770596][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.783146][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.790533][ T5886] usb 3-1: Product: syz [ 492.796303][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.804585][ T5886] usb 3-1: Manufacturer: syz [ 492.809464][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.817948][ T5886] usb 3-1: SerialNumber: syz [ 492.826397][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.836651][T13024] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 492.845787][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.855324][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.865346][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.874915][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.886643][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.896702][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.905212][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.927924][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.964541][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 492.996758][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.031867][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.047300][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.058206][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.066357][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.073804][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.082129][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.089375][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.100729][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.108356][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.138852][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.159256][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.171328][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.181463][T13031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.192774][T13031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.202941][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.210868][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.268539][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.282883][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.292554][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.300434][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.310810][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.318549][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.330907][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.338453][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x1 [ 493.351916][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.359285][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.381949][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.399431][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.408415][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x1 [ 493.418598][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.426521][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.443593][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.450856][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.466193][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.475348][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.556041][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.592974][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.614639][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x5 [ 493.628851][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.636241][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.643903][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.651145][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.658347][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.665890][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.673148][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.680719][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.702726][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.748887][ T5835] cougar 0003:060B:500A.0014: unknown main item tag 0x0 [ 493.885203][ T5835] cougar 0003:060B:500A.0014: unexpected long global item [ 493.898970][ T5835] cougar 0003:060B:500A.0014: parse failed [ 493.905507][ T5835] cougar 0003:060B:500A.0014: probe with driver cougar failed with error -22 [ 493.968854][ T5835] usb 5-1: USB disconnect, device number 72 [ 494.503205][ T975] usb 4-1: USB disconnect, device number 104 [ 494.525258][T13007] delete_channel: no stack [ 494.944346][ T5886] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input39 [ 495.157660][ T5184] bcm5974 3-1:1.0: could not read from device [ 495.175764][ T5184] bcm5974 3-1:1.0: could not read from device [ 495.196009][ T5886] usb 3-1: USB disconnect, device number 68 [ 495.196448][ T5184] bcm5974 3-1:1.0: could not read from device [ 495.261959][ T5184] bcm5974 3-1:1.0: could not read from device [ 495.961597][T13070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1453'. [ 496.471767][ T975] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 496.638711][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 496.668343][ T975] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 496.700594][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 496.721205][ T975] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 496.743067][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.763685][ T975] usb 4-1: config 0 descriptor?? [ 496.783727][ T975] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 497.004929][T13072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.015789][T13072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.032867][ T5886] usb 4-1: USB disconnect, device number 105 [ 498.281939][ T5886] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 498.471778][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 498.481496][ T5886] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 498.502917][ T5886] usb 2-1: config 0 has no interface number 0 [ 498.509346][ T5886] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 498.522014][ T5886] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 498.555261][T13094] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 498.562404][T13094] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 498.570077][T13097] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 498.576626][T13097] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 498.585694][ T5886] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 498.595311][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 498.677911][T13094] vhci_hcd vhci_hcd.0: Device attached [ 498.684315][ T5886] usb 2-1: Manufacturer: syz [ 498.689381][ T5886] usb 2-1: SerialNumber: syz [ 498.707109][ T5886] usb 2-1: config 0 descriptor?? [ 498.712443][T13097] vhci_hcd vhci_hcd.0: Device attached [ 498.727312][T13086] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 498.921768][ T5835] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 498.952091][ T5886] usbtouchscreen 2-1:0.214: Failed to read FW rev: 0 [ 498.961827][ T5908] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 499.084270][ T5886] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 499.151861][ T5835] usb 3-1: device descriptor read/64, error -71 [ 499.368840][T13109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1463'. [ 499.531623][ T5835] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 499.681663][ T5835] usb 3-1: device descriptor read/64, error -71 [ 499.811946][ T5835] usb usb3-port1: attempt power cycle [ 499.851682][ T5839] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 500.089873][ T5839] usb 4-1: config 0 has no interfaces? [ 500.106252][ T5839] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 500.116188][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.127053][ T5839] usb 4-1: Product: syz [ 500.133802][ T5839] usb 4-1: Manufacturer: syz [ 500.138690][ T5839] usb 4-1: SerialNumber: syz [ 500.154456][ T5839] usb 4-1: config 0 descriptor?? [ 500.205816][ T5835] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 500.242139][ T5835] usb 3-1: device descriptor read/8, error -71 [ 500.250800][T13117] xt_hashlimit: invalid rate [ 500.501763][ T5835] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 500.534961][ T5835] usb 3-1: device descriptor read/8, error -71 [ 500.654389][ T5835] usb usb3-port1: unable to enumerate USB device [ 501.406609][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.413070][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.480221][T13098] vhci_hcd: connection reset by peer [ 501.485797][T13095] vhci_hcd: connection closed [ 501.490674][ T6562] vhci_hcd: stop threads [ 501.512666][ T6562] vhci_hcd: release socket [ 501.520791][ T6562] vhci_hcd: disconnect device [ 501.531422][ T6562] vhci_hcd: stop threads [ 501.536145][ T6562] vhci_hcd: release socket [ 501.540996][ T6562] vhci_hcd: disconnect device [ 501.871961][ T5839] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 501.918199][ T975] usb 2-1: USB disconnect, device number 90 [ 502.052569][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 502.063199][ T5839] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 502.071576][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.082998][ T5839] usb 3-1: config 0 has no interface number 0 [ 502.089226][ T5839] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 502.100872][ T5839] usb 3-1: config 0 interface 35 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 502.137162][ T5839] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 502.149317][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.161611][ T5839] usb 3-1: Product: syz [ 502.165958][ T5839] usb 3-1: Manufacturer: syz [ 502.170773][ T5839] usb 3-1: SerialNumber: syz [ 502.188080][ T5839] usb 3-1: config 0 descriptor?? [ 502.207992][ T5839] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 502.248020][ T5839] nokiaca42v2 ttyUSB0: required endpoint is missing [ 502.432105][T13128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.479770][T13128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.506267][ T5886] usb 3-1: USB disconnect, device number 73 [ 502.530673][ T5886] cypress_m8 3-1:0.35: device disconnected [ 503.391333][ T5835] usb 4-1: USB disconnect, device number 106 [ 504.151831][ T5908] vhci_hcd: vhci_device speed not set [ 504.254305][T13165] loop8: detected capacity change from 0 to 1 [ 504.268858][ T5840] Dev loop8: unable to read RDB block 1 [ 504.276969][ T5840] loop8: unable to read partition table [ 504.283799][ T5840] loop8: partition table beyond EOD, truncated [ 504.291132][T13165] Dev loop8: unable to read RDB block 1 [ 504.353908][T13165] loop8: unable to read partition table [ 504.380136][T13165] loop8: partition table beyond EOD, truncated [ 504.396352][T13165] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 504.425150][T13165] futex_wake_op: syz.1.1473 tries to shift op by -33; fix this program [ 504.450978][T13165] netdevsim netdevsim1: Direct firmware load for . [ 504.450978][T13165] failed with error -2 [ 504.464777][T13165] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 504.464777][T13165] [ 504.699874][T13177] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1479'. [ 504.822882][T13180] openvswitch: netlink: Flow key attr not present in new flow. [ 505.815998][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1480'. [ 506.524513][ T9] usb usb38-port1: attempt power cycle [ 507.092863][ T9] usb usb38-port1: unable to enumerate USB device [ 507.352631][T13208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1484'. [ 508.069618][T13208] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 508.091995][T13208] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 508.155639][T13208] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 508.173364][T13208] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 508.196557][T13208] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 508.344083][T13219] program syz.3.1487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 508.879840][T13226] xt_hashlimit: invalid rate [ 509.281802][ T9] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 509.447563][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 509.490179][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.522750][ T9] usb 3-1: config 0 descriptor?? [ 509.547861][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 509.566926][ T9] ums-realtek 3-1:0.0: USB Mass Storage device detected [ 509.925944][ T47] usb 3-1: USB disconnect, device number 74 [ 510.121901][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 510.207357][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 510.213516][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 510.219779][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 510.411639][ T47] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 510.419089][T13258] kvm_pr_unimpl_wrmsr: 364 callbacks suppressed [ 510.419114][T13258] kvm: kvm [13257]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x3ff9 [ 510.442863][T13258] kvm: kvm [13257]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x7ff9 [ 510.470184][T13258] kvm: kvm [13257]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x7ff8 [ 510.519303][T13258] kvm: kvm [13257]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x3ff8 [ 510.549096][T13258] kvm: kvm [13257]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x3ff7 [ 510.577773][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 510.595198][T13258] kvm: kvm [13257]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x7ff7 [ 510.597379][ T47] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 510.618320][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.638184][T13258] kvm: kvm [13257]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x7ff2 [ 510.642510][ T47] usb 4-1: config 0 descriptor?? [ 510.647274][T13258] kvm: kvm [13257]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x3ff2 [ 510.662706][T13258] kvm: kvm [13257]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x3ff1 [ 510.672221][T13258] kvm: kvm [13257]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x7ff1 [ 510.722920][T13258] kvm_intel: kvm [13257]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x3fef [ 510.924659][ T975] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 511.105685][ T975] usb 3-1: unable to get BOS descriptor or descriptor too short [ 511.122513][ T975] usb 3-1: config 182 has an invalid interface number: 132 but max is 0 [ 511.135279][ T975] usb 3-1: config 182 has no interface number 0 [ 511.142583][ T975] usb 3-1: config 182 interface 132 has no altsetting 0 [ 511.150626][ T975] usb 3-1: string descriptor 0 read error: -22 [ 511.157543][ T975] usb 3-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=a9.a2 [ 511.167317][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.262849][ T47] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 511.279743][ T47] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 511.313885][ T47] asix 4-1:0.0: probe with driver asix failed with error -71 [ 511.328531][ T47] usb 4-1: USB disconnect, device number 107 [ 511.414047][ T975] usb 3-1: USB disconnect, device number 75 [ 511.424068][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 511.424082][ T30] audit: type=1326 audit(1746519963.359:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13261 comm="syz.2.1499" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6737d8e969 code=0x0 [ 511.457225][T13281] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 511.487456][T13281] random: crng reseeded on system resumption [ 512.688734][T13297] netlink: 'syz.3.1508': attribute type 3 has an invalid length. [ 512.699369][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1508'. [ 513.337538][T13305] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1510'. [ 513.871462][T13311] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1511'. [ 514.272831][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 514.303048][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 514.311399][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 514.541823][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 515.007617][T13337] batadv1: entered promiscuous mode [ 515.241745][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 515.841646][ T47] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 516.151681][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 516.189270][ T47] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 516.198969][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.392203][ T47] usb 4-1: Product: syz [ 516.421298][ T47] usb 4-1: Manufacturer: syz [ 516.468547][ T47] usb 4-1: SerialNumber: syz [ 516.604951][ T47] r8152-cfgselector 4-1: Unknown version 0x0000 [ 516.618481][ T47] r8152-cfgselector 4-1: config 0 descriptor?? [ 516.668433][T13378] netlink: 'syz.0.1528': attribute type 10 has an invalid length. [ 516.707037][T13378] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 516.737384][T13378] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 517.136505][ T5835] r8152-cfgselector 4-1: USB disconnect, device number 108 [ 518.170151][T13407] futex_wake_op: syz.4.1534 tries to shift op by 144; fix this program [ 518.281695][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.481759][ T975] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 518.643227][ T975] usb 2-1: Using ep0 maxpacket: 32 [ 518.669798][ T975] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 518.691012][ T975] usb 2-1: config 0 has an invalid descriptor of length 56, skipping remainder of the config [ 518.774287][ T975] usb 2-1: config 0 has no interface number 0 [ 518.785433][ T975] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 518.813101][ T975] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 518.823647][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.851163][ T975] usb 2-1: Product: syz [ 518.911778][ T975] usb 2-1: Manufacturer: syz [ 519.052022][ T975] usb 2-1: SerialNumber: syz [ 519.065032][ T975] usb 2-1: config 0 descriptor?? [ 519.301270][ T975] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 519.324803][ T975] usb 2-1: qt2_attach - failed to power on unit: -71 [ 519.339625][ T975] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 519.364817][ T975] usb 2-1: USB disconnect, device number 91 [ 520.031647][ T975] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 520.041672][ T47] usb 3-1: new low-speed USB device number 76 using dummy_hcd [ 520.185590][ T975] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 520.201708][ T47] usb 3-1: Invalid ep0 maxpacket: 16 [ 520.233882][ T975] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.274681][ T975] usb 4-1: config 0 interface 0 has no altsetting 0 [ 520.283621][T13437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1541'. [ 520.319937][ T975] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 520.345167][ T47] usb 3-1: new low-speed USB device number 77 using dummy_hcd [ 520.364737][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.384493][ T975] usb 4-1: config 0 descriptor?? [ 520.511731][ T47] usb 3-1: Invalid ep0 maxpacket: 16 [ 520.517708][ T47] usb usb3-port1: attempt power cycle [ 520.799559][ T975] hid-steam 0003:28DE:1102.0015: item fetching failed at offset 4/5 [ 520.811866][ T975] hid-steam 0003:28DE:1102.0015: steam_probe:parse of hid interface failed [ 520.828590][ T975] hid-steam 0003:28DE:1102.0015: probe with driver hid-steam failed with error -22 [ 520.861893][ T47] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 520.894262][ T47] usb 3-1: Invalid ep0 maxpacket: 16 [ 521.012059][ T975] usb 4-1: USB disconnect, device number 109 [ 521.021700][ T47] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 521.067520][ T47] usb 3-1: Invalid ep0 maxpacket: 16 [ 521.073988][ T47] usb usb3-port1: unable to enumerate USB device [ 521.499809][ T30] audit: type=1326 audit(1746519973.429:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13443 comm="syz.4.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8202f8e969 code=0x7ffc0000 [ 521.522300][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.530553][ T30] audit: type=1326 audit(1746519973.429:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13443 comm="syz.4.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8202f8e969 code=0x7ffc0000 [ 521.560675][ T30] audit: type=1326 audit(1746519973.429:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13443 comm="syz.4.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8202f8e969 code=0x7ffc0000 [ 521.595868][ T30] audit: type=1326 audit(1746519973.429:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13443 comm="syz.4.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8202f8e969 code=0x7ffc0000 [ 521.611658][ T975] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 521.619105][ T30] audit: type=1326 audit(1746519973.429:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13443 comm="syz.4.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8202f8e969 code=0x7ffc0000 [ 521.655989][T13446] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:0 [ 521.691766][ T30] audit: type=1326 audit(1746519973.429:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13443 comm="syz.4.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8202f8e969 code=0x7ffc0000 [ 521.718058][ T30] audit: type=1326 audit(1746519973.439:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13443 comm="syz.4.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8202f8e9a3 code=0x7ffc0000 [ 521.740327][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.749458][ T30] audit: type=1326 audit(1746519973.439:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13443 comm="syz.4.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8202f8e9a3 code=0x7ffc0000 [ 521.771733][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.787820][ T30] audit: type=1326 audit(1746519973.439:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13443 comm="syz.4.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8202f8e969 code=0x7ffc0000 [ 521.813432][ T975] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 521.813840][ T30] audit: type=1326 audit(1746519973.439:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13443 comm="syz.4.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8202f8e969 code=0x7ffc0000 [ 521.878622][ T975] usb 2-1: config 0 interface 0 has no altsetting 0 [ 521.894781][ T975] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 521.910607][ T975] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 521.925341][T13452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.949423][T13452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.952104][ T975] usb 2-1: Product: syz [ 521.974058][ T975] usb 2-1: Manufacturer: syz [ 521.985252][ T975] usb 2-1: SerialNumber: syz [ 522.009466][ T975] usb 2-1: config 0 descriptor?? [ 522.030761][ T975] usb 2-1: selecting invalid altsetting 0 [ 522.268269][T13441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.292406][T13441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.135300][T13477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.747795][ T5835] usb 2-1: USB disconnect, device number 92 [ 524.001694][ T5888] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 524.127315][T13502] xt_hashlimit: invalid rate [ 524.162587][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 524.179425][ T5888] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 524.202510][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.210708][ T5888] usb 5-1: Product: syz [ 524.227174][ T5888] usb 5-1: Manufacturer: syz [ 524.239910][ T5888] usb 5-1: SerialNumber: syz [ 524.258065][ T5888] usb 5-1: config 0 descriptor?? [ 524.311723][ T5835] usb 2-1: new low-speed USB device number 93 using dummy_hcd [ 524.473690][ T5888] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 524.485885][ T5835] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 524.501790][ T5835] usb 2-1: config 0 has no interface number 0 [ 524.508187][ T5835] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 524.520758][ T5835] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 524.535075][ T5835] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 524.547327][ T5835] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 524.562138][ T5835] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 524.577278][ T5835] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 524.597572][ T5835] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 524.608462][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.623958][ T5835] usb 2-1: config 0 descriptor?? [ 524.630309][T13496] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 524.642588][T13496] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 524.660014][ T5835] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 524.871443][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-1) [ 524.883113][ T47] usb 2-1: USB disconnect, device number 93 [ 524.946885][ T47] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 525.002037][T13508] fuse: Unknown parameter ';' [ 525.016521][T13508] netlink: 'syz.2.1560': attribute type 8 has an invalid length. [ 525.046317][ T5888] gspca_sunplus: reg_w_riv err -71 [ 525.053056][ T5888] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 525.070648][ T5888] usb 5-1: USB disconnect, device number 73 [ 525.156143][T13512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1559'. [ 526.361800][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 526.379894][ T5835] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 527.211670][ T47] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 527.376683][ T47] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 527.386928][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 527.403944][ T47] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 527.415883][ T47] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 527.434483][ T47] usb 3-1: Product: syz [ 527.444630][ T47] usb 3-1: Manufacturer: syz [ 527.452086][ T47] usb 3-1: SerialNumber: syz [ 527.467735][ T47] usb 3-1: config 0 descriptor?? [ 527.481628][ T9] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 527.489060][ T47] usb 3-1: selecting invalid altsetting 0 [ 527.624152][ T5835] usb 2-1: config 0 has no interfaces? [ 527.644023][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 527.680883][ T9] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 527.696525][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.704639][ T9] usb 5-1: Product: syz [ 527.708841][ T9] usb 5-1: Manufacturer: syz [ 527.713528][ T9] usb 5-1: SerialNumber: syz [ 527.727861][ T9] usb 5-1: config 0 descriptor?? [ 527.760120][T13549] netlink: 'syz.0.1569': attribute type 1 has an invalid length. [ 527.816973][T13549] bond3: entered promiscuous mode [ 527.845804][T13549] bond3: entered allmulticast mode [ 527.962793][ T5908] usb 3-1: USB disconnect, device number 80 [ 528.029475][T13554] bond3: (slave geneve2): making interface the new active one [ 528.037379][T13554] geneve2: entered promiscuous mode [ 528.062133][T13554] geneve2: entered allmulticast mode [ 528.069299][T13554] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 528.080717][ T5835] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 528.095601][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.111707][ T5835] usb 2-1: Product: syz [ 528.116037][ T5835] usb 2-1: Manufacturer: syz [ 528.120974][ T5835] usb 2-1: SerialNumber: syz [ 528.144916][ T5835] usb 2-1: config 0 descriptor?? [ 528.378861][ T9] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 528.429892][ T9] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 528.438874][ T9] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 528.586919][ T9] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 528.685179][ T9] usb 2-1: USB disconnect, device number 94 [ 528.945865][T13557] xt_hashlimit: invalid rate [ 529.128929][ T47] usb 5-1: USB disconnect, device number 74 [ 529.832409][ T9] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 530.140618][T13584] netlink: 'syz.2.1578': attribute type 39 has an invalid length. [ 530.174557][ T9] usb 4-1: config 0 has no interfaces? [ 530.274945][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 530.321740][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.506411][ T9] usb 4-1: Product: syz [ 530.510639][ T9] usb 4-1: Manufacturer: syz [ 530.842971][ T9] usb 4-1: SerialNumber: syz [ 530.903454][ T9] usb 4-1: config 0 descriptor?? [ 531.503578][ T9] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 532.507122][ T9] usb 2-1: config 0 has no interfaces? [ 532.636086][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 532.651632][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.663596][ T975] usb 4-1: USB disconnect, device number 111 [ 532.814088][ T5888] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 532.841560][ T9] usb 2-1: Product: syz [ 532.846179][ T9] usb 2-1: Manufacturer: syz [ 532.850769][ T9] usb 2-1: SerialNumber: syz [ 532.867850][ T9] usb 2-1: config 0 descriptor?? [ 533.000598][ T5888] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.021620][ T5888] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 533.044183][ T5888] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 533.071789][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.106651][ T5888] usb 3-1: Product: syz [ 533.111131][ T5888] usb 3-1: Manufacturer: syz [ 533.155733][ T5888] usb 3-1: SerialNumber: syz [ 533.207271][T13613] xt_hashlimit: invalid rate [ 533.297532][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1586'. [ 533.559679][T13625] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1588'. [ 533.604449][T13609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.657403][T13609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.754365][ T5888] usb 3-1: 0:2 : does not exist [ 533.835259][ T5888] usb 3-1: USB disconnect, device number 81 [ 533.937413][T13630] binder: 13629:13630 ioctl 4068aea3 200000000100 returned -22 [ 533.947813][T13630] binder: 13629:13630 ioctl c0306201 200000001d40 returned -14 [ 534.050041][ T5839] usb 2-1: USB disconnect, device number 95 [ 534.061678][ T975] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 534.232708][ T975] usb 4-1: Invalid ep0 maxpacket: 16 [ 534.241662][ T47] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 534.389272][ T975] usb 4-1: new low-speed USB device number 113 using dummy_hcd [ 534.411931][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 534.420672][ T47] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 534.438897][ T47] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.485466][ T47] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 534.509195][ T47] usb 5-1: config 1 has no interface number 0 [ 534.526287][ T47] usb 5-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.569085][ T47] usb 5-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.593440][ T47] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 534.609873][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.631998][ T975] usb 4-1: Invalid ep0 maxpacket: 16 [ 534.640466][ T47] usb 5-1: Product: syz [ 534.647490][ T975] usb usb4-port1: attempt power cycle [ 534.657468][ T47] usb 5-1: Manufacturer: syz [ 534.673572][ T47] usb 5-1: SerialNumber: syz [ 534.701625][ T5839] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 534.839858][ T47] cdc_wdm 5-1:1.128: skipping garbage [ 534.847695][ T47] cdc_wdm 5-1:1.128: cdc-wdm0: USB WDM device [ 534.859047][ T47] cdc_wdm 5-1:1.128: Unknown control protocol [ 534.875582][ T5839] usb 3-1: unable to get BOS descriptor or descriptor too short [ 534.887690][ T5839] usb 3-1: not running at top speed; connect to a high speed hub [ 534.905313][ T5839] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 534.917977][ T5839] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 534.944943][ T5839] usb 3-1: config 1 has no interface number 1 [ 534.984341][ T5839] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 83, changing to 4 [ 535.002291][ T975] usb 4-1: new low-speed USB device number 114 using dummy_hcd [ 535.028221][ T5839] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 535.044104][ T975] usb 4-1: Invalid ep0 maxpacket: 16 [ 535.076720][ T5839] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 535.090357][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.104619][ T47] usb 5-1: USB disconnect, device number 75 [ 535.129292][ T5839] usb 3-1: Product: syz [ 535.140946][ T5839] usb 3-1: Manufacturer: syz [ 535.154307][ T5839] usb 3-1: SerialNumber: syz [ 535.210298][ T975] usb 4-1: new low-speed USB device number 115 using dummy_hcd [ 535.258431][ T975] usb 4-1: Invalid ep0 maxpacket: 16 [ 535.264471][ T975] usb usb4-port1: unable to enumerate USB device [ 535.389589][ T5839] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 535.423158][ T5839] usb 3-1: USB disconnect, device number 82 [ 535.561053][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 536.009950][T13658] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1596'. [ 536.134412][T13659] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 536.169354][T13664] fuse: Unknown parameter '' [ 536.177131][T13663] input: syz0 as /devices/virtual/input/input41 [ 536.990058][T13669] xt_hashlimit: invalid rate [ 537.516048][T13671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.526384][T13671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.712220][ T5839] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 537.900287][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.041626][ T5839] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 538.061997][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.092903][ T5839] usb 3-1: config 0 descriptor?? [ 538.141646][ T47] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 538.221692][ T975] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 538.311473][T13682] fuse: Bad value for 'fd' [ 538.351915][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 538.368193][ T47] usb 5-1: config 173 has an invalid interface number: 196 but max is 1 [ 538.379214][ T47] usb 5-1: config 173 has an invalid interface number: 159 but max is 1 [ 538.388370][ T47] usb 5-1: config 173 has an invalid descriptor of length 0, skipping remainder of the config [ 538.401304][ T47] usb 5-1: config 173 has no interface number 0 [ 538.408184][ T47] usb 5-1: config 173 has no interface number 1 [ 538.417431][ T47] usb 5-1: config 173 interface 159 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 538.434831][ T47] usb 5-1: config 173 interface 196 has no altsetting 0 [ 538.445535][ T47] usb 5-1: config 173 interface 159 has no altsetting 0 [ 538.460471][ T47] usb 5-1: language id specifier not provided by device, defaulting to English [ 538.474453][ T975] usb 4-1: config 0 has no interfaces? [ 538.491649][ T47] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0036, bcdDevice=b0.56 [ 538.509261][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.519842][ T975] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 538.532820][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.541348][ T975] usb 4-1: Product: syz [ 538.550220][ T47] usb 5-1: Product: ᠁ [ 538.556549][ T975] usb 4-1: Manufacturer: syz [ 538.561200][ T975] usb 4-1: SerialNumber: syz [ 538.566656][ T47] usb 5-1: Manufacturer: Ⰱ [ 538.571266][ T47] usb 5-1: SerialNumber: ␁ [ 538.593398][ T5839] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 538.613359][ T975] usb 4-1: config 0 descriptor?? [ 538.738533][ T5839] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0016/input/input42 [ 539.375749][T13692] Invalid logical block size (-1) [ 539.934817][ T5839] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 541.167266][ T5839] usb 3-1: USB disconnect, device number 83 [ 541.461186][ T47] hub 5-1:173.196: Invalid hub with more than one config or interface [ 541.524270][T13707] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 541.541576][ T47] hub 5-1:173.196: probe with driver hub failed with error -22 [ 541.585088][T13708] program syz.4.1610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 541.616205][ T5886] usb 4-1: USB disconnect, device number 116 [ 541.691837][ T47] usb 5-1: USB disconnect, device number 76 [ 541.722173][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 541.986576][T13724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1612'. [ 542.142566][T13725] fuse: Unknown parameter '' [ 542.210661][T13727] xt_hashlimit: invalid rate [ 543.741770][ T5886] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 543.901804][ T5839] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 544.124999][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 544.155913][ T5839] usb 2-1: config 173 has an invalid interface number: 196 but max is 1 [ 544.178314][ T5839] usb 2-1: config 173 has an invalid interface number: 159 but max is 1 [ 544.207211][ T5839] usb 2-1: config 173 has an invalid descriptor of length 0, skipping remainder of the config [ 544.278213][ T5839] usb 2-1: config 173 has no interface number 0 [ 544.299666][ T5839] usb 2-1: config 173 has no interface number 1 [ 544.317972][ T5839] usb 2-1: config 173 interface 159 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 544.364245][ T5886] usb 4-1: config 0 has no interfaces? [ 544.374055][ T5886] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 544.408358][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.421676][ T5886] usb 4-1: Product: syz [ 544.425884][ T5886] usb 4-1: Manufacturer: syz [ 544.430679][ T5886] usb 4-1: SerialNumber: syz [ 544.460166][ T5886] usb 4-1: config 0 descriptor?? [ 544.775705][ T5839] usb 2-1: config 173 interface 196 has no altsetting 0 [ 544.806192][ T5839] usb 2-1: config 173 interface 159 has no altsetting 0 [ 544.850580][ T5839] usb 2-1: language id specifier not provided by device, defaulting to English [ 544.907627][ T5839] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0036, bcdDevice=b0.56 [ 545.313922][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.324040][ T5839] usb 2-1: Product: ᠁ [ 545.328255][ T5839] usb 2-1: Manufacturer: Ⰱ [ 545.334219][ T5839] usb 2-1: SerialNumber: ␁ [ 546.183298][T13755] FAULT_INJECTION: forcing a failure. [ 546.183298][T13755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.221171][T13755] CPU: 0 UID: 0 PID: 13755 Comm: syz.3.1622 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 546.221210][T13755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 546.221224][T13755] Call Trace: [ 546.221233][T13755] [ 546.221243][T13755] dump_stack_lvl+0x189/0x250 [ 546.221277][T13755] ? __lock_acquire+0xaac/0xd20 [ 546.221307][T13755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.221335][T13755] ? __pfx__printk+0x10/0x10 [ 546.221356][T13755] ? __might_fault+0xb0/0x130 [ 546.221394][T13755] should_fail_ex+0x414/0x560 [ 546.221430][T13755] _copy_from_user+0x2d/0xb0 [ 546.221459][T13755] ___sys_sendmsg+0x158/0x2a0 [ 546.221493][T13755] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.221553][T13755] ? __fget_files+0x2a/0x420 [ 546.221578][T13755] ? __fget_files+0x3a0/0x420 [ 546.221613][T13755] __x64_sys_sendmsg+0x19b/0x260 [ 546.221641][T13755] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 546.221682][T13755] ? do_syscall_64+0xba/0x210 [ 546.221710][T13755] do_syscall_64+0xf6/0x210 [ 546.221733][T13755] ? clear_bhb_loop+0x45/0xa0 [ 546.221756][T13755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.221775][T13755] RIP: 0033:0x7f037358e969 [ 546.221793][T13755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.221810][T13755] RSP: 002b:00007f03743e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.221833][T13755] RAX: ffffffffffffffda RBX: 00007f03737b6080 RCX: 00007f037358e969 [ 546.221847][T13755] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000c [ 546.221853][T13757] Invalid logical block size (-1) [ 546.221859][T13755] RBP: 00007f03743e2090 R08: 0000000000000000 R09: 0000000000000000 [ 546.221871][T13755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.221882][T13755] R13: 0000000000000000 R14: 00007f03737b6080 R15: 00007f03738dfa28 [ 546.221909][T13755] [ 546.621671][ T5886] usb 4-1: USB disconnect, device number 117 [ 547.001274][T13773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 547.348648][ T5839] hub 2-1:173.196: Invalid hub with more than one config or interface [ 547.357333][ T5839] hub 2-1:173.196: probe with driver hub failed with error -22 [ 547.396627][ T5839] usb 2-1: USB disconnect, device number 96 [ 547.457370][T13788] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 547.509246][T13788] 8021q: adding VLAN 0 to HW filter on device bond4 [ 547.585730][T13792] ptrace attach of "./syz-executor exec"[5854] was attempted by "./syz-executor exec"[13792] [ 548.191500][T13795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1633'. [ 548.601606][ T5886] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 548.761831][ T5886] usb 2-1: Invalid ep0 maxpacket: 64 [ 548.891624][ T5886] usb 2-1: new low-speed USB device number 98 using dummy_hcd [ 549.051636][ T5886] usb 2-1: Invalid ep0 maxpacket: 64 [ 549.057360][ T5886] usb usb2-port1: attempt power cycle [ 549.401876][ T5886] usb 2-1: new low-speed USB device number 99 using dummy_hcd [ 549.431710][ T5886] usb 2-1: Invalid ep0 maxpacket: 64 [ 549.583705][ T5886] usb 2-1: new low-speed USB device number 100 using dummy_hcd [ 549.644515][ T5886] usb 2-1: Invalid ep0 maxpacket: 64 [ 549.656693][ T5886] usb usb2-port1: unable to enumerate USB device [ 549.998948][T13831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1642'. [ 550.283286][ T5886] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 550.381621][ T9] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 550.431725][ T5886] usb 3-1: device descriptor read/64, error -71 [ 550.565406][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 550.575243][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.587341][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 550.596483][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 550.611443][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 550.621223][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 550.629362][ T9] usb 5-1: Product: syz [ 550.633663][ T9] usb 5-1: Manufacturer: syz [ 550.643771][ T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 550.671617][ T5886] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 550.811640][ T5886] usb 3-1: device descriptor read/64, error -71 [ 550.879751][T13836] bridge_slave_0: left allmulticast mode [ 550.885525][T13836] bridge_slave_0: left promiscuous mode [ 550.891343][T13836] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.932035][ T5886] usb usb3-port1: attempt power cycle [ 551.198466][T13836] bridge_slave_1: left allmulticast mode [ 551.204259][T13836] bridge_slave_1: left promiscuous mode [ 551.209992][T13836] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.256246][T13836] bond0: (slave bond_slave_0): Releasing backup interface [ 551.266758][T13836] bond0: (slave bond_slave_1): Releasing backup interface [ 551.290234][T13836] team0: Port device team_slave_0 removed [ 551.305829][T13836] team0: Port device team_slave_1 removed [ 551.313515][T13836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.331907][T13836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.343815][T13836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.351884][ T5886] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 551.365797][T13836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.383218][ T5886] usb 3-1: device descriptor read/8, error -71 [ 551.518329][ T5839] usb 5-1: USB disconnect, device number 77 [ 551.566721][T13846] bridge3: entered promiscuous mode [ 551.584200][T13846] bridge3: entered allmulticast mode [ 551.631745][ T5886] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 551.652482][ T5886] usb 3-1: device descriptor read/8, error -71 [ 551.751653][ T9] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 551.764660][ T5886] usb usb3-port1: unable to enumerate USB device [ 551.861689][ T47] usb 4-1: new low-speed USB device number 118 using dummy_hcd [ 551.913113][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 551.924685][ T9] usb 2-1: config 1 has an invalid interface number: 228 but max is 2 [ 551.934855][ T9] usb 2-1: config 1 has an invalid interface number: 255 but max is 2 [ 551.950048][ T9] usb 2-1: config 1 has an invalid interface number: 118 but max is 2 [ 551.959889][ T9] usb 2-1: config 1 has no interface number 0 [ 551.968805][ T9] usb 2-1: config 1 has no interface number 1 [ 551.975986][ T9] usb 2-1: config 1 has no interface number 2 [ 551.982989][ T9] usb 2-1: config 1 interface 228 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 551.995526][ T9] usb 2-1: config 1 interface 228 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 32 [ 552.006138][ T9] usb 2-1: config 1 interface 255 altsetting 134 has an invalid descriptor for endpoint zero, skipping [ 552.020282][ T9] usb 2-1: config 1 interface 255 altsetting 134 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 552.041784][ T47] usb 4-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 552.042616][ T9] usb 2-1: config 1 interface 255 altsetting 134 has a duplicate endpoint with address 0x5, skipping [ 552.057703][ T47] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 552.077339][ T9] usb 2-1: config 1 interface 255 altsetting 134 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 552.089171][ T47] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 552.094172][ T9] usb 2-1: config 1 interface 118 altsetting 22 has an invalid descriptor for endpoint zero, skipping [ 552.108772][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.124616][ T9] usb 2-1: config 1 interface 255 has no altsetting 0 [ 552.131465][ T9] usb 2-1: config 1 interface 118 has no altsetting 0 [ 552.140959][ T9] usb 2-1: New USB device found, idVendor=413c, idProduct=81e0, bcdDevice=c4.1c [ 552.153240][ T47] usb 4-1: config 0 descriptor?? [ 552.161087][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.177645][T13850] xt_hashlimit: invalid rate [ 552.185746][ T9] usb 2-1: Product: ᐉ [ 552.189974][ T9] usb 2-1: Manufacturer: ␊ [ 552.197717][ T9] usb 2-1: SerialNumber: ㇃ꦑ䬅蝗錆鏥掅셒〩泪駩䃂ᜩ擗ꉛ鎏距ᕨ悑ꑥ⃗纷ꢃ븂ᄣ즿䖟喌耛胧ᦞ夰诈鎏ꐳ舣쿑襃냉羜꛶闦⢙寂㉈嘫鷔ྩ䰽䠰裨梜올℘㌯燐瞭䐣♲螦万둇⠍ᘃ˅紱帒释˘。ﰎ텈젙 [ 552.223027][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.243187][T13842] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 552.341400][T13852] sctp: [Deprecated]: syz.4.1651 (pid 13852) Use of int in max_burst socket option. [ 552.341400][T13852] Use struct sctp_assoc_value instead [ 552.613463][ T5835] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 552.677782][ T9] option 2-1:1.228: GSM modem (1-port) converter detected [ 552.742012][ T9] option 2-1:1.255: GSM modem (1-port) converter detected [ 552.784250][ T9] option 2-1:1.118: GSM modem (1-port) converter detected [ 552.794749][ T5835] usb 5-1: unable to get BOS descriptor or descriptor too short [ 552.804429][ T5835] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 552.849356][ T9] usb 2-1: USB disconnect, device number 101 [ 552.856537][ T5835] usb 5-1: can't read configurations, error -71 [ 552.877767][ T9] option 2-1:1.228: device disconnected [ 552.894369][ T9] option 2-1:1.255: device disconnected [ 552.906843][ T9] option 2-1:1.118: device disconnected [ 553.165319][T13859] fuse: Bad value for 'fd' [ 553.841674][ T9] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 553.962077][ T5835] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 554.031849][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 554.049584][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 554.064469][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 554.076506][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 554.089899][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 554.107234][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 554.120671][ T9] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 554.138434][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.146781][ T5835] usb 5-1: config 0 has no interfaces? [ 554.156070][ T9] usb 2-1: Product: syz [ 554.160853][ T9] usb 2-1: Manufacturer: syz [ 554.166930][ T9] usb 2-1: SerialNumber: syz [ 554.175408][ T5835] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 554.194803][ T9] usb 2-1: config 0 descriptor?? [ 554.201302][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.217264][ T5835] usb 5-1: Product: syz [ 554.226028][ T5835] usb 5-1: Manufacturer: syz [ 554.230692][ T5835] usb 5-1: SerialNumber: syz [ 554.240216][ T5835] usb 5-1: config 0 descriptor?? [ 554.612711][ T9] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 554.623079][ T47] usb 4-1: string descriptor 0 read error: -71 [ 554.640653][ T9] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 554.668249][ T9] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 554.733147][T13879] tipc: Started in network mode [ 554.738292][T13879] tipc: Node identity f2b44f6e86d9, cluster identity 4711 [ 554.745784][T13879] tipc: Enabled bearer , priority 0 [ 554.763318][T13879] syzkaller0: entered promiscuous mode [ 554.779650][T13879] syzkaller0: entered allmulticast mode [ 554.802043][ T47] usb 4-1: USB disconnect, device number 118 [ 554.822067][T13879] tipc: Resetting bearer [ 554.842254][T13870] Invalid logical block size (-1) [ 554.938993][T13878] tipc: Resetting bearer [ 554.950252][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 554.973402][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 554.988306][T13878] tipc: Disabling bearer [ 554.994557][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 555.001116][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 555.014428][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 555.031633][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 555.055249][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 555.103572][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 555.143643][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 555.163145][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 555.172347][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 555.179162][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 555.186142][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 555.192849][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 555.199444][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 555.207494][ T9] input input44: Timeout waiting for response from device. [ 555.271902][ T9] usb 2-1: USB disconnect, device number 102 [ 555.278020][T13892] netlink: 'syz.3.1662': attribute type 1 has an invalid length. [ 555.319852][T13892] bond2: entered promiscuous mode [ 555.326096][T13892] bond2: entered allmulticast mode [ 555.566681][T13892] bond2: (slave geneve3): making interface the new active one [ 555.588794][T13892] geneve3: entered promiscuous mode [ 555.595964][T13892] geneve3: entered allmulticast mode [ 555.604014][T13892] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 555.730313][T13900] x_tables: duplicate entry at hook 2 [ 557.271623][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 557.460182][ T5835] usb 5-1: USB disconnect, device number 79 [ 557.502620][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 557.601741][ T5886] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 557.765680][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 557.796946][ T5886] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 557.829946][T13940] netlink: 368 bytes leftover after parsing attributes in process `syz.0.1672'. [ 557.860995][ T5886] usb 4-1: config 0 has no interface number 0 [ 557.908384][ T5886] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 557.931396][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.954315][ T5886] usb 4-1: Product: syz [ 557.958540][ T5886] usb 4-1: Manufacturer: syz [ 557.977625][ T5886] usb 4-1: SerialNumber: syz [ 558.013489][ T5886] usb 4-1: config 0 descriptor?? [ 558.271450][ T5886] kaweth 4-1:0.235: Firmware present in device. [ 558.445613][ T5886] kaweth 4-1:0.235: Statistics collection: 0 [ 558.466784][ T5886] kaweth 4-1:0.235: Multicast filter limit: 0 [ 558.496355][ T5886] kaweth 4-1:0.235: MTU: 0 [ 558.511962][ T5886] kaweth 4-1:0.235: Read MAC address 00:00:00:00:00:00 [ 559.052145][T13923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.092081][T13923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.140591][ T5886] kaweth 4-1:0.235: kaweth interface created at eth1 [ 559.224620][ T9] usb 3-1: config 173 has an invalid interface number: 196 but max is 1 [ 559.233212][ T9] usb 3-1: config 173 has an invalid interface number: 159 but max is 1 [ 559.264357][ T9] usb 3-1: config 173 has an invalid descriptor of length 0, skipping remainder of the config [ 559.283680][ T9] usb 3-1: config 173 has no interface number 0 [ 559.300266][ T9] usb 3-1: config 173 has no interface number 1 [ 559.311656][ T9] usb 3-1: config 173 interface 159 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 559.347418][ T5886] usb 4-1: USB disconnect, device number 119 [ 559.363982][ T9] usb 3-1: config 173 interface 196 has no altsetting 0 [ 559.381402][ T9] usb 3-1: config 173 interface 159 has no altsetting 0 [ 559.821479][ T9] usb 3-1: language id specifier not provided by device, defaulting to English [ 560.011885][ T5908] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 560.158945][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0036, bcdDevice=b0.56 [ 560.175702][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.199524][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 560.233893][ T5908] usb 2-1: not running at top speed; connect to a high speed hub [ 560.244425][ T9] usb 3-1: can't set config #173, error -71 [ 560.290184][ T5908] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.314326][ T9] usb 3-1: USB disconnect, device number 88 [ 560.356989][ T5908] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 560.400461][ T5908] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 560.435165][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.447646][ T5908] usb 2-1: Product: syz [ 560.461060][ T5908] usb 2-1: Manufacturer: syz [ 560.470236][ T5908] usb 2-1: SerialNumber: syz [ 560.753695][ T5908] usb 2-1: 0:2 : does not exist [ 560.773254][ T5908] usb 2-1: unit 4 not found! [ 560.818963][ T5908] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 560.848121][ T5908] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 560.921749][ T5908] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 561.028131][ T5908] usb 2-1: USB disconnect, device number 103 [ 561.151861][ T5930] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 561.175018][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 561.375111][ T5930] usb 3-1: config 0 has no interfaces? [ 561.495254][ T5930] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 561.517729][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.537216][ T5930] usb 3-1: Product: syz [ 561.554610][ T5930] usb 3-1: Manufacturer: syz [ 561.565453][ T5930] usb 3-1: SerialNumber: syz [ 561.655083][ T5930] usb 3-1: config 0 descriptor?? [ 561.909162][T14002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1691'. [ 562.055650][T14010] Invalid logical block size (-1) [ 562.077260][T14012] FAULT_INJECTION: forcing a failure. [ 562.077260][T14012] name failslab, interval 1, probability 0, space 0, times 0 [ 562.092662][T14012] CPU: 0 UID: 0 PID: 14012 Comm: syz.0.1695 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 562.092692][T14012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 562.092705][T14012] Call Trace: [ 562.092713][T14012] [ 562.092724][T14012] dump_stack_lvl+0x189/0x250 [ 562.092752][T14012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 562.092774][T14012] ? __pfx__printk+0x10/0x10 [ 562.092792][T14012] ? __pfx___might_resched+0x10/0x10 [ 562.092805][T14012] ? fs_reclaim_acquire+0x7d/0x100 [ 562.092831][T14012] should_fail_ex+0x414/0x560 [ 562.092864][T14012] should_failslab+0xa8/0x100 [ 562.092886][T14012] __kmalloc_noprof+0xcb/0x4f0 [ 562.092904][T14012] ? video_usercopy+0x18f/0x14f0 [ 562.092927][T14012] video_usercopy+0x18f/0x14f0 [ 562.092960][T14012] ? __pfx___video_do_ioctl+0x10/0x10 [ 562.092980][T14012] ? __pfx_video_usercopy+0x10/0x10 [ 562.093011][T14012] ? __fget_files+0x3a0/0x420 [ 562.093033][T14012] v4l2_ioctl+0x18a/0x1e0 [ 562.093053][T14012] ? __pfx_v4l2_ioctl+0x10/0x10 [ 562.093071][T14012] __se_sys_ioctl+0xf9/0x170 [ 562.093088][T14012] do_syscall_64+0xf6/0x210 [ 562.093107][T14012] ? clear_bhb_loop+0x45/0xa0 [ 562.093124][T14012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.093138][T14012] RIP: 0033:0x7fa51bf8e969 [ 562.093151][T14012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.093164][T14012] RSP: 002b:00007fa51cd30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.093180][T14012] RAX: ffffffffffffffda RBX: 00007fa51c1b5fa0 RCX: 00007fa51bf8e969 [ 562.093192][T14012] RDX: 0000200000000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 562.093202][T14012] RBP: 00007fa51cd30090 R08: 0000000000000000 R09: 0000000000000000 [ 562.093211][T14012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.093220][T14012] R13: 0000000000000000 R14: 00007fa51c1b5fa0 R15: 00007fa51c2dfa28 [ 562.093242][T14012] [ 562.298315][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.611739][ T5908] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 562.771730][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 562.781856][ T5908] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 562.827421][ T5908] usb 2-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 562.845747][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.852356][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.919018][ T5908] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 562.958028][ T5908] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 563.004022][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.050754][ T5908] usb 2-1: Product: syz [ 563.102012][ T5908] usb 2-1: Manufacturer: syz [ 563.188546][ T5908] usb 2-1: SerialNumber: syz [ 563.260149][ T5908] hso 2-1:6.0: Can't find BULK IN endpoint [ 563.466233][ T5908] usb 2-1: USB disconnect, device number 104 [ 564.461804][ T5908] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 564.492788][ T5930] usb 3-1: USB disconnect, device number 89 [ 564.650577][ T5908] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 564.661771][ T5908] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 564.676976][ T5908] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 564.690812][ T5908] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 564.702880][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.721625][ T975] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 564.733741][ T5908] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 564.779688][ T5908] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 564.825097][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.862608][ T5835] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 564.913456][ T975] usb 2-1: Using ep0 maxpacket: 16 [ 565.023399][ T975] usb 2-1: unable to get BOS descriptor or descriptor too short [ 565.037323][ T975] usb 2-1: config 1 interface 0 has no altsetting 0 [ 565.075201][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.296813][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.445979][ T5835] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 565.455293][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.747247][ T5835] usb 4-1: config 0 descriptor?? [ 566.672910][ T5835] elo 0003:04E7:0030.0017: item fetching failed at offset 5/7 [ 566.746882][ T5835] elo 0003:04E7:0030.0017: parse failed [ 566.761036][ T5835] elo 0003:04E7:0030.0017: probe with driver elo failed with error -22 [ 566.822518][ T5835] usb 4-1: USB disconnect, device number 120 [ 567.066639][ T47] usb 5-1: USB disconnect, device number 80 [ 567.075313][ T975] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 567.101160][T14030] delete_channel: no stack [ 567.114072][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.123450][ T975] usb 2-1: Product: syz [ 567.127672][ T975] usb 2-1: Manufacturer: syz [ 567.133622][ T975] usb 2-1: SerialNumber: syz [ 567.499295][T14065] netlink: 368 bytes leftover after parsing attributes in process `syz.2.1707'. [ 568.562031][ T975] usbhid 2-1:1.0: can't add hid device: -71 [ 568.791808][ T975] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 568.851871][ T975] usb 2-1: USB disconnect, device number 105 [ 569.194156][ T975] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 569.471639][ T975] usb 2-1: Using ep0 maxpacket: 16 [ 569.556524][ T975] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 569.584376][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 569.704695][ T975] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 569.721555][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.762610][ T975] usb 2-1: Product: syz [ 569.766819][ T975] usb 2-1: Manufacturer: syz [ 569.812306][ T975] usb 2-1: SerialNumber: syz [ 569.836222][ T975] usb 2-1: config 0 descriptor?? [ 569.906788][T14092] netlink: 'syz.2.1715': attribute type 7 has an invalid length. [ 569.916062][ T975] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 569.961699][ T975] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 570.113151][T14092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1715'. [ 570.165594][T14092] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 570.513976][ T975] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 570.528813][ T975] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 571.161797][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 571.211860][ T975] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 571.712826][ T975] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 572.031334][T14126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1724'. [ 572.043918][T14126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1724'. [ 572.062212][T14126] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 572.079541][T14126] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 572.778222][T14140] C: renamed from team_slave_0 [ 572.788624][T14140] netlink: 'syz.2.1729': attribute type 3 has an invalid length. [ 572.809482][T14140] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1729'. [ 572.821220][T14140] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 573.166328][ T975] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 573.172987][ T5930] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 573.185464][ T975] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 573.201976][ T975] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 573.401578][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 573.430426][ T5930] usb 3-1: config 1 has an invalid interface descriptor of length 8, skipping [ 573.454936][ T9] usb 2-1: USB disconnect, device number 106 [ 573.473693][ T5930] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.501558][ T5930] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 573.533483][ T5930] usb 3-1: New USB device found, idVendor=0000, idProduct=1000, bcdDevice=6d.39 [ 573.556469][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 573.627194][ T5930] usb 3-1: Manufacturer: syz [ 573.647753][ T5930] usb 3-1: SerialNumber: syz [ 574.961703][ T975] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 575.121642][ T975] usb 4-1: Using ep0 maxpacket: 16 [ 575.129392][ T975] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 575.138917][ T975] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.149459][ T975] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 575.168017][ T975] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 575.177802][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.186171][ T975] usb 4-1: Product: syz [ 575.191267][ T975] usb 4-1: Manufacturer: syz [ 575.196199][ T975] usb 4-1: SerialNumber: syz [ 575.419352][ T975] usb 4-1: 0:2 : does not exist [ 575.780678][ T5930] usb 3-1: USB disconnect, device number 90 [ 575.849216][T14182] netlink: 'syz.2.1740': attribute type 11 has an invalid length. [ 575.881790][ T5835] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 575.928615][T14184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1741'. [ 576.056784][ T5835] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 576.066044][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.077331][ T5835] usb 5-1: config 0 descriptor?? [ 576.094117][ T5835] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 576.177240][T14184] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1741'. [ 576.188484][T14184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1741'. [ 576.486201][ T975] usb 4-1: USB disconnect, device number 121 [ 576.537128][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 576.801853][ T5930] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 576.840727][ T5835] gspca_cpia1: usb_control_msg 01, error -71 [ 576.851650][ T5835] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 576.863050][ T5835] usb 5-1: USB disconnect, device number 81 [ 576.981989][ T5930] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 577.019623][ T5930] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 577.033136][ T5930] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 577.049615][ T5930] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 577.094120][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.135245][ T5930] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 577.241044][ T5930] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 577.517041][T14203] warning: `syz.1.1745' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 577.557614][T14203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1745'. [ 577.587915][T14203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1745'. [ 577.661758][ T5835] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 577.864832][ T5835] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 578.041909][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.051629][ T5835] usb 4-1: Product: syz [ 578.055909][ T5835] usb 4-1: Manufacturer: syz [ 578.061303][ T5835] usb 4-1: SerialNumber: syz [ 578.084539][T14213] usb usb8: usbfs: process 14213 (syz.4.1746) did not claim interface 0 before use [ 578.102188][ T5835] usb 4-1: config 0 descriptor?? [ 578.110269][ T5835] ch341 4-1:0.0: ch341-uart converter detected [ 578.589575][ T5835] usb 4-1: failed to send control message: -71 [ 578.623022][ T5835] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 578.663421][T14216] use of bytesused == 0 is deprecated and will be removed in the future, [ 578.694018][ T5835] usb 4-1: USB disconnect, device number 122 [ 578.713510][T14216] use the actual size instead. [ 578.740171][ T5835] ch341 4-1:0.0: device disconnected [ 579.277453][T14224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1749'. [ 579.304393][T14226] netlink: 'syz.3.1750': attribute type 10 has an invalid length. [ 579.438859][T14228] fuse: Unknown parameter '' [ 579.724854][ T5930] usb 3-1: USB disconnect, device number 91 [ 579.750559][T14189] delete_channel: no stack [ 579.931878][ T9] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 580.117220][ T9] usb 5-1: config index 0 descriptor too short (expected 29555, got 441) [ 580.130330][ T9] usb 5-1: config 109 has too many interfaces: 95, using maximum allowed: 32 [ 580.161056][ T9] usb 5-1: config 109 contains an unexpected descriptor of type 0x2, skipping [ 580.295972][ T9] usb 5-1: config 109 has an invalid descriptor of length 1, skipping remainder of the config [ 580.360561][ T9] usb 5-1: config 109 has 0 interfaces, different from the descriptor's value: 95 [ 580.379920][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 580.396464][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.581205][T14250] trusted_key: encrypted_key: insufficient parameters specified [ 580.639146][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 580.639165][ T30] audit: type=1326 audit(1746520032.569:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.1.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb17d8e969 code=0x7ffc0000 [ 580.673687][ T30] audit: type=1326 audit(1746520032.609:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.1.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7feb17d8e969 code=0x7ffc0000 [ 580.693663][T14254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.700089][ T30] audit: type=1326 audit(1746520032.609:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.1.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb17d8e969 code=0x7ffc0000 [ 580.724088][T14236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.738063][ T30] audit: type=1326 audit(1746520032.609:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.1.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb17d8e969 code=0x7ffc0000 [ 580.740163][T14254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.766255][ T30] audit: type=1326 audit(1746520032.609:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.1.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb17d8e969 code=0x7ffc0000 [ 580.768285][ C0] vkms_vblank_simulate: vblank timer overrun [ 580.822361][T14236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.829676][ T30] audit: type=1326 audit(1746520032.769:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.1.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb17d8e969 code=0x7ffc0000 [ 580.832887][ T9] usb 5-1: string descriptor 0 read error: -71 [ 580.865493][ T9] usb 5-1: USB disconnect, device number 82 [ 580.890311][ T30] audit: type=1326 audit(1746520032.769:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.1.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb17d8e969 code=0x7ffc0000 [ 581.036880][T14254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.048534][T14254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.181793][ T5930] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 581.331752][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 581.340259][ T5930] usb 3-1: config 16 has an invalid interface number: 216 but max is 3 [ 581.351796][ T9] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 581.360031][ T5930] usb 3-1: config 16 has an invalid interface number: 179 but max is 3 [ 581.376778][ T5930] usb 3-1: config 16 has an invalid interface number: 46 but max is 3 [ 581.406329][ T5930] usb 3-1: config 16 has an invalid interface number: 4 but max is 3 [ 581.426670][T14260] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 581.434920][ T5930] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 581.450260][ T5930] usb 3-1: config 16 has no interface number 0 [ 581.471867][ T5930] usb 3-1: config 16 has no interface number 1 [ 581.478093][ T5930] usb 3-1: config 16 has no interface number 2 [ 581.485049][ T5930] usb 3-1: config 16 has no interface number 3 [ 581.491385][ T5930] usb 3-1: config 16 interface 216 altsetting 243 bulk endpoint 0xD has invalid maxpacket 415 [ 581.511701][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 581.527475][ T9] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 581.529513][ T5930] usb 3-1: config 16 interface 216 altsetting 243 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 581.548470][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.553375][ T5930] usb 3-1: config 16 interface 216 altsetting 243 bulk endpoint 0xB has invalid maxpacket 16 [ 581.571410][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 581.573283][ T5930] usb 3-1: config 16 interface 216 altsetting 243 has a duplicate endpoint with address 0x9, skipping [ 581.590998][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.598003][ T5930] usb 3-1: config 16 interface 216 altsetting 243 has 8 endpoint descriptors, different from the interface descriptor's value: 12 [ 581.611276][ T9] usb 5-1: Product: syz [ 581.617425][ T5930] usb 3-1: too many endpoints for config 16 interface 179 altsetting 250: 35, using maximum allowed: 30 [ 581.618234][ T9] usb 5-1: Manufacturer: syz [ 581.642790][ T9] usb 5-1: SerialNumber: syz [ 581.651727][ T5930] usb 3-1: config 16 interface 179 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 581.680755][ T5930] usb 3-1: config 16 interface 179 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 581.708615][ T5930] usb 3-1: config 16 interface 179 altsetting 250 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 581.728514][ T5930] usb 3-1: config 16 interface 179 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 581.741945][ T5835] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 581.745155][ T975] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 581.759179][ T5930] usb 3-1: config 16 interface 179 altsetting 250 has 4 endpoint descriptors, different from the interface descriptor's value: 35 [ 581.802141][ T5930] usb 3-1: config 16 interface 46 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 581.834693][ T5930] usb 3-1: too many endpoints for config 16 interface 4 altsetting 8: 255, using maximum allowed: 30 [ 581.866004][ T5930] usb 3-1: config 16 interface 4 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 581.879294][ T5930] usb 3-1: config 16 interface 216 has no altsetting 0 [ 581.892426][ T5930] usb 3-1: config 16 interface 179 has no altsetting 0 [ 581.899346][ T5930] usb 3-1: config 16 interface 46 has no altsetting 0 [ 581.901893][ T5835] usb 4-1: device descriptor read/64, error -71 [ 581.909581][ T5930] usb 3-1: config 16 interface 4 has no altsetting 0 [ 581.934810][ T5930] usb 3-1: Dual-Role OTG device on HNP port [ 581.948274][ T5930] usb 3-1: New USB device found, idVendor=0e66, idProduct=0001, bcdDevice=1a.f0 [ 581.964765][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.984735][ T9] usb 5-1: 0:2 : does not exist [ 582.002290][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 582.010034][ T5930] usb 3-1: Product: ဉ [ 582.016554][ T5930] usb 3-1: Manufacturer: ї [ 582.021182][ T5930] usb 3-1: SerialNumber:  [ 582.028884][T14257] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 582.072189][T14257] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 582.081368][ T9] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 582.113354][ T9] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 582.155123][ T9] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 582.168586][ T9] usb 5-1: USB disconnect, device number 83 [ 582.174810][ T5835] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 582.230363][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.311688][ T5835] usb 4-1: device descriptor read/64, error -71 [ 582.388654][T14257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.397813][T14257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.448425][ T5835] usb usb4-port1: attempt power cycle [ 582.570607][ T5930] usb 3-1: USB disconnect, device number 92 [ 582.813173][ T5835] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 582.922631][ T5835] usb 4-1: device descriptor read/8, error -71 [ 583.161763][ T5835] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 583.201608][ T9] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 583.222354][ T5835] usb 4-1: device descriptor read/8, error -71 [ 583.344696][T14286] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1768'. [ 583.371581][T14286] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1768'. [ 583.420798][T14286] team0: entered promiscuous mode [ 583.427253][T14286] team_slave_0: entered promiscuous mode [ 583.436385][T14286] team_slave_1: entered promiscuous mode [ 583.438477][ T5835] usb usb4-port1: unable to enumerate USB device [ 583.445414][T14286] bridge0: entered promiscuous mode [ 583.478993][ T9] usb 5-1: config 0 has no interfaces? [ 583.529363][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 583.606056][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 583.638494][ T9] usb 5-1: Product: syz [ 583.654899][ T9] usb 5-1: Manufacturer: syz [ 583.668628][ T9] usb 5-1: config 0 descriptor?? [ 583.908230][T14284] pimreg: entered allmulticast mode [ 583.962711][ T1033] [ 583.965077][ T1033] ============================================ [ 583.971218][ T1033] WARNING: possible recursive locking detected [ 583.977363][ T1033] 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 Not tainted [ 583.984460][ T1033] -------------------------------------------- [ 583.990601][ T1033] kworker/u8:5/1033 is trying to acquire lock: [ 583.996743][ T1033] ffff88805d902f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 584.005799][ T1033] [ 584.005799][ T1033] but task is already holding lock: [ 584.013154][ T1033] ffff88805edc6f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 584.022222][ T1033] [ 584.022222][ T1033] other info that might help us debug this: [ 584.030266][ T1033] Possible unsafe locking scenario: [ 584.030266][ T1033] [ 584.037733][ T1033] CPU0 [ 584.041004][ T1033] ---- [ 584.044272][ T1033] lock(&hsr->seqnr_lock); [ 584.048774][ T1033] lock(&hsr->seqnr_lock); [ 584.053273][ T1033] [ 584.053273][ T1033] *** DEADLOCK *** [ 584.053273][ T1033] [ 584.061403][ T1033] May be due to missing lock nesting notation [ 584.061403][ T1033] [ 584.069713][ T1033] 11 locks held by kworker/u8:5/1033: [ 584.075083][ T1033] #0: ffff88814cf20948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 584.086661][ T1033] #1: ffffc90003a37c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 584.099450][ T1033] #2: ffffffff8f2f4808 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 584.108937][ T1033] #3: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x208/0x1400 [ 584.118423][ T1033] #4: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0 [ 584.128251][ T1033] #5: ffffffff8df3b8c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 584.138189][ T1033] #6: ffff88805edc6f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 584.147690][ T1033] #7: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 584.157219][ T1033] #8: ffffffff8df3b8c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 584.167136][ T1033] #9: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840 [ 584.176352][ T1033] #10: ffffffff8df3b8c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 584.186363][ T1033] [ 584.186363][ T1033] stack backtrace: [ 584.192249][ T1033] CPU: 0 UID: 0 PID: 1033 Comm: kworker/u8:5 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 584.192268][ T1033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 584.192280][ T1033] Workqueue: ipv6_addrconf addrconf_dad_work [ 584.192296][ T1033] Call Trace: [ 584.192303][ T1033] [ 584.192310][ T1033] dump_stack_lvl+0x189/0x250 [ 584.192334][ T1033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.192354][ T1033] ? __pfx__printk+0x10/0x10 [ 584.192378][ T1033] print_deadlock_bug+0x28b/0x2a0 [ 584.192394][ T1033] validate_chain+0x1a3f/0x2140 [ 584.192410][ T1033] ? __lock_acquire+0xaac/0xd20 [ 584.192429][ T1033] ? unwind_next_frame+0xa5/0x2390 [ 584.192446][ T1033] ? rcu_is_watching+0x15/0xb0 [ 584.192468][ T1033] ? __kasan_check_byte+0x12/0x40 [ 584.192485][ T1033] ? unwind_next_frame+0xa5/0x2390 [ 584.192504][ T1033] __lock_acquire+0xaac/0xd20 [ 584.192525][ T1033] ? hsr_dev_xmit+0x19a/0x220 [ 584.192546][ T1033] lock_acquire+0x120/0x360 [ 584.192564][ T1033] ? hsr_dev_xmit+0x19a/0x220 [ 584.192589][ T1033] ? hsr_dev_xmit+0x19a/0x220 [ 584.192609][ T1033] _raw_spin_lock_bh+0x36/0x50 [ 584.192623][ T1033] ? hsr_dev_xmit+0x19a/0x220 [ 584.192644][ T1033] hsr_dev_xmit+0x19a/0x220 [ 584.192666][ T1033] dev_hard_start_xmit+0x2ff/0x880 [ 584.192690][ T1033] __dev_queue_xmit+0x1adf/0x3a70 [ 584.192712][ T1033] ? __dev_queue_xmit+0x27e/0x3a70 [ 584.192734][ T1033] ? __local_bh_enable_ip+0x12d/0x1c0 [ 584.192756][ T1033] ? lockdep_hardirqs_on+0x9c/0x150 [ 584.192773][ T1033] ? __pfx___dev_queue_xmit+0x10/0x10 [ 584.192794][ T1033] ? do_raw_read_unlock+0x3d/0x80 [ 584.192810][ T1033] ? ebt_do_table+0x265b/0x2820 [ 584.192836][ T1033] br_dev_queue_push_xmit+0x6c5/0x890 [ 584.192859][ T1033] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 584.192881][ T1033] ? NF_HOOK+0x9e/0x3c0 [ 584.192900][ T1033] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 584.192920][ T1033] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 584.192939][ T1033] NF_HOOK+0x31d/0x3c0 [ 584.192960][ T1033] ? NF_HOOK+0x9e/0x3c0 [ 584.192978][ T1033] ? __pfx_NF_HOOK+0x10/0x10 [ 584.192998][ T1033] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 584.193022][ T1033] br_forward_finish+0xd3/0x130 [ 584.193041][ T1033] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 584.193061][ T1033] ? __pfx_br_forward_finish+0x10/0x10 [ 584.193080][ T1033] ? __pfx_br_forward_finish+0x10/0x10 [ 584.193100][ T1033] NF_HOOK+0x31d/0x3c0 [ 584.193132][ T1033] ? NF_HOOK+0x9e/0x3c0 [ 584.193150][ T1033] ? __pfx_NF_HOOK+0x10/0x10 [ 584.193170][ T1033] ? __pfx_br_forward_finish+0x10/0x10 [ 584.193192][ T1033] __br_forward+0x41e/0x600 [ 584.193211][ T1033] ? __pfx_br_forward_finish+0x10/0x10 [ 584.193232][ T1033] ? __pfx___br_forward+0x10/0x10 [ 584.193252][ T1033] ? skb_clone+0x246/0x3a0 [ 584.193272][ T1033] maybe_deliver+0xb5/0x160 [ 584.193292][ T1033] br_flood+0x31a/0x6a0 [ 584.193313][ T1033] ? br_dev_xmit+0x185/0x1840 [ 584.193338][ T1033] br_dev_xmit+0x11b3/0x1840 [ 584.193352][ T1033] ? arch_stack_walk+0x11c/0x150 [ 584.193393][ T1033] ? br_dev_xmit+0x185/0x1840 [ 584.193410][ T1033] ? __pfx_br_dev_xmit+0x10/0x10 [ 584.193425][ T1033] ? __pfx_skb_network_protocol+0x10/0x10 [ 584.193445][ T1033] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 584.193465][ T1033] ? __pfx_passthru_features_check+0x10/0x10 [ 584.193494][ T1033] dev_hard_start_xmit+0x2ff/0x880 [ 584.193519][ T1033] __dev_queue_xmit+0x1adf/0x3a70 [ 584.193542][ T1033] ? __dev_queue_xmit+0x27e/0x3a70 [ 584.193563][ T1033] ? rcu_is_watching+0x15/0xb0 [ 584.193584][ T1033] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 584.193600][ T1033] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 584.193619][ T1033] ? __pfx___dev_queue_xmit+0x10/0x10 [ 584.193639][ T1033] ? __copy_skb_header+0xa7/0x550 [ 584.193658][ T1033] ? __asan_memcpy+0x40/0x70 [ 584.193672][ T1033] ? __pskb_copy_fclone+0x960/0xf90 [ 584.193692][ T1033] ? __asan_memcpy+0x40/0x70 [ 584.193706][ T1033] ? __pskb_copy_fclone+0x960/0xf90 [ 584.193730][ T1033] ? hsr_addr_subst_dest+0x307/0xac0 [ 584.193755][ T1033] hsr_forward_skb+0x158b/0x2860 [ 584.193774][ T1033] ? hsr_forward_skb+0x9e/0x2860 [ 584.193789][ T1033] ? __pfx_hsr_forward_skb+0x10/0x10 [ 584.193804][ T1033] ? do_raw_spin_lock+0x121/0x290 [ 584.193820][ T1033] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 584.193837][ T1033] ? hsr_dev_xmit+0x19a/0x220 [ 584.193859][ T1033] hsr_dev_xmit+0x1a5/0x220 [ 584.193881][ T1033] dev_hard_start_xmit+0x2ff/0x880 [ 584.193904][ T1033] __dev_queue_xmit+0x1adf/0x3a70 [ 584.193927][ T1033] ? __dev_queue_xmit+0x27e/0x3a70 [ 584.193951][ T1033] ? __pfx___dev_queue_xmit+0x10/0x10 [ 584.193971][ T1033] ? read_seqbegin+0x122/0x250 [ 584.193984][ T1033] ? neigh_connected_output+0x1ea/0x460 [ 584.193997][ T1033] ? lockdep_hardirqs_on+0x9c/0x150 [ 584.194013][ T1033] ? read_seqbegin+0x1ac/0x250 [ 584.194025][ T1033] ? __pfx_read_seqbegin+0x10/0x10 [ 584.194038][ T1033] ? eth_header+0x11b/0x200 [ 584.194055][ T1033] ? __asan_memcpy+0x40/0x70 [ 584.194076][ T1033] ip6_finish_output2+0x11fb/0x16a0 [ 584.194095][ T1033] ? ip6_finish_output2+0x701/0x16a0 [ 584.194113][ T1033] ? __pfx_ip6_finish_output2+0x10/0x10 [ 584.194130][ T1033] ? ip6_mtu+0x7d/0x3f0 [ 584.194144][ T1033] ? ip6_mtu+0x7d/0x3f0 [ 584.194158][ T1033] ip6_finish_output+0x234/0x7d0 [ 584.194174][ T1033] ndisc_send_skb+0xb47/0x1400 [ 584.194193][ T1033] ? ndisc_send_skb+0x208/0x1400 [ 584.194214][ T1033] ? __pfx_ndisc_send_skb+0x10/0x10 [ 584.194234][ T1033] ? __pfx_dst_output+0x10/0x10 [ 584.194251][ T1033] ? __asan_memcpy+0x40/0x70 [ 584.194267][ T1033] ? mod_delayed_work_on+0x128/0x200 [ 584.194285][ T1033] ndisc_send_ns+0xcb/0x150 [ 584.194305][ T1033] ? __pfx_ndisc_send_ns+0x10/0x10 [ 584.194324][ T1033] ? addrconf_dad_work+0xa04/0x14b0 [ 584.194339][ T1033] addrconf_dad_work+0xaae/0x14b0 [ 584.194355][ T1033] ? __pfx_addrconf_dad_work+0x10/0x10 [ 584.194373][ T1033] ? process_scheduled_works+0x9ec/0x17a0 [ 584.194397][ T1033] ? _raw_spin_unlock_irq+0x23/0x50 [ 584.194411][ T1033] ? process_scheduled_works+0x9ec/0x17a0 [ 584.194432][ T1033] ? process_scheduled_works+0x9ec/0x17a0 [ 584.194454][ T1033] process_scheduled_works+0xadb/0x17a0 [ 584.194485][ T1033] ? __pfx_process_scheduled_works+0x10/0x10 [ 584.194512][ T1033] worker_thread+0x8a0/0xda0 [ 584.194526][ T1033] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 584.194543][ T1033] ? __kthread_parkme+0x7b/0x200 [ 584.194561][ T1033] kthread+0x70e/0x8a0 [ 584.194590][ T1033] ? __pfx_worker_thread+0x10/0x10 [ 584.194603][ T1033] ? __pfx_kthread+0x10/0x10 [ 584.194619][ T1033] ? __pfx_kthread+0x10/0x10 [ 584.194633][ T1033] ? _raw_spin_unlock_irq+0x23/0x50 [ 584.194646][ T1033] ? lockdep_hardirqs_on+0x9c/0x150 [ 584.194661][ T1033] ? __pfx_kthread+0x10/0x10 [ 584.194676][ T1033] ret_from_fork+0x4b/0x80 [ 584.194689][ T1033] ? __pfx_kthread+0x10/0x10 [ 584.194705][ T1033] ret_from_fork_asm+0x1a/0x30 [ 584.194723][ T1033] [ 584.194751][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.855859][ C0] vkms_vblank_simulate: vblank timer overrun [ 585.567891][ T9] usb 5-1: USB disconnect, device number 84 [ 585.666409][T14272] delete_channel: no stack