last executing test programs: 7m28.732623478s ago: executing program 4 (id=4017): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x5ec, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0x58, 0x4d, 0x48, 0xff, 0x1199, 0x6856, 0xd1cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5da, 0x2, 0xc0, 0xec, 0x50, 0x1, [{{0x9, 0x4, 0xa9, 0x0, 0xe, 0xd2, 0x7c, 0xe4, 0x5, [], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x4, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf8, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x40}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x6, 0x69, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x8001}]}}, {{0x9, 0x5, 0x0, 0x0, 0x4c0, 0x80, 0xf3, 0xd, [@generic={0x9f, 0xf, "5b038ac1907962af335bac48e08858d616feebcaf7bb03b9c89c845af12e3fbff1ee19ba1dd137898bab04ceda64c9c03c1679a0d60b09ba794f4ea4ef0f2886a799a23362743dc8ce0ad02eb800b0220abe662f9e871f225380c81179734ac4355f9a3a86fb360b7ee24f3182dee49044dd75c901b1f93affdcc340746bf3efa3d8919d81a7dd93265d038c9a95e806c104634f99cfbe1379fae1d843"}, @generic={0xed, 0x21, "4851fb80ca1e158c9e3879edf22d5514c95dc8dab89c5d7207463252a8d8e9e48e34b691246d4b6f49b8e1a1168c4fdd876380a87ec42265e6d21935b820f7bddbeefe3ceb3454aedd1a9ef797663745d423dba2982878ae07ccd486a6102a92a8ec1d22e93753b04b2d92564e9dade96728ef6b5ab005aa30826fe8aa7290215e3c67a36edc37e9efcd5ad63acdad0792f49c025703a4b24e22d227b4a31aa575353e1f99e2521626e33d4661ba7d9d3066005cc8a4751ee1059d2a0d1ae1c0aa91feb5e3140175b002c617a259b089a995a3885e3c9cbd4c990c31717fb9ebd5be23828210d9c465af0b"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x44, 0x3, 0x67, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x1}, @generic={0x6d, 0xe19730027ecb8447, "919591366576a97ef5e76f730badb6218e9efbb6d4fe4a942dee54948f7377dc14b18f0e7211bd7d950d6406bc66f0ad0ec0cbf76b9bd2378c2ca55ab4c60cadfff2ede09282d4bc7f769793700aa617fbb50e66f6c315902172af26ecadf22f4b3330e17c55fe4a6db879"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x5, 0x9, 0x3, [@generic={0xf6, 0x3, "41d1224af6ffdf9a5c081184fe77b71b9b15d8129cc364599a3a3e0630b470f4b5315c7781c133214f8d2d1700860cd523aa1155c4f5903773d12700e9edec57a5096ddcaefb4a1999384595de2f065be3b7a1320a8b7e1bee07b087ce41acb1e50b64d7495abac109dccc81d5efc254ce79bc70ec9e92c88ee17ca642ba3cf7da16a28b676e29b79468024414ddee31786ffd4ff14cb174b1b6d68e0556973b6afaed002565ac10d890274a1cce8651f8e9bb04766c89a5af08f8453ed35ef8038daff03c34a97f04ffcd4306385839aafd59839f5f36b7e4bae57b76f48ce5df0da5af0a39316cccb1aaad28885771d0096e58"}, @generic={0x77, 0x11, "97d895ff8efa687b55c425d4fb48128f3a99d1878dde7f0bb21eef4af50c0ebcb480e6a0c50ea6fa70d92a07c7777127f5fd0e462e82df6309765d35785231e0662359348ac7c5b7cbfa33afd155233e27cd2a32b85f870a0c15fba7e13ead6476e3cc3169fd9861dd9b8933ff02082638d107c453"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x400, 0x0, 0x26, 0x7, [@generic={0x8a, 0x21, "65bc4811af678c39abd788327c2dbf8a446824605c3e1ea6e1e1dfbf9292d5e3fd0d4c4086cd6b0ef5ae7ec32b75ab64e7601fe8219a150bb62f4f1269cb891b5856eab9609a48a47e8a2f3fba8c8e13d7c1b67d188fc2152c1b93d2573c324ac59ba8686e43a5b856d0049106d12d429133f57ac1c185e50d0a9d302e64a7d34eb73df22da0bba7"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x35, 0x7}]}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0x8, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x97, 0xfff8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x9}]}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0xef, 0x8, 0x9}}, {{0x9, 0x5, 0xe, 0xe6521aca720d640e, 0x200, 0x1, 0xb9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9b, 0x4}, @generic={0xa8, 0xf, "feef06ad875e87217ace8ab0f9a098b4afaf84ff76f8f293a019a623d3e5b01035d30ec6c18dbd55690006f41646570f1e0daa2034a5d44c0d41de87fc93c62de9a234711d2561d1a6b53435d7748ce49c18c2aab724140aca5e0bd73febb794daf7786aa0f3851325bb4986e0f367482c5f0d87590773ea6737e006bbeb993851dc8870ed4920791538de9a3edaf0c962e551078b813f7e294edf994a83e65c9cf937a564bf"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x58, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x8ca}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x6, 0x4, 0x5, [@generic={0x43, 0x4, "85d25a33d647086bb05f580777ab4656f7bdd85079cccb23ef21f3226b08491652fce5f3647c99314224b512b10727b85836e73f7f75c2f2375ed4d82fef022e99"}]}}, {{0x9, 0x5, 0xe, 0xb, 0x8, 0x8, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x78, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x115a}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0xe7, 0x0, 0xb7}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x4, 0x0, 0x80}}]}}, {{0x9, 0x4, 0xe7, 0x8, 0x0, 0xff, 0x1, 0x18, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x8000, 0xff}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x303, 0x4, 0x5}]}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x2, 0x4, 0xc0, 0x20, 0x6}, 0x1d, &(0x7f0000000180)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x8, 0x9, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0x8, 0xfff7}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x1, 0x8, 0x4}]}, 0x1, [{0xcc, &(0x7f00000001c0)=@string={0xcc, 0x3, "3da11c23b26b7270e65a82852034d5f972c2891fd2efbe3cdf41b5ed60c64cd3fbfd334c82a780facbd9912d83ffac685be83b22fcc610328e43f983707c3b1053dbfc6e7742cb2aa06cb9eec318924e50c4813e62fa0e0389eff8a724ab4f07508f19d4cf09ce4773f869a1058aba8b001e160659a3c2569d02c94f13be817e0e2ffac4676b4e009b4afd5b459a725f0aa93be876411e217015768e26e98b4a0bb1e2a3a336b9604ad4c7024028a15faadaa80f75068fb7364f1d4db551bc844c48a8123c45babadbdc"}}]}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 7m26.283872133s ago: executing program 4 (id=4024): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x15, 0x5, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) getsockopt(r1, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00'}) r3 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="d8", 0x1, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r7 = socket(0x400000000010, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES8=r3, @ANYRES16=r2, @ANYBLOB="01402e5bf11524ef1b235aacd80aee48fdcd5f9bd94392865f3900214e0000", @ANYRESDEC=r4, @ANYBLOB], 0x24}}, 0x854) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) 7m26.13512727s ago: executing program 4 (id=4025): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80010}, 0x404004c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x4, 0x3, 0x3, 0x80000001}}) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, 0x0, 0x0) sendmsg(r2, 0x0, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r4, 0x80044dff, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$netlink(0x10, 0x3, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) socket(0x10, 0xa, 0x14) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="6fbc69ea7b0c6a5e2bda22ed79d3d75b0b0dab319269a52042272ece2adbe99c24bdec39b7ca58066b9acab88e6f28cd2def026eaf39301376946e54db71090fb5732cc94940bb2f533a971275d319c6d1d492dbda6bdb633311af680bb434416d7575158fda12041fbdcf35acc56f0e87d5747f0947457af7b2c50ccf06a176e22749daf51d926dd7"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x88c0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000000)={0x2, 0x6, {0xffffffffffffffff}, {0xee01}, 0x8, 0x1000}) sendmsg$NFULNL_MSG_CONFIG(r5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) write$proc_mixer(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='LINE1 \a'], 0x33) close(r7) getdents64(r6, &(0x7f0000002f40)=""/4098, 0x1002) 7m25.177827354s ago: executing program 4 (id=4030): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000020c0)={0x1, &(0x7f0000000040)=[{0x6, 0x7c, 0x0, 0x7ffc0001}]}) r0 = open(&(0x7f0000000180)='.\x00', 0x652081, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) dup2(r1, r0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) flock(r0, 0x2) socket$inet(0x2, 0x800, 0x1) ioctl$PPPIOCSACTIVE(r0, 0x40087446, &(0x7f0000000080)) 7m23.848629004s ago: executing program 4 (id=4037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffe77, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="18000000190a010100ac000000000000010000010c0003400000000000000004"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x24040094) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x7000000, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$inet(0x2, 0x2, 0x1) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) rt_sigaction(0x7, &(0x7f0000002000)={&(0x7f0000001f80)="c4c27d2a1d29000000c4e1d1f918c4c33d791a0cc4e285b800c4e13711e2c4e3e57dfb0cc4e2152f8c7400000100c4c13ac2e900f2cc2b9dffefffff", 0x10000000, 0x0, {[0xb2, 0x20a]}}, 0x0, 0x8, &(0x7f0000002140)) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x0, 0x1, 0x4, 0x7, 0x40, 0x2, 0xe, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_connect(0x6, 0x9a, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff00000000711092000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0xcd5}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x2db, &(0x7f0000000d00)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @gre={{0x10, 0x4, 0x2, 0x1, 0x2c5, 0x67, 0x0, 0x7f, 0x2f, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x26, 0x1, [{0x5, 0x3, "94"}, {0x7, 0xc, "ee3d511da80de922b3ed"}, {0x0, 0x9, "59dd2382c4175e"}, {0xb, 0x8, "da8c11915c09"}]}, @ra={0x94, 0x4, 0x1}, @noop]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xb5, 0x2, [], "8896a7833f061b82e00088db139f28b25aa451fdfd8701432c05eb1bf6753d794815b1796ff0946e996b82d6198057d489d630f27d9cb6e467582e5177bcc1edfff4812331abf9e9e0b98e5c9faabbc365ce4d6d3a0097a39aefc0def81dd4f01ad9db1487b0b6ff9b71ab2d882c421949706beaed9b115b85894c7cf7d4db0fec110246199fe6d0ebcbcfdc497f5d9c3cf921a6caf8969ab051d686ab0f9cd362f5c282b7b5716651c19eef3394419c71655a07cf"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x3, 0x3, 0xff7f], "baf08b019314f6706020bbd5790d665173921f8f3ae17e09c8b07e73f62a420a050bfc4bd43bc33108f42b90c59bfbdaf1f0446c9b74ad275464610863ac67470712ced0678e776008f728b9484bd276aa549f088aa5ecaedbbb92c5b18b47ae0ef710267373a3eae40d3893"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x3, {{0x8, 0x1, 0x7, 0x0, 0x0, 0x3, 0x4, 0x80}, 0x1, {0x45}}}, {0x8, 0x22eb, 0x2, {{0x5, 0x2, 0xa7, 0x0, 0x0, 0x3, 0x5, 0xc}, 0x2, {0x2, 0x7f, 0x3, 0x6, 0x0, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x1, "12e50c82bb726166f0be76ed69ea1ed4a3f0c169"}}}}}}, 0x0) syz_emit_ethernet(0x15d8, &(0x7f0000001880)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "014cf1", 0x15a2, 0x3a, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x31}, {[@routing={0x32, 0x14, 0x2, 0x2, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0xd}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @routing={0x4, 0x2, 0x2, 0x4, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}], @pkt_toobig={0x2, 0x0, 0x0, 0x10, {0x7, 0x6, "c7e9fe", 0x4, 0x32, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, [@dstopts={0x5e, 0x1e, '\x00', [@hao={0xc9, 0x10, @remote}, @pad1, @generic={0x1, 0xdd, "d7c55dbc407172c648964e98c83797837097e4bca8ac5a07921bafe8a87eb6c2da74b45fdf371c9d52e6601af21e7fd9c8fc2cf351714cb0ac7ea4bfa18feb5ff9407789876374994777fa8877ac3189d8dc50cc6b307947857e4cb6b2f0d0148ed2385d8848f1e257a7350cc44664a3d5ff23e2694c2a532ce4535cb4590189804176ded47292fe8285fdbcec712cf5f2dd35ef5b03205cbd58ac27a6c4d810b2adc550ab48f5055869256e7f0a508aecc5ab1b5794f20f2be587b518347f5a1d1603ae981acbab13e58874456cfb6a3990d6aebfaee18ca4b23f6ad8"}]}, @hopopts={0x3a, 0x0, '\x00', [@pad1, @pad1]}, @hopopts={0x3a, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x81}, @ra={0x5, 0x2, 0x3}]}, @hopopts={0x62, 0x8, '\x00', [@ra, @calipso={0x7, 0x30, {0x0, 0xa, 0x9, 0x3, [0x8, 0x6, 0xa, 0x5, 0x8000000000000000]}}, @ra={0x5, 0x2, 0x5}, @pad1, @enc_lim, @jumbo={0xc2, 0x4, 0xf}]}, @hopopts={0x3c, 0x212, '\x00', [@generic={0xff, 0x1000, "11dc8f4f054526058050fc4b7b9951d2b2a70cef0a688a37fd8de5aa224c5495c81e2093a5181fa8bfd7df79c50e7ae20e07f3926949415822e4d4289af646139e0be4d6be845a4c9940d76fee2123140528ebc531283781a711ed13b47e391570137be05e6e4406cec0e21d6bd7bb00583bbe6720233c7be0914ce7b57931674a4a0a0f4b4acb05c30fcb9c77912c35495b45b49f161711f120990ac327502cf8132407393ccb9201e656220fc479658bfb14bdc4f99fe457d21df9fb6b414d9ebd6927a35508c95fbdedabeb00b5757dbfb7cf6c6c9f887ee185272c84c366fc5cbf01bbd31edb27af54c8b744e5fc54858e7fce09f860c352444d848522ec8b00ba7473ecccc8344e550079ffd5fa44514e01164ddb759d488794cfeb30368e5b5466f69d833a1fa50c9b6dfdc108f4a8553c31f7ff7fc2b2f65e538d0aa7d55f78404316c7e618c473c0889436bd9d256f586f05fb55d511ec09f8c6fd74e07058650db6a784375902bd2742517273f95c6cc3b6167a12920746c140d7dfe2c188e9ba4c0890d894ea4d7135bba8461fbc9c0ecdcfc8c1af81f8926a6e6225a55e66115d6ec33998e5721a76d5167da45b190d91a6f00180f0a6adfb892481e38f06ccf0df27996f079d53198145fb37d735d3b73b913ea429e91624908c233c6d995c111fdff25680883e01fdb1e4ad255c4777006b24834c73797c3372ed270bef394c0e032a69113e591ff9fee06d3abca9a7b2d4b02e72d97729d71b714cd5bcfab5174b0cc185a0eb73a925bf39187124f253b545d989245d83cbaa27804eec9f7341ec1d456462751c7035732e50130374754c0b63609bcf251c479a2c75749e960b7ba5d15c68a24a98af1ced6063cd97eda4111d04240a7bd71990938c0185e35fd652f10ccd553b22e5e6d654f232fca52b74acbc8543b74959b32af57b20691a6909981e6f19b67e748a106a908e48de15d426ab99f0548c462af984ba88529774b1e39e5c7e68fbe2603f4bb02a096cbfb8e656bc168580cb8f0547227f9ebcfea10a40a07b435adae869f00daf732210008c6144b08f2ef5c509b55f99130a02527aa55b37f2e1be6d01e5d0e8d83065d647620da99a6d98bb4a95de12b27112919eda5dd92d9e54db291b41299a3e952d91e9b225afd9a5817e3ad44543ce7b659aa1406842802030b6ff1df597d4043e6193e9e79808fb352ea2c300d03ca99b6164d99aa5206199e82d8bc2790ba8c42d662b54d280270a7053560051d20d491eb97122cc84ccc2e5d0bdf884632288494f5f5b60e2f8455e179709fae2beefe76d451a7a75e77f228365811cbeef7af6a21635162b5fe4e375784635cc166fd6e4d2db42c6ff3f866548719fccaa07b9295f9c5547dea4e82905fc33994453a334c8f2d12dc6ea4ca255ef4e677dad2202d30be9a67f7f46d0016a1e365ca9e5fe7bba85a5ab9a2123c2f03f040b8242215357c11663a2fc08b2c0c800cad5dde4b6262ae068d0937f68954d44afb6ba88f1826ab9c29048c27852487a30ecae1928b32260be52a7da824b45aff3feb10d1bbc9cb46d483ba5386a049bfe6e50a0ec08e197e96870eb4c6bb2a4edd80e3adb0372c092ae6ea42840d9c5176a49ce529efdf83f6123e27849540717e6d34216f5ee76ac4c10d16f3139708068edabc57ccb95562696721b0c7e47ed2250823d6a36c10f13f49721fb8c9863c1d75e4461cec5474c4446430f34d9de3473fbef4eb35c5693cc87ea2bd0751f9b13867e9abf3b2db5f8da5c02a25e0ef11028787f3c2be0f1e0c8c3be0ab87116cc911b89895e318fead75f4a49330b83547fefd046cbcfa41fdcab1488b4b5ee219e9fbb53a377a3edac33bb2d87b8b12c99fb3ba6f66f6e17b5fe07524ce5b9f75b0334dc44a12c815671eb75597abd4df2c9b7e21826c7070673965647016da40d450d9e5a216f2d0b8e119b697146d15d498775795233fd4ffdffdcc5368bb26b1408a2c69bbbcab0cdc27f6ef2a953fcf30178a379bd9cf727bc18cf6cb18813ab59750ea7624b2ec707053eafe2fbd6935d85c6cb84c85972eb4827e24f862a1de28b985bf84180599b07355c902703b317e1f5d0b8a09b4795e24123fdede51ebbd27f1e3b648a806f8ff2fe68eb73e1df7db7808ccd90e356e5604ef65e5542f2f523aa03744549e07df93367b9e3c731b4e8431405621d941660a3e268265b3296460b560a674d4ae132bb6f18803bf40332475fccf3a9665572db5be5f48ccc686ce1bc106da54d6fcff907bbca66edda5bc4e8fc83c08f22d20260bbc8ac4f5d8db247eacaf7b39a61ca438ef765062401fd1e78e0cc5611653e4f2a87837468de49e6b266e44b438b7bf014a3ee7fc26457e47d4202163caf5aa0c37bb0166236f521981e436d6b0bce1ebfa4d0470ee356e2088498cba304adff82e8df74f46e2f3b6f15c5258f35fff08a612d90a21d47ca9d69c132601e9fa65e79a1b00f2157f49a19e59b9df928f63f04da0c327fcb2f0dd4bbbae00f5beb14b0efac74d3de17fee89c629dd3839e789cc079b405379f9a9641d678e0bb0ac6fd4496f7fc35885b4972526ef59417de57740e8eeddad7def5931ec001cecff6971bfb2f30e83f3a28f54cc46363eb845e73c8f7495ec184d32caf05e0e6c699d754f04b0bebafbf5bcd0ac32e5556dfab99f31b2d32d12396df7f675050ece22db3b9a99ba4eacbab9bf9deca176ae925c32a6bd74c619bb16d36972845734c17d8cac36391d93aef2e786fb76da7928d33922f88fefd280cb599b56c79732c04b16ea2305284ee96953335144a7e5dcc7055ed47a22d8b6d14a1eac5c1b25c9e6acf573ed8117a6b2c40a152c8f3a2527b1a5389dff3ecc1d5fe6b09abb10aeb5d501ad9e1175dd5dbc1f98ff156c2a70e75733f58a77070d3e489802209c9967e4c1210fd781ff331480bd571e30d7915268cc8b4d524a3df559392f282fcfc12478eac293e615e642211be69b942d77699b3b0bdb5d01e7fdaad1259c241c75069eca24cd207ceb4a9a938479fa9600808d88e20f011ddf0e46a6710be7d3add303a26833d3970e1c0b223bf686c1d22b6ebf0fb71dd7511f16bb926fd5e75f22b974c945dcf40fedc069130013eb305b325884c8e5cfb7f504a721729703fdc9020e2cfe8c81fbf4ffb80af086a920ad6709f4fca64baeda79973647506e141d833372d549370b8572d66b6d5564a1e2c34ae2356547d8169f0fbf38b6e5369dd5049ab7711302f400a3a286a55da336c3371bbe99bf5a17ec5a68f743fa11b03e3a27bc7bc3595621a8970ac6af626216959da9ae2e0269266ab7cd05daf292547e3bc4fee093f7c4fbc893286d70844c659dc37121d1945326ca97e6a3284ea6d91c7bb9d6d801cad30b1d25e0241056e2341e76948a42d8a64430e9deef700040d177b3a84305fdaff7eef15f2496c1d14fd6132cd8fa1c280f2b500881851e7d3303599d3c2d655cfa4ab5bd23ee975f50e1831fcf004bded57c9d892a350be11370ce92a06437fa0c8f6d40933f7be52b3f37fa79f279f4b6c92361d4bb471148a1a7600b3cc72b0de4d9aca0bacb08099c90601a74f8072d902ed2e15e28fc5885e4582f5f0205da38618a2e598664f47d384c7cae4ac83ad556f0749d59c86f6a9803028d6930f25ed40aff7094a86cf0634d1d78028db3bcd4bd5c67d5f426b54050f21c7e52f9e1f23d8c97dae27d6a810c308aa86fa6d931de427231ea871390ceede12d523c26c2578a7f82ac539372c70520a9ccf397a69dc4e53156c9c60db9b90b002fc475087b21583c8b9e33b1e19d9c4f2cc817aeb283ad71947525fc096efa0602b39358d7621cc01a489015418ae6fe8af91e672ab3b2b8cc2c816e6e5a5993d058d012ae19a7bdfdf0249eada0f71aa8f5e4630b23a6d1d428fed646068514a5fb4d8af58d436a46c86689087f21f8598ad3cc28df6a2f944de690a04ddade1b07417b5f2e23b6adc53e55ac5d34062378613c5f533057a36370ff24316c5645b8b17e779ddb975eb505b636ed8c249f7852cce81882b4178db6376ec2804e6deb091186901fa2c8398bfd2877811c3d8ba0d728cb61ac75a9ee8d9400312e4af65c26e51505a95d9920c2fae6ca3b86497020d417b8b9aa58df56dc2d36c930d7ca47190feb7adef067f41022df75b7fcda4ffb1d75d668408d1455d9528807bff0752f46d0131f57f657cd9dc210c0aaaa36712618e5dc960266ed4355ca09a82f0e8b4b0aa4ecda9315e8a1230fe80132bf021e29f89f65b3ccd1a3ae970287f7438791e58821ba3c1baf3022ad23d15b460c8aabb0ad5a2203b525d47ee2a44080f01776b97085c0f65fa089b9b38794da95843a14ca1e93d0f600852e12b2e5b1df9ecf1582e29b7b7926bb611d0eec235322d4fceff06c75b173a4a72284420f6d92d38abda42e1641d3ca977bfe19dc02d4b91c0b4e1de41c778996e665ed3af58251d690e2d23afa324af969204d4cab726ede18b83133d588400b3de52d8b2044ac6116aabc1c74442fb48cedbc779370d5df918440c8e62c91226fa9ef07dc92f86843c2d19954d081c23ee0f1dec79188ba9a22e8b535bebb145cf76cf1c0f0a8b5496018d97c1dfd22cd914ebcd3608c616eb2e85ccef3a152c45d09add05a4aa586c327a56a7de2cb6f2a36b9c7351379fd57b6458aa9362560b72a22b8294ab5f94d6f738e9c246f78010b7b44b2c032d601e43f50b9445a0293aa42f44d423804eead3181fd2b2e240725f0d57670a33e81c8e1720e3b616c5a99d1a0969d2bb5467974e4e36c0e3206407adec7c277d8a444ce542cb1d59ecd69790a268b56d14993ca31508dbd1f57a24c8e25ea053a11e2067c668880b21a9eb4ea7719cd932e6e782151acef7380a20593a308b3feccd22aef04928daf960f3307a313ae192d8169307748cebe107107d34e3f6e0232506599860edcb89b17e6e3dd4ad643bae5d3ac0ffa415ddd18410979ba430e18c6e4f6a2d72e0a87e867bcbeeb5b51d6a7087f9e79694faead04cb5620a2f603e77d8ecd05fa7b5faf5600974822c1e3af83d34cb9f6d00afd9b48c10f274c0ba45cc6e4562e07970f96b65f57bd0d7917dce083b92c5b3542ac511e35e19db8ab8ee520942db61b4abd82cafe926d7aad6811a4ab5f32b7a0966c4c574a85e74a3e9ac9524ea272974092457142fd99aa947eedd6756d33980f0d343b4575651a99dab67ea06ff50971db4d3b6ce7d58d6b2d27c7a59f9e3df1e7cf63f9bdff942febc608df63c5900fa8772dc6681ce313feb99c1e7bb9620217c0bf2eec3701ade0ca0e2f249b4b769a2514d050e46d4aa7d48f67fcf5e7b35942ab539e84fecb5bec0b28368b583895b5ead0fdca254b392657641bb6ff8bd8929e8cef92af8d2510c0e9032ea68997b3ce6475c79d3c4e008f44db7d3e66f78951d245baa8e5329e5116ee3d0cbe9bf186489754d5106ab41713cf5653e30732b0c66ff5d5e6d081d68d8964e323069bb3ccb4b55e15fcc7ec0357ecd511e29634fbfa23b0380157da1c165cda68cfb7024087f55ad8cacf28da5fbdeddbf352785744e1d8fb5db347d90917769c4c4f6c303422a6ac96f5d4a2a795e5def84bf079feb0b70f69688923f0297fee9884fb29303764790357d44ad5b4406ed76afef66aacdb3730b09f3adbe5326c38932790688ff142fe6e771d86c6e7c99c742a5ee242ead9b1206541829bbac22a73103e720cf"}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0x5f, 0x8000, [0x1, 0x9]}}, @generic={0x85, 0x67, "9c7d721d096c63d36c24ced37dfe3541234326f959d3b9e44e52cefbee4068e1638464484616e49dbb341d211aba7be10a1f29e129d06fe558559fb162c3669be79274ea9d09c32dcd302c26762f742d5b92ac906ef99a79384cb4eaa2703f82339cede5e5c3c4"}, @pad1, @ra={0x5, 0x2, 0x4}]}, @srh={0xff, 0x2, 0x4, 0x1, 0x1, 0x8, 0x8, [@local]}, @dstopts={0x32, 0xf, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0x8000}, @calipso={0x7, 0x30, {0x3, 0xa, 0xb, 0x8, [0xd, 0x8, 0x93, 0xc099, 0x4]}}, @enc_lim, @hao={0xc9, 0x10, @mcast2}]}, @hopopts={0x89, 0x17, '\x00', [@calipso={0x7, 0x58, {0x1, 0x14, 0x80, 0x1, [0x5, 0x46ba, 0x0, 0x4, 0x4, 0xf1, 0x93, 0x5, 0x8, 0x100000001]}}, @ra={0x5, 0x2, 0xf5d0}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @remote}, @pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0x1, 0xef5c, [0x43, 0x4]}}]}, @routing={0x62, 0xc, 0x1, 0x4, 0x0, [@private1, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @fragment={0x33, 0x0, 0x6, 0x0, 0x0, 0x15, 0x64}], "ff2de79009f0d6ce03f13e500308f0ca41cbfac2fc0c1de1fb67cf86f410f1751dfc2eb7f07708aacc61e6faf26278cb7ad05a28f3030ba70ae0394b7bf94620fcf8ec1b814946d06b614f2c855a4ef8e73bcdfff0d5b112013db021e8744c93b89c5afddc20570933765e889c120752e080b17ac23f31c7f1deecb381aa245fcb4f233aae95ea6119008c2a26282f3f829eeb11c988135c53c728b5c77d89418329aaea49acdca9a178128a3926ccea0aa4a5fdd64170194c643655a0aca694488d40d0d0ffea7e5e06"}}}}}}}, 0x0) 7m23.563904001s ago: executing program 4 (id=4041): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r1, 0x3) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0x7, 0x0, 0xfffc, 0x1}, 'syz0\x00', 0x3a}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write(0xffffffffffffffff, &(0x7f0000000d00)="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", 0x139) syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) 7m23.189490855s ago: executing program 32 (id=4041): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r1, 0x3) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0x7, 0x0, 0xfffc, 0x1}, 'syz0\x00', 0x3a}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write(0xffffffffffffffff, &(0x7f0000000d00)="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", 0x139) syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) 16.623928273s ago: executing program 3 (id=5546): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) 14.925710329s ago: executing program 0 (id=5551): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = userfaultfd(0x1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0) eventfd(0x3) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) r7 = io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x78df, 0x800, 0x0, 0x1000000, 0x0, r6}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r7, 0x13, &(0x7f0000001bc0), 0x2) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f00000003c0)={r11, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000240)={r11, 0x4000000}, 0xc) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f00000000c0)="1a", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x10001}, 0x1c) shutdown(r8, 0x1) 14.865391678s ago: executing program 3 (id=5552): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x5, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffd}}}}}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xfffffffc, @empty, 0x1}, 0x1c) syz_emit_ethernet(0xe7, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xad, 0x11, 0x1, @remote, @mcast2, {[], {0x4e20, 0xe22, 0xad, 0x0, @wg=@data={0x4, 0xf, 0x6, "820e80d8b2088c33110cf6f8f0a69bf1c035cb6b033fd9e0c41a974b1e6321578f46eafd8d3d6c4737ce97d309e39999976a874331641aaf63b9a3f6173f64ec2fa6d8e2470f0d8e053e37c1fd08a26b7a49cd26159a378aba201b79e0dbef7599dbb2a4eac67cb1dcaa436e43f6c417fd2b2ddc1d3dff740f692c240149c3f40a6086b01d627953a7fc111344ba852f85e33f0e54"}}}}}}}, 0x0) 14.746717277s ago: executing program 3 (id=5553): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x19) preadv(r2, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902120001009f89d64de0ab0f380010000904b8070096d1ca00e6c9bef6bad70f24bb135988dd4f16bb77a538f73323841b56ab75ba5313477ce6cb4ba3a9687d635ec2ee441b981d418d82b3f3995576d90a1bc0f7214b54744ed2"], 0x0) read$FUSE(r2, &(0x7f0000001b40)={0x2020}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000040)={0x2, 0x5, 0x6, 0x6, 'syz1\x00', 0x5}) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xff08, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r3, 0x0, 0x80) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xffff}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_DELTABLE={0x168, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x5a, 0x6, "733672afb44e46ff0dcb1c227e105131fe0a5960c2bf528e6665c1b4550bbdd7d20a44a0aa6e87f69160ff37cf12c75527a4f3384c93b3f594a2da8ea3f6b1e0692723aa1e385b4806360895fccbe211d53d0b6aa5b8"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xa6, 0x6, "c17345d7c0625dbeb66a557505fbc71cec53e00404462abc137642dedb130c62cf61ebbd4314a3c493212444bc09a5ffb4b618dd10864cb3c22b3bae01e70634edae0f35ca7864a1b276218683b000e9bdf91d94b13ca8054e0cbc5f712798a622f46f1336c19a4ba37abe26fcb85eea2e5d32e2a752f2c629c90b3fba82c28097758d2a5509577dba4401ef18df23ab77cd85459847b511432bdbc022f6c684cdf0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180), 0x3, 0x0, &(0x7f0000000240)="2294a6"}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(0xffffffffffffffff, &(0x7f0000001400)=""/4076, 0xfec) 13.954970707s ago: executing program 5 (id=5555): r0 = socket$kcm(0x10, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCDELDLCI(r4, 0x8981, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f00000000c0)=0x57fd, 0x4) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newsa={0x134, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@multicast1, 0x4e23}, {@in=@broadcast, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, {}, {0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x134}}, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d5f655334f2bb46bc67c85580c7e1992ec86228f6e89eb3d883a6a97a2ffb84bf8fa8d711d377", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r8, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x206) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000002c0)={@multicast1, @private}, &(0x7f00000003c0)=0xc) accept4(r9, 0x0, 0x0, 0x800) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000040601040000000020000000070000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 11.435159636s ago: executing program 3 (id=5558): syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0x3}, {0xd4, 0xc9, "483490b3a2419d29"}}}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe2d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000ffffffff000000000000000000000000e000000200000000000000000000000000000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@netkit}, 0x1c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043209030053de"], 0xc) 11.386248274s ago: executing program 0 (id=5559): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) syz_io_uring_setup(0x74a1, &(0x7f0000000180)={0x0, 0x2094, 0x100, 0x2, 0x2e9, 0x0, r0}, 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') socket$packet(0x11, 0x2, 0x300) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x1a, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, 0x0, 0xb8b5128b242c2049, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x401}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffe}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe6c7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x200}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x2c004041) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0xc0045520, &(0x7f00000000c0)=""/92) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r1], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) 11.308275408s ago: executing program 5 (id=5560): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) close_range(r1, r1, 0x0) r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r2, &(0x7f0000000740), 0xff67) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x84}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) unshare(0x22020600) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001980), 0x200000, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r5, 0xffffffffffffffff, 0x4}, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x24, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x24}}, 0x0) sendfile(r0, r2, &(0x7f0000000000), 0xfffb) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x100000, 0x3) write(r2, 0x0, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r7, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x7ffffffe, 0x1, 0x4}}) r8 = openat(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x8201, 0x8) getsockopt$TIPC_NODE_RECVQ_DEPTH(r8, 0x10f, 0x83, &(0x7f0000000680), &(0x7f00000006c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40045402, 0x0) 11.14947111s ago: executing program 3 (id=5562): r0 = socket$kcm(0x10, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000140)={'pim6reg0\x00', 0x5}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newsa={0x134, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@multicast1, 0x4e23}, {@in=@broadcast, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, {}, {0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x134}}, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d5f655334f2bb46bc67c85580c7e1992ec86228f6e89eb3d883a6a97a2ffb84bf8fa8d711d377", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x206) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000040601040000000020000000070000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 10.978256848s ago: executing program 0 (id=5563): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) 9.057154229s ago: executing program 3 (id=5564): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'drbg_pr_sha1\x00'}, '\x00', '\x00', 0x0, 0x41}}, 0xe0}}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001e40)={0x18, 0x0, 0x0, 0x0, &(0x7f0000001dc0), 0x0}) 8.765898456s ago: executing program 2 (id=5565): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x5, 0x5f5, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0x58, 0x4d, 0x48, 0xff, 0x1199, 0x6856, 0xd1cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e3, 0x2, 0xc0, 0xec, 0x50, 0x1, [{{0x9, 0x4, 0xa9, 0x0, 0xf, 0xd2, 0x7c, 0xe4, 0x5, [], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x4, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf8, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x40}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x6, 0x69, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x8001}]}}, {{0x9, 0x5, 0x0, 0x0, 0x4c0, 0x80, 0xf3, 0xd, [@generic={0x9f, 0xf, "5b038ac1907962af335bac48e08858d616feebcaf7bb03b9c89c845af12e3fbff1ee19ba1dd137898bab04ceda64c9c03c1679a0d60b09ba794f4ea4ef0f2886a799a23362743dc8ce0ad02eb800b0220abe662f9e871f225380c81179734ac4355f9a3a86fb360b7ee24f3182dee49044dd75c901b1f93affdcc340746bf3efa3d8919d81a7dd93265d038c9a95e806c104634f99cfbe1379fae1d843"}, @generic={0xed, 0x21, "4851fb80ca1e158c9e3879edf22d5514c95dc8dab89c5d7207463252a8d8e9e48e34b691246d4b6f49b8e1a1168c4fdd876380a87ec42265e6d21935b820f7bddbeefe3ceb3454aedd1a9ef797663745d423dba2982878ae07ccd486a6102a92a8ec1d22e93753b04b2d92564e9dade96728ef6b5ab005aa30826fe8aa7290215e3c67a36edc37e9efcd5ad63acdad0792f49c025703a4b24e22d227b4a31aa575353e1f99e2521626e33d4661ba7d9d3066005cc8a4751ee1059d2a0d1ae1c0aa91feb5e3140175b002c617a259b089a995a3885e3c9cbd4c990c31717fb9ebd5be23828210d9c465af0b"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x44, 0x3, 0x67, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x1}, @generic={0x6d, 0xe19730027ecb8447, "919591366576a97ef5e76f730badb6218e9efbb6d4fe4a942dee54948f7377dc14b18f0e7211bd7d950d6406bc66f0ad0ec0cbf76b9bd2378c2ca55ab4c60cadfff2ede09282d4bc7f769793700aa617fbb50e66f6c315902172af26ecadf22f4b3330e17c55fe4a6db879"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x5, 0x9, 0x3, [@generic={0xf6, 0x3, "41d1224af6ffdf9a5c081184fe77b71b9b15d8129cc364599a3a3e0630b470f4b5315c7781c133214f8d2d1700860cd523aa1155c4f5903773d12700e9edec57a5096ddcaefb4a1999384595de2f065be3b7a1320a8b7e1bee07b087ce41acb1e50b64d7495abac109dccc81d5efc254ce79bc70ec9e92c88ee17ca642ba3cf7da16a28b676e29b79468024414ddee31786ffd4ff14cb174b1b6d68e0556973b6afaed002565ac10d890274a1cce8651f8e9bb04766c89a5af08f8453ed35ef8038daff03c34a97f04ffcd4306385839aafd59839f5f36b7e4bae57b76f48ce5df0da5af0a39316cccb1aaad28885771d0096e58"}, @generic={0x77, 0x11, "97d895ff8efa687b55c425d4fb48128f3a99d1878dde7f0bb21eef4af50c0ebcb480e6a0c50ea6fa70d92a07c7777127f5fd0e462e82df6309765d35785231e0662359348ac7c5b7cbfa33afd155233e27cd2a32b85f870a0c15fba7e13ead6476e3cc3169fd9861dd9b8933ff02082638d107c453"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x400, 0x0, 0x26, 0x7, [@generic={0x8a, 0x21, "65bc4811af678c39abd788327c2dbf8a446824605c3e1ea6e1e1dfbf9292d5e3fd0d4c4086cd6b0ef5ae7ec32b75ab64e7601fe8219a150bb62f4f1269cb891b5856eab9609a48a47e8a2f3fba8c8e13d7c1b67d188fc2152c1b93d2573c324ac59ba8686e43a5b856d0049106d12d429133f57ac1c185e50d0a9d302e64a7d34eb73df22da0bba7"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x35, 0x7}]}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0x8, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x97, 0xfff8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x9}]}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0xef, 0x8, 0x9}}, {{0x9, 0x5, 0xe, 0xe6521aca720d640e, 0x200, 0x1, 0xb9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9b, 0x4}, @generic={0xa8, 0xf, "feef06ad875e87217ace8ab0f9a098b4afaf84ff76f8f293a019a623d3e5b01035d30ec6c18dbd55690006f41646570f1e0daa2034a5d44c0d41de87fc93c62de9a234711d2561d1a6b53435d7748ce49c18c2aab724140aca5e0bd73febb794daf7786aa0f3851325bb4986e0f367482c5f0d87590773ea6737e006bbeb993851dc8870ed4920791538de9a3edaf0c962e551078b813f7e294edf994a83e65c9cf937a564bf"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x58, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x8ca}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x6, 0x4, 0x5, [@generic={0x43, 0x4, "85d25a33d647086bb05f580777ab4656f7bdd85079cccb23ef21f3226b08491652fce5f3647c99314224b512b10727b85836e73f7f75c2f2375ed4d82fef022e99"}]}}, {{0x9, 0x5, 0xe, 0xb, 0x8, 0x8, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x78, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x115a}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0x5, 0x4}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0xe7, 0x0, 0xb7}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x4, 0x0, 0x80}}]}}, {{0x9, 0x4, 0xe7, 0x8, 0x0, 0xff, 0x1, 0x18, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x8000, 0xff}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x303, 0x4, 0x5}]}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x2, 0x4, 0xc0, 0x20, 0x6}, 0x1d, &(0x7f0000000180)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x8, 0x9, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0x8, 0xfff7}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x1, 0x8, 0x4}]}, 0x1, [{0xcc, &(0x7f00000001c0)=@string={0xcc, 0x3, "3da11c23b26b7270e65a82852034d5f972c2891fd2efbe3cdf41b5ed60c64cd3fbfd334c82a780facbd9912d83ffac685be83b22fcc610328e43f983707c3b1053dbfc6e7742cb2aa06cb9eec318924e50c4813e62fa0e0389eff8a724ab4f07508f19d4cf09ce4773f869a1058aba8b001e160659a3c2569d02c94f13be817e0e2ffac4676b4e009b4afd5b459a725f0aa93be876411e217015768e26e98b4a0bb1e2a3a336b9604ad4c7024028a15faadaa80f75068fb7364f1d4db551bc844c48a8123c45babadbdc"}}]}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 8.596598295s ago: executing program 5 (id=5567): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x5cc, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0x58, 0x4d, 0x48, 0xff, 0x1199, 0x6856, 0xd1cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5ba, 0x2, 0xc0, 0xec, 0x50, 0x1, [{{0x9, 0x4, 0xa9, 0x0, 0xf, 0xd2, 0x7c, 0xe4, 0x5, [], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x4, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf8, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x40}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x6, 0x69, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x8001}]}}, {{0x9, 0x5, 0x0, 0x0, 0x4c0, 0x80, 0xf3, 0xd, [@generic={0x9f, 0xf, "5b038ac1907962af335bac48e08858d616feebcaf7bb03b9c89c845af12e3fbff1ee19ba1dd137898bab04ceda64c9c03c1679a0d60b09ba794f4ea4ef0f2886a799a23362743dc8ce0ad02eb800b0220abe662f9e871f225380c81179734ac4355f9a3a86fb360b7ee24f3182dee49044dd75c901b1f93affdcc340746bf3efa3d8919d81a7dd93265d038c9a95e806c104634f99cfbe1379fae1d843"}, @generic={0xed, 0x21, "4851fb80ca1e158c9e3879edf22d5514c95dc8dab89c5d7207463252a8d8e9e48e34b691246d4b6f49b8e1a1168c4fdd876380a87ec42265e6d21935b820f7bddbeefe3ceb3454aedd1a9ef797663745d423dba2982878ae07ccd486a6102a92a8ec1d22e93753b04b2d92564e9dade96728ef6b5ab005aa30826fe8aa7290215e3c67a36edc37e9efcd5ad63acdad0792f49c025703a4b24e22d227b4a31aa575353e1f99e2521626e33d4661ba7d9d3066005cc8a4751ee1059d2a0d1ae1c0aa91feb5e3140175b002c617a259b089a995a3885e3c9cbd4c990c31717fb9ebd5be23828210d9c465af0b"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x44, 0x3, 0x67, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x1}, @generic={0x6d, 0xe19730027ecb8447, "919591366576a97ef5e76f730badb6218e9efbb6d4fe4a942dee54948f7377dc14b18f0e7211bd7d950d6406bc66f0ad0ec0cbf76b9bd2378c2ca55ab4c60cadfff2ede09282d4bc7f769793700aa617fbb50e66f6c315902172af26ecadf22f4b3330e17c55fe4a6db879"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x5, 0x9, 0x3, [@generic={0xf6, 0x3, "41d1224af6ffdf9a5c081184fe77b71b9b15d8129cc364599a3a3e0630b470f4b5315c7781c133214f8d2d1700860cd523aa1155c4f5903773d12700e9edec57a5096ddcaefb4a1999384595de2f065be3b7a1320a8b7e1bee07b087ce41acb1e50b64d7495abac109dccc81d5efc254ce79bc70ec9e92c88ee17ca642ba3cf7da16a28b676e29b79468024414ddee31786ffd4ff14cb174b1b6d68e0556973b6afaed002565ac10d890274a1cce8651f8e9bb04766c89a5af08f8453ed35ef8038daff03c34a97f04ffcd4306385839aafd59839f5f36b7e4bae57b76f48ce5df0da5af0a39316cccb1aaad28885771d0096e58"}, @generic={0x77, 0x11, "97d895ff8efa687b55c425d4fb48128f3a99d1878dde7f0bb21eef4af50c0ebcb480e6a0c50ea6fa70d92a07c7777127f5fd0e462e82df6309765d35785231e0662359348ac7c5b7cbfa33afd155233e27cd2a32b85f870a0c15fba7e13ead6476e3cc3169fd9861dd9b8933ff02082638d107c453"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x400, 0x0, 0x26, 0x7, [@generic={0x8a, 0x21, "65bc4811af678c39abd788327c2dbf8a446824605c3e1ea6e1e1dfbf9292d5e3fd0d4c4086cd6b0ef5ae7ec32b75ab64e7601fe8219a150bb62f4f1269cb891b5856eab9609a48a47e8a2f3fba8c8e13d7c1b67d188fc2152c1b93d2573c324ac59ba8686e43a5b856d0049106d12d429133f57ac1c185e50d0a9d302e64a7d34eb73df22da0bba7"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x35, 0x7}]}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0x8, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x97, 0xfff8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x9}]}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0xef, 0x8, 0x9}}, {{0x9, 0x5, 0xe, 0xe6521aca720d640e, 0x200, 0x1, 0xb9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9b, 0x4}, @generic={0x7f, 0xf, "feef06ad875e87217ace8ab0f9a098b4afaf84ff76f8f293a019a623d3e5b01035d30ec6c18dbd55690006f41646570f1e0daa2034a5d44c0d41de87fc93c62de9a234711d2561d1a6b53435d7748ce49c18c2aab724140aca5e0bd73febb794daf7786aa0f3851325bb4986e0f367482c5f0d87590773ea6737e006bb"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x58, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x8ca}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x6, 0x4, 0x5, [@generic={0x43, 0x4, "85d25a33d647086bb05f580777ab4656f7bdd85079cccb23ef21f3226b08491652fce5f3647c99314224b512b10727b85836e73f7f75c2f2375ed4d82fef022e99"}]}}, {{0x9, 0x5, 0xe, 0xb, 0x8, 0x8, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x78, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x115a}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0x5, 0x4}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0xe7, 0x0, 0xb7}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x4, 0x0, 0x80}}]}}, {{0x9, 0x4, 0xe7, 0x8, 0x0, 0xff, 0x1, 0x18, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x8000, 0xff}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x303, 0x4, 0x5}]}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x2, 0x4, 0xc0, 0x20, 0x6}, 0x1d, &(0x7f0000000180)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x8, 0x9, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0x8, 0xfff7}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x1, 0x8, 0x4}]}, 0x1, [{0xcc, &(0x7f00000001c0)=@string={0xcc, 0x3, "3da11c23b26b7270e65a82852034d5f972c2891fd2efbe3cdf41b5ed60c64cd3fbfd334c82a780facbd9912d83ffac685be83b22fcc610328e43f983707c3b1053dbfc6e7742cb2aa06cb9eec318924e50c4813e62fa0e0389eff8a724ab4f07508f19d4cf09ce4773f869a1058aba8b001e160659a3c2569d02c94f13be817e0e2ffac4676b4e009b4afd5b459a725f0aa93be876411e217015768e26e98b4a0bb1e2a3a336b9604ad4c7024028a15faadaa80f75068fb7364f1d4db551bc844c48a8123c45babadbdc"}}]}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 8.531893362s ago: executing program 1 (id=5568): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r1, &(0x7f0000000340)=""/79, 0x4f) getdents(r1, &(0x7f0000000940)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB='\x000\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmget(0x3, 0x1000, 0x20, &(0x7f0000ffb000/0x1000)=nil) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x13) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000540)={0x0, 0xb3765c6765b39a42, 0x1, "d0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000002c0)={0x40, 0x15, 0x2, "afbb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c0b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0x4, 0x1c, 0x1, {0x22, 0xc19}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfe, 0x5, 0x32}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xb7, 0x8, 0x4, 0x20, 0x6}, 0xe0, &(0x7f00000000c0)={0x5, 0xf, 0xe0, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x88, 0x9, 0xe1, 0x0, 0x5}, @generic={0x6, 0x10, 0x1, "8958bf"}, @generic={0xb6, 0x10, 0x3, "8d03205d49804bf2792b671c7478dcf85b50c78e86a11a3fb2d8f7ab2dc897e200e325ac9397f9b6fda052ccd6efbb709786a93091e67d81acd7e6173968745c9cacf8714ecf4e516731fc45ae2751110ba414d7d5d6b1c34e5b8918f6f7cd50fc8102e1e113e54fbbd3546795bb356a08dd828dab9a263f046851d37b170788e82bd3879161c3a36958d429eee3745c31382ece972b6907f3988a812aac6209cb44e276cf0782224f9a74bfad5342cfdb0bbe"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "fc5ff4ee4d1641d97af721b3d33aa57a"}]}, 0x2, [{0x1f, &(0x7f00000001c0)=@string={0x1f, 0x3, "ca52d12189675c307929d3223d04c45c1b8b5d01775fcbd5039865e3ef"}}, {0xc5, &(0x7f0000000580)=@string={0xc5, 0x3, "04b70c26d56414ef23c1aeb5deb8f6bc2641723f00f29df5ade427149a6daa451ee0c3dd4928d23eb3d483e34047ca4e5a8e29386cd113a8f7131bea2681accf7cffd805ab272b2e3c653abf0257fd1cd54779be6438bca55671e6d3637ebec50b720bdd29eb23ee0cddab56a6865f443c328db2f80d5d1184efe83a69390ea1abee2ae7308aef5f9fc9b10d0add7456e746ec724d49c5546ee0e41cc3a612e8a47737ef0f221836ba08a61156ab7728605c73ab92cd65ed6afeff8090db1c4d57d996"}}]}) 7.866982054s ago: executing program 0 (id=5569): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = userfaultfd(0x1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0) eventfd(0x3) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) r7 = io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x78df, 0x800, 0x0, 0x1000000, 0x0, r6}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r7, 0x13, &(0x7f0000001bc0), 0x2) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f00000003c0)={r11, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000240)={r11, 0x4000000}, 0xc) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r8, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000002a80)="35e415ebb0789b02", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)='M', 0x1}], 0x1}}], 0x2, 0x40448c0) shutdown(r8, 0x1) 6.482053646s ago: executing program 0 (id=5570): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x19) preadv(r2, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902120001009f89d64de0ab0f380010000904b8070096d1ca00e6c9bef6bad70f24bb135988dd4f16bb77a538f73323841b56ab75ba5313477ce6cb4ba3a9687d635ec2ee441b981d418d82b3f3995576d90a1bc0f7214b54744ed2"], 0x0) read$FUSE(r2, &(0x7f0000001b40)={0x2020}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000040)={0x2, 0x5, 0x6, 0x6, 'syz1\x00', 0x5}) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xff08, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r3, 0x0, 0x80) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xffff}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_DELTABLE={0x168, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x5a, 0x6, "733672afb44e46ff0dcb1c227e105131fe0a5960c2bf528e6665c1b4550bbdd7d20a44a0aa6e87f69160ff37cf12c75527a4f3384c93b3f594a2da8ea3f6b1e0692723aa1e385b4806360895fccbe211d53d0b6aa5b8"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xa6, 0x6, "c17345d7c0625dbeb66a557505fbc71cec53e00404462abc137642dedb130c62cf61ebbd4314a3c493212444bc09a5ffb4b618dd10864cb3c22b3bae01e70634edae0f35ca7864a1b276218683b000e9bdf91d94b13ca8054e0cbc5f712798a622f46f1336c19a4ba37abe26fcb85eea2e5d32e2a752f2c629c90b3fba82c28097758d2a5509577dba4401ef18df23ab77cd85459847b511432bdbc022f6c684cdf0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r6, &(0x7f0000001400)=""/4076, 0xfec) 5.989951517s ago: executing program 5 (id=5572): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x10000000}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000b00000000000000070000000c0001800500020001"], 0x20}}, 0x0) 5.83023094s ago: executing program 1 (id=5573): syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0x3}, {0xd4, 0xc9, "483490b3a2419d29"}}}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe2d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000ffffffff000000000000000000000000e000000200000000000000000000000000000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@netkit}, 0x1c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043209030053de"], 0xc) 5.643390211s ago: executing program 1 (id=5574): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) syz_io_uring_setup(0x74a1, &(0x7f0000000180)={0x0, 0x2094, 0x100, 0x2, 0x2e9, 0x0, r0}, 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') socket$packet(0x11, 0x2, 0x300) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x1a, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, 0x0, 0xb8b5128b242c2049, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x401}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffe}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe6c7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x200}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x2c004041) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0xc0045520, &(0x7f00000000c0)=""/92) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r1], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES64=r7, @ANYRES16=r6, @ANYBLOB="75853a045f78dc5397115f5b3b3848ebf3a6ca4eb9eb3146cda07d2ef55e1dadc38749c1f2ad10262dc0aa320354709d726281a457d9e216e5bc90ae12faed9f9ed0ade29294ef0e7cf6773d7486d37da01db786faaf53c7", @ANYRES16=r1, @ANYRES16=r6], 0x48}}, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) 5.515083437s ago: executing program 2 (id=5575): r0 = socket$kcm(0x10, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000140)={'pim6reg0\x00', 0x5}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newsa={0x134, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@multicast1, 0x4e23}, {@in=@broadcast, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, {}, {0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x134}}, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d5f655334f2bb46bc67c85580c7e1992ec86228f6e89eb3d883a6a97a2ffb84bf8fa8d711d377", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x206) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000040601040000000020000000070000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 4.905231007s ago: executing program 5 (id=5576): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x19) preadv(r2, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902120001009f89d64de0ab0f380010000904b8070096d1ca00e6c9bef6bad70f24bb135988dd4f16bb77a538f73323841b56ab75ba5313477ce6cb4ba3a9687d635ec2ee441b981d418d82b3f3995576d90a1bc0f7214b54744ed2"], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000040)={0x2, 0x5, 0x6, 0x6, 'syz1\x00', 0x5}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x80) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xffff}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_DELTABLE={0x168, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x5a, 0x6, "733672afb44e46ff0dcb1c227e105131fe0a5960c2bf528e6665c1b4550bbdd7d20a44a0aa6e87f69160ff37cf12c75527a4f3384c93b3f594a2da8ea3f6b1e0692723aa1e385b4806360895fccbe211d53d0b6aa5b8"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xa6, 0x6, "c17345d7c0625dbeb66a557505fbc71cec53e00404462abc137642dedb130c62cf61ebbd4314a3c493212444bc09a5ffb4b618dd10864cb3c22b3bae01e70634edae0f35ca7864a1b276218683b000e9bdf91d94b13ca8054e0cbc5f712798a622f46f1336c19a4ba37abe26fcb85eea2e5d32e2a752f2c629c90b3fba82c28097758d2a5509577dba4401ef18df23ab77cd85459847b511432bdbc022f6c684cdf0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180), 0x3, 0x0, &(0x7f0000000240)="2294a6"}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r6, &(0x7f0000001400)=""/4076, 0xfec) 4.53429767s ago: executing program 1 (id=5577): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) close_range(r1, r1, 0x0) r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r2, &(0x7f0000000740), 0xff67) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x84}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220b000000a1"], 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) unshare(0x22020600) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001980), 0x200000, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r5, 0xffffffffffffffff, 0x4}, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x24, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x24}}, 0x0) sendfile(r0, r2, &(0x7f0000000000), 0xfffb) fcntl$addseals(r2, 0x409, 0x8) lseek(r2, 0x100000, 0x3) write(r2, 0x0, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r7, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x7ffffffe, 0x1, 0x4}}) r8 = openat(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x8201, 0x8) getsockopt$TIPC_NODE_RECVQ_DEPTH(r8, 0x10f, 0x83, &(0x7f0000000680), &(0x7f00000006c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40045402, 0x0) 3.252870649s ago: executing program 2 (id=5578): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x5, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x3, "04"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffd}}}}}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xfffffffc, @empty, 0x1}, 0x1c) syz_emit_ethernet(0xe7, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xad, 0x11, 0x1, @remote, @mcast2, {[], {0x4e20, 0xe22, 0xad, 0x0, @wg=@data={0x4, 0xf, 0x6, "820e80d8b2088c33110cf6f8f0a69bf1c035cb6b033fd9e0c41a974b1e6321578f46eafd8d3d6c4737ce97d309e39999976a874331641aaf63b9a3f6173f64ec2fa6d8e2470f0d8e053e37c1fd08a26b7a49cd26159a378aba201b79e0dbef7599dbb2a4eac67cb1dcaa436e43f6c417fd2b2ddc1d3dff740f692c240149c3f40a6086b01d627953a7fc111344ba852f85e33f0e54"}}}}}}}, 0x0) 2.888696659s ago: executing program 2 (id=5579): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) 2.208688356s ago: executing program 1 (id=5580): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = userfaultfd(0x1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0) eventfd(0x3) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) r7 = io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x78df, 0x800, 0x0, 0x1000000, 0x0, r6}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r7, 0x13, &(0x7f0000001bc0), 0x2) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f00000003c0)={r11, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000240)={r11, 0x4000000}, 0xc) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r8, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000002a80)="35e415ebb0789b02", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)='M', 0x1}], 0x1}}], 0x2, 0x40448c0) shutdown(r8, 0x1) 2.083033728s ago: executing program 0 (id=5581): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x5e1, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0x58, 0x4d, 0x48, 0xff, 0x1199, 0x6856, 0xd1cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5cf, 0x2, 0xc0, 0xec, 0x50, 0x1, [{{0x9, 0x4, 0xa9, 0x0, 0xf, 0xd2, 0x7c, 0xe4, 0x5, [], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x4, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf8, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x40}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x6, 0x69, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x8001}]}}, {{0x9, 0x5, 0x0, 0x0, 0x4c0, 0x80, 0xf3, 0xd, [@generic={0x9f, 0xf, "5b038ac1907962af335bac48e08858d616feebcaf7bb03b9c89c845af12e3fbff1ee19ba1dd137898bab04ceda64c9c03c1679a0d60b09ba794f4ea4ef0f2886a799a23362743dc8ce0ad02eb800b0220abe662f9e871f225380c81179734ac4355f9a3a86fb360b7ee24f3182dee49044dd75c901b1f93affdcc340746bf3efa3d8919d81a7dd93265d038c9a95e806c104634f99cfbe1379fae1d843"}, @generic={0xed, 0x21, "4851fb80ca1e158c9e3879edf22d5514c95dc8dab89c5d7207463252a8d8e9e48e34b691246d4b6f49b8e1a1168c4fdd876380a87ec42265e6d21935b820f7bddbeefe3ceb3454aedd1a9ef797663745d423dba2982878ae07ccd486a6102a92a8ec1d22e93753b04b2d92564e9dade96728ef6b5ab005aa30826fe8aa7290215e3c67a36edc37e9efcd5ad63acdad0792f49c025703a4b24e22d227b4a31aa575353e1f99e2521626e33d4661ba7d9d3066005cc8a4751ee1059d2a0d1ae1c0aa91feb5e3140175b002c617a259b089a995a3885e3c9cbd4c990c31717fb9ebd5be23828210d9c465af0b"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x44, 0x3, 0x67, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x1}, @generic={0x6d, 0xe19730027ecb8447, "919591366576a97ef5e76f730badb6218e9efbb6d4fe4a942dee54948f7377dc14b18f0e7211bd7d950d6406bc66f0ad0ec0cbf76b9bd2378c2ca55ab4c60cadfff2ede09282d4bc7f769793700aa617fbb50e66f6c315902172af26ecadf22f4b3330e17c55fe4a6db879"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x5, 0x9, 0x3, [@generic={0xf6, 0x3, "41d1224af6ffdf9a5c081184fe77b71b9b15d8129cc364599a3a3e0630b470f4b5315c7781c133214f8d2d1700860cd523aa1155c4f5903773d12700e9edec57a5096ddcaefb4a1999384595de2f065be3b7a1320a8b7e1bee07b087ce41acb1e50b64d7495abac109dccc81d5efc254ce79bc70ec9e92c88ee17ca642ba3cf7da16a28b676e29b79468024414ddee31786ffd4ff14cb174b1b6d68e0556973b6afaed002565ac10d890274a1cce8651f8e9bb04766c89a5af08f8453ed35ef8038daff03c34a97f04ffcd4306385839aafd59839f5f36b7e4bae57b76f48ce5df0da5af0a39316cccb1aaad28885771d0096e58"}, @generic={0x77, 0x11, "97d895ff8efa687b55c425d4fb48128f3a99d1878dde7f0bb21eef4af50c0ebcb480e6a0c50ea6fa70d92a07c7777127f5fd0e462e82df6309765d35785231e0662359348ac7c5b7cbfa33afd155233e27cd2a32b85f870a0c15fba7e13ead6476e3cc3169fd9861dd9b8933ff02082638d107c453"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x400, 0x0, 0x26, 0x7, [@generic={0x8a, 0x21, "65bc4811af678c39abd788327c2dbf8a446824605c3e1ea6e1e1dfbf9292d5e3fd0d4c4086cd6b0ef5ae7ec32b75ab64e7601fe8219a150bb62f4f1269cb891b5856eab9609a48a47e8a2f3fba8c8e13d7c1b67d188fc2152c1b93d2573c324ac59ba8686e43a5b856d0049106d12d429133f57ac1c185e50d0a9d302e64a7d34eb73df22da0bba7"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x35, 0x7}]}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0x8, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x97, 0xfff8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x9}]}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0xef, 0x8, 0x9}}, {{0x9, 0x5, 0xe, 0xe6521aca720d640e, 0x200, 0x1, 0xb9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9b, 0x4}, @generic={0x94, 0xf, "feef06ad875e87217ace8ab0f9a098b4afaf84ff76f8f293a019a623d3e5b01035d30ec6c18dbd55690006f41646570f1e0daa2034a5d44c0d41de87fc93c62de9a234711d2561d1a6b53435d7748ce49c18c2aab724140aca5e0bd73febb794daf7786aa0f3851325bb4986e0f367482c5f0d87590773ea6737e006bbeb993851dc8870ed4920791538de9a3edaf0c962e5"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x58, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x8ca}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x6, 0x4, 0x5, [@generic={0x43, 0x4, "85d25a33d647086bb05f580777ab4656f7bdd85079cccb23ef21f3226b08491652fce5f3647c99314224b512b10727b85836e73f7f75c2f2375ed4d82fef022e99"}]}}, {{0x9, 0x5, 0xe, 0xb, 0x8, 0x8, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x78, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x115a}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0x5, 0x4}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0xe7, 0x0, 0xb7}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x4, 0x0, 0x80}}]}}, {{0x9, 0x4, 0xe7, 0x8, 0x0, 0xff, 0x1, 0x18, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x8000, 0xff}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x303, 0x4, 0x5}]}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x2, 0x4, 0xc0, 0x20, 0x6}, 0x1d, &(0x7f0000000180)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x8, 0x9, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0x8, 0xfff7}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x1, 0x8, 0x4}]}, 0x1, [{0xcc, &(0x7f00000001c0)=@string={0xcc, 0x3, "3da11c23b26b7270e65a82852034d5f972c2891fd2efbe3cdf41b5ed60c64cd3fbfd334c82a780facbd9912d83ffac685be83b22fcc610328e43f983707c3b1053dbfc6e7742cb2aa06cb9eec318924e50c4813e62fa0e0389eff8a724ab4f07508f19d4cf09ce4773f869a1058aba8b001e160659a3c2569d02c94f13be817e0e2ffac4676b4e009b4afd5b459a725f0aa93be876411e217015768e26e98b4a0bb1e2a3a336b9604ad4c7024028a15faadaa80f75068fb7364f1d4db551bc844c48a8123c45babadbdc"}}]}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1.502752288s ago: executing program 5 (id=5582): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'drbg_pr_sha1\x00'}, '\x00', '\x00', 0x0, 0x41}}, 0xe0}}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001e40)={0x18, 0x0, 0x0, 0x0, &(0x7f0000001dc0), 0x0}) 631.16975ms ago: executing program 2 (id=5583): syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0x3}, {0xd4, 0xc9, "483490b3a2419d29"}}}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe2d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000ffffffff000000000000000000000000e000000200000000000000000000000000000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@netkit}, 0x1c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043209030053de"], 0xc) 402.795204ms ago: executing program 2 (id=5584): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x5, 0x5f5, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0x58, 0x4d, 0x48, 0xff, 0x1199, 0x6856, 0xd1cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e3, 0x2, 0xc0, 0xec, 0x50, 0x1, [{{0x9, 0x4, 0xa9, 0x0, 0xf, 0xd2, 0x7c, 0xe4, 0x5, [], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x4, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf8, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x40}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x6, 0x69, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x8001}]}}, {{0x9, 0x5, 0x0, 0x0, 0x4c0, 0x80, 0xf3, 0xd, [@generic={0x9f, 0xf, "5b038ac1907962af335bac48e08858d616feebcaf7bb03b9c89c845af12e3fbff1ee19ba1dd137898bab04ceda64c9c03c1679a0d60b09ba794f4ea4ef0f2886a799a23362743dc8ce0ad02eb800b0220abe662f9e871f225380c81179734ac4355f9a3a86fb360b7ee24f3182dee49044dd75c901b1f93affdcc340746bf3efa3d8919d81a7dd93265d038c9a95e806c104634f99cfbe1379fae1d843"}, @generic={0xed, 0x21, "4851fb80ca1e158c9e3879edf22d5514c95dc8dab89c5d7207463252a8d8e9e48e34b691246d4b6f49b8e1a1168c4fdd876380a87ec42265e6d21935b820f7bddbeefe3ceb3454aedd1a9ef797663745d423dba2982878ae07ccd486a6102a92a8ec1d22e93753b04b2d92564e9dade96728ef6b5ab005aa30826fe8aa7290215e3c67a36edc37e9efcd5ad63acdad0792f49c025703a4b24e22d227b4a31aa575353e1f99e2521626e33d4661ba7d9d3066005cc8a4751ee1059d2a0d1ae1c0aa91feb5e3140175b002c617a259b089a995a3885e3c9cbd4c990c31717fb9ebd5be23828210d9c465af0b"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x44, 0x3, 0x67, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x1}, @generic={0x6d, 0xe19730027ecb8447, "919591366576a97ef5e76f730badb6218e9efbb6d4fe4a942dee54948f7377dc14b18f0e7211bd7d950d6406bc66f0ad0ec0cbf76b9bd2378c2ca55ab4c60cadfff2ede09282d4bc7f769793700aa617fbb50e66f6c315902172af26ecadf22f4b3330e17c55fe4a6db879"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x5, 0x9, 0x3, [@generic={0xf6, 0x3, "41d1224af6ffdf9a5c081184fe77b71b9b15d8129cc364599a3a3e0630b470f4b5315c7781c133214f8d2d1700860cd523aa1155c4f5903773d12700e9edec57a5096ddcaefb4a1999384595de2f065be3b7a1320a8b7e1bee07b087ce41acb1e50b64d7495abac109dccc81d5efc254ce79bc70ec9e92c88ee17ca642ba3cf7da16a28b676e29b79468024414ddee31786ffd4ff14cb174b1b6d68e0556973b6afaed002565ac10d890274a1cce8651f8e9bb04766c89a5af08f8453ed35ef8038daff03c34a97f04ffcd4306385839aafd59839f5f36b7e4bae57b76f48ce5df0da5af0a39316cccb1aaad28885771d0096e58"}, @generic={0x77, 0x11, "97d895ff8efa687b55c425d4fb48128f3a99d1878dde7f0bb21eef4af50c0ebcb480e6a0c50ea6fa70d92a07c7777127f5fd0e462e82df6309765d35785231e0662359348ac7c5b7cbfa33afd155233e27cd2a32b85f870a0c15fba7e13ead6476e3cc3169fd9861dd9b8933ff02082638d107c453"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x400, 0x0, 0x26, 0x7, [@generic={0x8a, 0x21, "65bc4811af678c39abd788327c2dbf8a446824605c3e1ea6e1e1dfbf9292d5e3fd0d4c4086cd6b0ef5ae7ec32b75ab64e7601fe8219a150bb62f4f1269cb891b5856eab9609a48a47e8a2f3fba8c8e13d7c1b67d188fc2152c1b93d2573c324ac59ba8686e43a5b856d0049106d12d429133f57ac1c185e50d0a9d302e64a7d34eb73df22da0bba7"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x35, 0x7}]}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0x8, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x97, 0xfff8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x9}]}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0xef, 0x8, 0x9}}, {{0x9, 0x5, 0xe, 0xe6521aca720d640e, 0x200, 0x1, 0xb9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9b, 0x4}, @generic={0xa8, 0xf, "feef06ad875e87217ace8ab0f9a098b4afaf84ff76f8f293a019a623d3e5b01035d30ec6c18dbd55690006f41646570f1e0daa2034a5d44c0d41de87fc93c62de9a234711d2561d1a6b53435d7748ce49c18c2aab724140aca5e0bd73febb794daf7786aa0f3851325bb4986e0f367482c5f0d87590773ea6737e006bbeb993851dc8870ed4920791538de9a3edaf0c962e551078b813f7e294edf994a83e65c9cf937a564bf"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x58, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x8ca}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x6, 0x4, 0x5, [@generic={0x43, 0x4, "85d25a33d647086bb05f580777ab4656f7bdd85079cccb23ef21f3226b08491652fce5f3647c99314224b512b10727b85836e73f7f75c2f2375ed4d82fef022e99"}]}}, {{0x9, 0x5, 0xe, 0xb, 0x8, 0x8, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x78, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x115a}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0x5, 0x4}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0xe7, 0x0, 0xb7}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x4, 0x0, 0x80}}]}}, {{0x9, 0x4, 0xe7, 0x8, 0x0, 0xff, 0x1, 0x18, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x8000, 0xff}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x303, 0x4, 0x5}]}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x2, 0x4, 0xc0, 0x20, 0x6}, 0x1d, &(0x7f0000000180)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x8, 0x9, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0x8, 0xfff7}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x1, 0x8, 0x4}]}, 0x1, [{0xcc, &(0x7f00000001c0)=@string={0xcc, 0x3, "3da11c23b26b7270e65a82852034d5f972c2891fd2efbe3cdf41b5ed60c64cd3fbfd334c82a780facbd9912d83ffac685be83b22fcc610328e43f983707c3b1053dbfc6e7742cb2aa06cb9eec318924e50c4813e62fa0e0389eff8a724ab4f07508f19d4cf09ce4773f869a1058aba8b001e160659a3c2569d02c94f13be817e0e2ffac4676b4e009b4afd5b459a725f0aa93be876411e217015768e26e98b4a0bb1e2a3a336b9604ad4c7024028a15faadaa80f75068fb7364f1d4db551bc844c48a8123c45babadbdc"}}]}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 0s ago: executing program 1 (id=5585): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r1, &(0x7f0000000340)=""/79, 0x4f) getdents(r1, &(0x7f0000000940)=""/4096, 0x1000) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB='\x000\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmget(0x3, 0x1000, 0x20, &(0x7f0000ffb000/0x1000)=nil) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x13) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000540)={0x0, 0xb3765c6765b39a42, 0x1, "d0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000300)={0xc, &(0x7f0000000240)={0x20, 0x8, 0xe, {0xe, 0x23, "59a1074cda03143ddaeeb230"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x10, &(0x7f0000000680)={0x243f7624d8392883, 0xd, 0xb1, "421f8bf21d9eda0e0dc8c2ca2cbef78d6546a680282d16bf3e6755f165c13ef8f2be4520dc29cfdb1f25688dbd153aef028c36b3bbf3a1d1c3f2ca49ccd09d73fcc45edbbc2e8affa95f9f3943711b137b86e4a160679f1b0f8cbefd565552406385b9a3b2f74eedcbdd4ccd65d104083e4d86cb3a4d5fba3542e8e1e4d0ddbc358f8422a49187a5e7cdc46d1e252fdc8ed65540b86f9f833774c58956411f5ee4e15ab81cfbc04efd360d36faed567ee4"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xe5}}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c0b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0x4, 0x1c, 0x1, {0x22, 0xc19}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfe, 0x5, 0x32}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xb7, 0x8, 0x4, 0x20, 0x6}, 0xe0, &(0x7f00000000c0)={0x5, 0xf, 0xe0, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x88, 0x9, 0xe1, 0x0, 0x5}, @generic={0x6, 0x10, 0x1, "8958bf"}, @generic={0xb6, 0x10, 0x3, "8d03205d49804bf2792b671c7478dcf85b50c78e86a11a3fb2d8f7ab2dc897e200e325ac9397f9b6fda052ccd6efbb709786a93091e67d81acd7e6173968745c9cacf8714ecf4e516731fc45ae2751110ba414d7d5d6b1c34e5b8918f6f7cd50fc8102e1e113e54fbbd3546795bb356a08dd828dab9a263f046851d37b170788e82bd3879161c3a36958d429eee3745c31382ece972b6907f3988a812aac6209cb44e276cf0782224f9a74bfad5342cfdb0bbe"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "fc5ff4ee4d1641d97af721b3d33aa57a"}]}, 0x2, [{0x1f, &(0x7f00000001c0)=@string={0x1f, 0x3, "ca52d12189675c307929d3223d04c45c1b8b5d01775fcbd5039865e3ef"}}, {0xc5, &(0x7f0000000580)=@string={0xc5, 0x3, "04b70c26d56414ef23c1aeb5deb8f6bc2641723f00f29df5ade427149a6daa451ee0c3dd4928d23eb3d483e34047ca4e5a8e29386cd113a8f7131bea2681accf7cffd805ab272b2e3c653abf0257fd1cd54779be6438bca55671e6d3637ebec50b720bdd29eb23ee0cddab56a6865f443c328db2f80d5d1184efe83a69390ea1abee2ae7308aef5f9fc9b10d0add7456e746ec724d49c5546ee0e41cc3a612e8a47737ef0f221836ba08a61156ab7728605c73ab92cd65ed6afeff8090db1c4d57d996"}}]}) kernel console output (not intermixed with test programs): d with result -19 [ 1274.626009][T21221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.643038][T21221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.882427][T21209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.900320][T21209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.944678][ T5845] usb 6-1: f81604_read: reg: 200e failed: -EPROTO [ 1274.986324][ T5845] usb 6-1: USB disconnect, device number 94 [ 1275.167631][T21217] loop6: detected capacity change from 0 to 2560 [ 1275.177847][ T5903] buffer_io_error: 11 callbacks suppressed [ 1275.177865][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1275.193338][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1275.202010][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1275.210595][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1275.218619][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1275.228797][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1275.230737][ T9] usb 2-1: f81604_read: reg: 200e failed: -EPROTO [ 1275.237634][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1275.259161][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1275.270690][ T5903] ldm_validate_partition_table(): Disk read failed. [ 1275.287544][ T5512] usb 2-1: f81604_read: reg: 100f failed: -EPROTO [ 1275.307442][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1275.319220][ T5512] usb 6-1: f81604_read: reg: 100f failed: -ENODEV [ 1275.335719][ T9] usb 2-1: USB disconnect, device number 14 [ 1275.336853][ T5903] Buffer I/O error on dev loop6, logical block 0, async page read [ 1275.354426][ T5512] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 1275.361942][ T5512] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 1275.373502][ T5903] Dev loop6: unable to read RDB block 0 [ 1275.384617][ T5903] loop6: unable to read partition table [ 1275.385076][ T5845] usb 6-1: f81604_read: reg: 100f failed: -ENODEV [ 1275.442961][ T9] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 1275.448394][T21217] ldm_validate_partition_table(): Disk read failed. [ 1275.460681][T21217] Dev loop6: unable to read RDB block 0 [ 1275.467368][T21217] loop6: unable to read partition table [ 1275.474251][T21217] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1275.523295][ T5845] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 1275.585757][ T9] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 1275.948459][ T5217] ldm_validate_partition_table(): Disk read failed. [ 1275.968332][ T5217] Dev loop6: unable to read RDB block 0 [ 1275.989613][ T5217] loop6: unable to read partition table [ 1276.000083][ T5845] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1276.180072][ T5845] usb 6-1: Using ep0 maxpacket: 8 [ 1276.189827][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1276.202308][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1276.230597][ T5845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1276.243979][ T5845] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1276.260750][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.282430][ T5845] usb 6-1: config 0 descriptor?? [ 1276.350605][T20822] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1276.394653][ T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1276.440677][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.495788][T21239] program syz.3.5289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1276.506376][ T9] usb 2-1: Product: syz [ 1276.510771][ T9] usb 2-1: Manufacturer: syz [ 1276.512545][T20822] usb 3-1: Using ep0 maxpacket: 32 [ 1276.515444][ T9] usb 2-1: SerialNumber: syz [ 1276.529515][T20822] usb 3-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1276.547068][T20822] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1276.567896][T20822] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1276.578116][T20822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.592444][T20822] usb 3-1: Product: syz [ 1276.597078][T20822] usb 3-1: Manufacturer: syz [ 1276.604287][T20822] usb 3-1: SerialNumber: syz [ 1276.636300][ T9] usb 2-1: config 0 descriptor?? [ 1276.636300][T20822] usb 3-1: config 0 descriptor?? [ 1276.707650][ T5845] hid-rmi 0003:06CB:81A7.00C9: unknown main item tag 0x0 [ 1276.715104][ T5845] hid-rmi 0003:06CB:81A7.00C9: unknown main item tag 0x0 [ 1276.723090][ T5845] hid-rmi 0003:06CB:81A7.00C9: unknown main item tag 0x0 [ 1276.730672][ T5845] hid-rmi 0003:06CB:81A7.00C9: unknown main item tag 0x0 [ 1276.738106][ T5845] hid-rmi 0003:06CB:81A7.00C9: unknown main item tag 0x0 [ 1276.755649][ T5845] hid-rmi 0003:06CB:81A7.00C9: unknown main item tag 0x0 [ 1276.770384][ T5845] hid-rmi 0003:06CB:81A7.00C9: unknown main item tag 0x0 [ 1276.785346][ T5845] hid-rmi 0003:06CB:81A7.00C9: unknown main item tag 0x0 [ 1276.795529][ T5845] hid-rmi 0003:06CB:81A7.00C9: unknown main item tag 0x0 [ 1276.808090][ T5845] hid-rmi 0003:06CB:81A7.00C9: unbalanced collection at end of report description [ 1276.830264][ T5845] hid-rmi 0003:06CB:81A7.00C9: parse failed [ 1276.846980][ T5845] hid-rmi 0003:06CB:81A7.00C9: probe with driver hid-rmi failed with error -22 [ 1276.917747][ T5845] usb 6-1: USB disconnect, device number 95 [ 1276.965617][T21237] binder: 21232:21237 ioctl c0306201 80000100 returned -11 [ 1278.299457][T21231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.309015][T21231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.326194][ T9] usb 2-1: f81604_read: reg: 200e failed: -EPROTO [ 1278.350925][T21248] netlink: 292 bytes leftover after parsing attributes in process `syz.5.5292'. [ 1278.361651][T21248] netlink: 292 bytes leftover after parsing attributes in process `syz.5.5292'. [ 1278.436844][ T9] usb 2-1: USB disconnect, device number 15 [ 1278.492543][ T9] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 1278.584068][ T5512] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 1278.636810][ T9] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 1278.934313][T21255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5295'. [ 1279.071622][T20822] usb 3-1: USB disconnect, device number 21 [ 1279.081004][ T5845] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1279.262751][ T5845] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1279.288209][ T5845] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1279.319879][ T9] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1279.327681][ T5845] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1279.358520][ T5845] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1279.403356][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.427086][T21253] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1279.493228][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1279.507940][ T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1279.531887][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.576549][ T9] usb 6-1: config 0 descriptor?? [ 1279.600329][T21269] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1279.607484][T21269] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1279.618742][T21269] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1280.046278][ T9] keytouch 0003:0926:3333.00CA: fixing up Keytouch IEC report descriptor [ 1280.088004][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.00CA/input/input276 [ 1280.270946][ T5845] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1280.316961][ T5845] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input275 [ 1280.343008][ T9] keytouch 0003:0926:3333.00CA: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1280.400503][T20822] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1280.602808][ T5845] usb 6-1: USB disconnect, device number 96 [ 1280.632868][T20822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.649397][T20822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.696496][T21290] fido_id[21290]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1280.721896][T20822] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1280.750515][T20822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.779579][T20822] usb 3-1: config 0 descriptor?? [ 1280.989285][T21301] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5304'. [ 1281.010015][T21301] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5304'. [ 1281.228416][T20822] keytouch 0003:0926:3333.00CB: fixing up Keytouch IEC report descriptor [ 1281.308847][T20822] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.00CB/input/input277 [ 1281.427652][T21282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.470688][T21282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.509528][T20822] keytouch 0003:0926:3333.00CB: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1281.524796][T15489] Bluetooth: hci1: command 0x0406 tx timeout [ 1281.635605][T20822] usb 3-1: USB disconnect, device number 22 [ 1281.700078][T15489] Bluetooth: hci0: command 0x0406 tx timeout [ 1281.706267][T15489] Bluetooth: hci4: command 0x0c1a tx timeout [ 1281.795865][T20823] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1281.816259][T21316] fido_id[21316]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1281.953163][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1281.961501][ T5845] usb 4-1: USB disconnect, device number 99 [ 1281.986364][T20823] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1282.032252][T20823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.071464][T20823] usb 6-1: Product: syz [ 1282.085900][T20823] usb 6-1: Manufacturer: syz [ 1282.107541][T20823] usb 6-1: SerialNumber: syz [ 1282.134888][T20823] usb 6-1: config 0 descriptor?? [ 1282.419018][ T5845] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1282.620027][ T5845] usb 4-1: Using ep0 maxpacket: 32 [ 1282.630794][ T5845] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1282.649426][ T5845] usb 4-1: config 0 has no interface number 0 [ 1282.658379][ T5845] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1282.667631][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1282.679951][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.698507][ T5845] usb 4-1: Product: syz [ 1282.702910][ T5845] usb 4-1: Manufacturer: syz [ 1282.707550][ T5845] usb 4-1: SerialNumber: syz [ 1282.720650][ T5845] usb 4-1: config 0 descriptor?? [ 1282.733320][ T5845] smsc95xx v2.0.0 [ 1282.831316][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1282.848838][ T9] usb 3-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1282.866888][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1282.876503][ T9] usb 3-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.40 [ 1282.889888][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.897955][ T9] usb 3-1: Product: syz [ 1282.902362][ T9] usb 3-1: Manufacturer: ﶑᣼췻倰縞儅á“阋ᰘ撙ℰ䚨칉衲숺㡑ã”걾홂䆫㷃悥贼᎞燕å æ…‡ç´…䚄扲嗲îªã»”ꮄ뺇䄓ﻥê°æ²›ê«°ìš„붶剪æ¢î²’å·à¬â–Ž [ 1282.920781][ T9] usb 3-1: SerialNumber: syz [ 1283.144255][ T5845] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1283.155228][ T5845] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1283.355824][ T9] usbhid 3-1:1.0: can't add hid device: -71 [ 1283.362372][ T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1283.375246][ T9] usb 3-1: USB disconnect, device number 23 [ 1283.787312][T21315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1283.801173][T21315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1283.812609][T21315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1283.837650][T21315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1283.849124][T20823] usb 6-1: f81604_read: reg: 200e failed: -EPROTO [ 1283.881212][T20823] usb 6-1: USB disconnect, device number 97 [ 1283.929712][ T5512] usb 6-1: f81604_read: reg: 100f failed: -ENODEV [ 1283.958057][ T5512] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 1284.029117][T20823] usb 6-1: f81604_read: reg: 100f failed: -ENODEV [ 1284.121757][T20823] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 1284.177650][ T5845] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1284.204411][ T5845] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1284.229106][ T5845] usb 4-1: USB disconnect, device number 100 [ 1284.724049][T21355] netlink: 292 bytes leftover after parsing attributes in process `syz.5.5317'. [ 1284.751374][T21355] netlink: 292 bytes leftover after parsing attributes in process `syz.5.5317'. [ 1285.008556][T21356] fuse: Bad value for 'group_id' [ 1285.013677][T21356] fuse: Bad value for 'group_id' [ 1285.024643][T21356] netlink: 'syz.2.5318': attribute type 10 has an invalid length. [ 1285.032628][T21356] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5318'. [ 1285.348839][T21351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5316'. [ 1285.449912][ T5845] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1285.720717][ T5845] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1285.759885][ T5845] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1285.789651][T21375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5320'. [ 1285.854181][ T5845] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1286.129878][ T5845] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1286.147201][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.423376][T21362] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1286.501175][T21375] wireguard0: entered promiscuous mode [ 1286.506817][T21375] wireguard0: entered allmulticast mode [ 1287.121043][T21387] fuse: Bad value for 'group_id' [ 1287.126147][T21387] fuse: Bad value for 'group_id' [ 1287.148083][T21387] netlink: 'syz.0.5321': attribute type 10 has an invalid length. [ 1287.158568][T21387] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5321'. [ 1287.178134][T21387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1287.495623][ T5845] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1287.526473][ T5845] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input278 [ 1288.010872][ T5845] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1288.177220][T21399] FAULT_INJECTION: forcing a failure. [ 1288.177220][T21399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1288.179963][ T5845] usb 3-1: Using ep0 maxpacket: 8 [ 1288.230592][T21399] CPU: 1 UID: 0 PID: 21399 Comm: syz.1.5326 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 1288.230624][T21399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1288.230639][T21399] Call Trace: [ 1288.230648][T21399] [ 1288.230659][T21399] dump_stack_lvl+0x189/0x250 [ 1288.230690][T21399] ? __pfx____ratelimit+0x10/0x10 [ 1288.230724][T21399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1288.230751][T21399] ? __pfx__printk+0x10/0x10 [ 1288.230795][T21399] should_fail_ex+0x414/0x560 [ 1288.230832][T21399] strncpy_from_user+0x36/0x290 [ 1288.230866][T21399] path_removexattrat+0xe0/0x690 [ 1288.230891][T21399] ? __pfx_path_removexattrat+0x10/0x10 [ 1288.230912][T21399] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1288.230935][T21399] ? __pfx_vfs_write+0x10/0x10 [ 1288.231000][T21399] __ia32_sys_removexattr+0x61/0x70 [ 1288.231034][T21399] __do_fast_syscall_32+0xb6/0x2b0 [ 1288.231057][T21399] ? lockdep_hardirqs_on+0x9c/0x150 [ 1288.231095][T21399] do_fast_syscall_32+0x34/0x80 [ 1288.231118][T21399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1288.231144][T21399] RIP: 0023:0xf704e539 [ 1288.231162][T21399] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1288.231181][T21399] RSP: 002b:00000000f503e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000eb [ 1288.231203][T21399] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000080000140 [ 1288.231218][T21399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1288.231231][T21399] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1288.231245][T21399] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1288.231258][T21399] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1288.231288][T21399] [ 1288.273139][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.457583][ T5845] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1288.471561][ T5845] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1288.481803][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.518849][ T5845] usb 3-1: config 0 descriptor?? [ 1288.917174][T21417] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5330'. [ 1288.981552][ T5845] hid-rmi 0003:06CB:81A7.00CC: unknown main item tag 0x0 [ 1289.005720][ T5845] hid-rmi 0003:06CB:81A7.00CC: unknown main item tag 0x0 [ 1289.028058][ T5845] hid-rmi 0003:06CB:81A7.00CC: unknown main item tag 0x0 [ 1289.049251][ T5845] hid-rmi 0003:06CB:81A7.00CC: unknown main item tag 0x0 [ 1289.085025][ T5845] hid-rmi 0003:06CB:81A7.00CC: unknown main item tag 0x0 [ 1289.090738][T20823] usb 4-1: USB disconnect, device number 101 [ 1289.093623][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1289.156576][ T5845] hid-rmi 0003:06CB:81A7.00CC: unknown main item tag 0x0 [ 1289.222006][ T5845] hid-rmi 0003:06CB:81A7.00CC: unknown main item tag 0x0 [ 1289.271084][ T5845] hid-rmi 0003:06CB:81A7.00CC: unknown main item tag 0x0 [ 1289.339880][ T5845] hid-rmi 0003:06CB:81A7.00CC: unknown main item tag 0x0 [ 1289.450207][ T5845] hid-rmi 0003:06CB:81A7.00CC: unbalanced collection at end of report description [ 1289.508503][ T5845] hid-rmi 0003:06CB:81A7.00CC: parse failed [ 1289.533917][ T5845] hid-rmi 0003:06CB:81A7.00CC: probe with driver hid-rmi failed with error -22 [ 1289.550447][T21427] fuse: Bad value for 'group_id' [ 1289.571350][T21430] ptrace attach of "./syz-executor exec"[13735] was attempted by "./syz-executor exec"[21430] [ 1289.573616][ T5845] usb 3-1: USB disconnect, device number 24 [ 1289.589822][T21427] fuse: Bad value for 'group_id' [ 1289.770732][T21424] netlink: 'syz.0.5331': attribute type 10 has an invalid length. [ 1289.778641][T21424] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5331'. [ 1290.641962][T21442] can: request_module (can-proto-0) failed. [ 1290.753108][T20823] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1290.902081][T21454] FAULT_INJECTION: forcing a failure. [ 1290.902081][T21454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1290.920448][T20823] usb 3-1: Using ep0 maxpacket: 16 [ 1290.968382][T20823] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1290.978421][T21454] CPU: 1 UID: 0 PID: 21454 Comm: syz.0.5337 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 1290.978453][T21454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1290.978468][T21454] Call Trace: [ 1290.978476][T21454] [ 1290.978487][T21454] dump_stack_lvl+0x189/0x250 [ 1290.978520][T21454] ? __pfx____ratelimit+0x10/0x10 [ 1290.978555][T21454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1290.978582][T21454] ? __pfx__printk+0x10/0x10 [ 1290.978613][T21454] ? __might_fault+0xb0/0x130 [ 1290.978652][T21454] should_fail_ex+0x414/0x560 [ 1290.978689][T21454] _copy_from_user+0x2d/0xb0 [ 1290.978715][T21454] get_compat_msghdr+0xad/0x4a0 [ 1290.978751][T21454] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1290.978783][T21454] ? rcu_is_watching+0x15/0xb0 [ 1290.978808][T21454] ? ___sys_recvmsg+0x1c4/0x510 [ 1290.978845][T21454] ___sys_recvmsg+0x17f/0x510 [ 1290.978881][T21454] ? __pfx____sys_recvmsg+0x10/0x10 [ 1290.978938][T21454] ? __fget_files+0x3a0/0x420 [ 1290.978979][T21454] do_recvmmsg+0x36a/0x770 [ 1290.979017][T21454] ? __pfx_do_recvmmsg+0x10/0x10 [ 1290.979061][T21454] ? __pfx_vfs_write+0x10/0x10 [ 1290.979103][T21454] __sys_recvmmsg+0x19d/0x280 [ 1290.979135][T21454] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1290.979162][T21454] ? ksys_write+0x22a/0x250 [ 1290.979195][T21454] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1290.979231][T21454] __do_fast_syscall_32+0xb6/0x2b0 [ 1290.979253][T21454] ? lockdep_hardirqs_on+0x9c/0x150 [ 1290.979292][T21454] do_fast_syscall_32+0x34/0x80 [ 1290.979315][T21454] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1290.979350][T21454] RIP: 0023:0xf710e539 [ 1290.979369][T21454] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1290.979388][T21454] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1290.979412][T21454] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080004c00 [ 1290.979428][T21454] RDX: 0000000004000032 RSI: 0000000040000021 RDI: 0000000000000000 [ 1290.979443][T21454] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1290.979456][T21454] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1290.979469][T21454] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1290.979501][T21454] [ 1291.209844][T20823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.217967][T20823] usb 3-1: Product: syz [ 1291.223457][T20823] usb 3-1: Manufacturer: syz [ 1291.228093][T20823] usb 3-1: SerialNumber: syz [ 1291.247222][T20823] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1291.254212][T20823] r8152-cfgselector 3-1: config 0 descriptor?? [ 1291.650084][ T5845] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1291.803614][ T5845] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1291.824423][ T5845] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1291.872691][ T5845] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1291.888505][ T5845] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1291.916150][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.043524][T21465] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1292.297952][T21482] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5344'. [ 1292.961478][T21485] syz.3.5344 (21485): drop_caches: 2 [ 1293.084254][ T5845] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1293.096042][ T5845] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input279 [ 1293.419482][T20823] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1293.520732][T20823] r8152-cfgselector 3-1: bad CDC descriptors [ 1293.621848][T20823] r8152-cfgselector 3-1: USB disconnect, device number 25 [ 1294.000104][T20823] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1294.192380][T20823] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1294.210583][T20823] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1294.230511][T20823] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1294.245239][T20823] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1294.290404][T20823] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1294.313297][T20823] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1294.338456][T20823] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1294.477607][T20823] usb 3-1: Product: syz [ 1294.530792][T20823] usb 3-1: Manufacturer: syz [ 1294.565699][T20823] cdc_wdm 3-1:1.0: skipping garbage [ 1294.591392][T20823] cdc_wdm 3-1:1.0: skipping garbage [ 1294.618437][T20822] usb 2-1: USB disconnect, device number 16 [ 1294.618545][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1294.642880][T20823] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1294.678607][T20823] cdc_wdm 3-1:1.0: Unknown control protocol [ 1294.790383][ T5845] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1294.827832][ T9] usb 3-1: USB disconnect, device number 26 [ 1294.989987][ T5845] usb 6-1: Using ep0 maxpacket: 32 [ 1295.130874][ T5845] usb 6-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1295.179517][ T5845] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1295.231032][ T5845] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1295.259420][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.332973][T20822] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1295.354719][ T5845] usb 6-1: Product: syz [ 1295.358913][ T5845] usb 6-1: Manufacturer: syz [ 1295.420324][ T5845] usb 6-1: SerialNumber: syz [ 1295.451022][ T5845] usb 6-1: config 0 descriptor?? [ 1295.520627][T20822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.710346][T21521] fuse: Bad value for 'group_id' [ 1295.715398][T21521] fuse: Bad value for 'group_id' [ 1295.723969][T21521] netlink: 'syz.3.5358': attribute type 10 has an invalid length. [ 1295.731960][T21521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5358'. [ 1295.746563][T21521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1295.850867][T20822] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1295.852309][T21507] binder: 21502:21507 ioctl c0306201 80000100 returned -11 [ 1295.945211][T20822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.060746][T20822] usb 2-1: config 0 descriptor?? [ 1296.503555][T21517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.523650][T21517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.501304][ T5845] usb 6-1: USB disconnect, device number 98 [ 1297.799870][ T9] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1297.977871][ T9] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1297.999806][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1298.033873][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1298.060103][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1298.069211][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.112004][T20822] usbhid 2-1:0.0: can't add hid device: -71 [ 1298.120641][T21538] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1298.155236][T20822] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1298.186422][T20822] usb 2-1: USB disconnect, device number 17 [ 1298.719970][T21553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5368'. [ 1299.010279][ T9] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1299.020476][ T9] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input280 [ 1300.133026][T21561] fuse: Bad value for 'group_id' [ 1300.138126][T21561] fuse: Bad value for 'group_id' [ 1300.164173][T21561] netlink: 'syz.0.5370': attribute type 10 has an invalid length. [ 1300.172361][T21561] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5370'. [ 1300.206183][T21561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1300.339910][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.346408][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.780751][ T5845] usb 4-1: USB disconnect, device number 102 [ 1300.786842][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1300.940593][T20822] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1301.128181][T20822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.149859][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1301.150691][T20822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.188346][T20822] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1301.211368][T20822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.238903][T20822] usb 6-1: config 0 descriptor?? [ 1301.319317][ T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1301.343803][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.355154][ T9] usb 2-1: Product: syz [ 1301.375347][ T9] usb 2-1: Manufacturer: syz [ 1301.380245][ T5845] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1301.406460][ T9] usb 2-1: SerialNumber: syz [ 1301.423889][ T9] usb 2-1: config 0 descriptor?? [ 1301.561967][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.573333][ T5845] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1301.589843][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.603736][ T5845] usb 4-1: config 0 descriptor?? [ 1301.976003][T20822] usbhid 6-1:0.0: can't add hid device: -71 [ 1301.983216][T20822] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1302.013841][T20822] usb 6-1: USB disconnect, device number 99 [ 1302.187084][T21575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.221060][T21575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.989975][ T5849] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1303.086348][T21568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.107779][T21568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.136845][ T9] usb 2-1: f81604_read: reg: 200e failed: -EPROTO [ 1303.159927][ T5849] usb 6-1: Using ep0 maxpacket: 8 [ 1303.183470][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.206334][ T9] usb 2-1: USB disconnect, device number 18 [ 1303.219081][ T5849] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1303.235677][ T5849] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1303.245533][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.261092][ T5849] usb 6-1: config 0 descriptor?? [ 1303.329604][ T9] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 1303.395681][ T9] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 1303.693993][ T5849] hid-rmi 0003:06CB:81A7.00CD: unknown main item tag 0x4 [ 1303.707695][ T5849] hid-rmi 0003:06CB:81A7.00CD: unknown main item tag 0x0 [ 1303.715719][ T5849] hid-rmi 0003:06CB:81A7.00CD: unknown main item tag 0x0 [ 1303.723944][ T5849] hid-rmi 0003:06CB:81A7.00CD: unknown main item tag 0x0 [ 1303.733478][ T5849] hid-rmi 0003:06CB:81A7.00CD: unbalanced collection at end of report description [ 1303.749542][ T5849] hid-rmi 0003:06CB:81A7.00CD: parse failed [ 1303.757713][ T5849] hid-rmi 0003:06CB:81A7.00CD: probe with driver hid-rmi failed with error -22 [ 1303.986752][T21599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5384'. [ 1303.995826][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1304.096079][ T5845] usbhid 4-1:0.0: can't add hid device: -71 [ 1304.126053][ T5845] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1304.164005][ T9] usb 3-1: config 104 has an invalid interface number: 88 but max is 0 [ 1304.175653][ T5845] usb 4-1: USB disconnect, device number 103 [ 1304.185489][ T9] usb 3-1: config 104 has no interface number 0 [ 1304.196884][ T9] usb 3-1: config 104 interface 88 altsetting 250 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1304.212370][ T9] usb 3-1: config 104 interface 88 altsetting 250 has a duplicate endpoint with address 0x4, skipping [ 1304.225149][ T9] usb 3-1: config 104 interface 88 altsetting 250 has a duplicate endpoint with address 0xA, skipping [ 1304.236636][ T9] usb 3-1: config 104 interface 88 altsetting 250 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1304.285789][ T9] usb 3-1: config 104 interface 88 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 1304.310565][ T9] usb 3-1: config 104 interface 88 altsetting 250 has a duplicate endpoint with address 0x6, skipping [ 1304.342687][ T9] usb 3-1: config 104 interface 88 has no altsetting 0 [ 1304.353393][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=11.71 [ 1304.362985][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.378628][ T9] usb 3-1: Product: à ¾ [ 1304.383377][ T9] usb 3-1: Manufacturer: 욪눤걧氉妱ꤨ䠅蛴㛖ì¸â›³ä­„곡出㙨áœâ—›ï•¶îš«k剶븡 [ 1304.397828][ T9] usb 3-1: SerialNumber: Ї [ 1304.517085][T20822] usb 6-1: USB disconnect, device number 100 [ 1304.787622][T21620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1304.951178][T21620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.020497][T20822] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1305.028327][T20823] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1305.078234][ T9] usb 3-1: Found UVC 0.00 device à ¾ (046d:0821) [ 1305.087318][ T9] usb 3-1: No valid video chain found. [ 1305.123186][ T9] usb 3-1: USB disconnect, device number 27 [ 1305.190718][T20822] usb 6-1: Using ep0 maxpacket: 8 [ 1305.196129][T20823] usb 2-1: Using ep0 maxpacket: 32 [ 1305.206221][T20822] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1305.218054][T20823] usb 2-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1305.230817][T20823] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1305.242373][T20822] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1305.252958][T20822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.325205][T20822] usb 6-1: Product: syz [ 1305.346498][T20823] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1305.360657][T20822] usb 6-1: Manufacturer: syz [ 1305.390473][T20822] usb 6-1: SerialNumber: syz [ 1305.401314][T20823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.431705][T20823] usb 2-1: Product: syz [ 1305.437378][T20822] usb 6-1: config 0 descriptor?? [ 1305.444483][T20823] usb 2-1: Manufacturer: syz [ 1305.450777][T20823] usb 2-1: SerialNumber: syz [ 1305.638814][T20822] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1305.654252][T20823] usb 2-1: config 0 descriptor?? [ 1306.126217][T21618] binder: 21610:21618 ioctl c0306201 80000100 returned -11 [ 1306.501808][T21627] FAULT_INJECTION: forcing a failure. [ 1306.501808][T21627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1306.515633][T21627] CPU: 0 UID: 0 PID: 21627 Comm: syz.3.5393 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 1306.515676][T21627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1306.515690][T21627] Call Trace: [ 1306.515699][T21627] [ 1306.515709][T21627] dump_stack_lvl+0x189/0x250 [ 1306.515740][T21627] ? __pfx____ratelimit+0x10/0x10 [ 1306.515783][T21627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1306.515809][T21627] ? __pfx__printk+0x10/0x10 [ 1306.515840][T21627] ? __might_fault+0xb0/0x130 [ 1306.515877][T21627] should_fail_ex+0x414/0x560 [ 1306.515913][T21627] _copy_from_user+0x2d/0xb0 [ 1306.515939][T21627] get_compat_msghdr+0xad/0x4a0 [ 1306.515974][T21627] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1306.516006][T21627] ? rcu_is_watching+0x15/0xb0 [ 1306.516031][T21627] ? ___sys_recvmsg+0x1c4/0x510 [ 1306.516067][T21627] ___sys_recvmsg+0x17f/0x510 [ 1306.516102][T21627] ? __pfx____sys_recvmsg+0x10/0x10 [ 1306.516174][T21627] ? __fget_files+0x3a0/0x420 [ 1306.516216][T21627] do_recvmmsg+0x36a/0x770 [ 1306.516255][T21627] ? __pfx_do_recvmmsg+0x10/0x10 [ 1306.516299][T21627] ? __pfx_vfs_write+0x10/0x10 [ 1306.516341][T21627] __sys_recvmmsg+0x19d/0x280 [ 1306.516374][T21627] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1306.516402][T21627] ? ksys_write+0x22a/0x250 [ 1306.516442][T21627] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1306.516478][T21627] __do_fast_syscall_32+0xb6/0x2b0 [ 1306.516501][T21627] ? lockdep_hardirqs_on+0x9c/0x150 [ 1306.516540][T21627] do_fast_syscall_32+0x34/0x80 [ 1306.516563][T21627] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1306.516590][T21627] RIP: 0023:0xf710e539 [ 1306.516609][T21627] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1306.516629][T21627] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1306.516652][T21627] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002440 [ 1306.516668][T21627] RDX: 00000000ffffff67 RSI: 0000000000000000 RDI: 0000000000000000 [ 1306.516681][T21627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1306.516694][T21627] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1306.516708][T21627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1306.516740][T21627] [ 1306.819312][T21629] binder: 21628:21629 ioctl c018620c 80000100 returned -22 [ 1307.410105][ T9] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1307.429988][ T5845] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1307.561730][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.577653][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1307.600835][ T5845] usb 3-1: Using ep0 maxpacket: 32 [ 1307.615834][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.628486][ T5845] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1307.638661][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.672048][T20822] gspca_zc3xx: reg_r err -32 [ 1307.707015][ T5845] usb 3-1: Product: syz [ 1307.712770][ T9] usb 4-1: config 0 descriptor?? [ 1307.760376][ T5845] usb 3-1: Manufacturer: syz [ 1307.843934][ T5845] usb 3-1: SerialNumber: syz [ 1307.858038][ T5845] usb 3-1: config 0 descriptor?? [ 1307.869847][ T5845] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1308.213691][T21632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.232673][T21632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.261034][T20822] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1308.267546][T20822] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 1308.492402][T21634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.556328][T21634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.592569][T20823] usb 2-1: USB disconnect, device number 19 [ 1309.201863][T21650] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5400'. [ 1309.435962][T20823] usb 6-1: USB disconnect, device number 101 [ 1309.448518][ T5845] gspca_topro: reg_r err -32 [ 1309.453692][ T5845] gspca_topro: Sensor soi763a [ 1309.900939][T20823] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1310.060465][T20823] usb 6-1: Using ep0 maxpacket: 8 [ 1310.067479][T20823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.079537][T20823] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1310.096201][T20823] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1310.106366][T20823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.118391][T20823] usb 6-1: config 0 descriptor?? [ 1310.190182][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 1310.199950][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1310.228573][ T9] usb 4-1: USB disconnect, device number 104 [ 1310.298500][T21659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5403'. [ 1310.532561][ T9] usb 3-1: USB disconnect, device number 28 [ 1310.555443][T20823] hid-rmi 0003:06CB:81A7.00CE: unknown main item tag 0x4 [ 1310.570778][T20822] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1310.587597][T20823] hid-rmi 0003:06CB:81A7.00CE: unknown main item tag 0x0 [ 1310.610525][T20823] hid-rmi 0003:06CB:81A7.00CE: unknown main item tag 0x0 [ 1310.627906][T20823] hid-rmi 0003:06CB:81A7.00CE: unknown main item tag 0x0 [ 1310.645878][T20823] hid-rmi 0003:06CB:81A7.00CE: unbalanced collection at end of report description [ 1310.671893][T20823] hid-rmi 0003:06CB:81A7.00CE: parse failed [ 1310.678532][T20823] hid-rmi 0003:06CB:81A7.00CE: probe with driver hid-rmi failed with error -22 [ 1310.742634][T20822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.755717][T20822] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1310.766233][T20822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.786762][T20822] usb 2-1: config 0 descriptor?? [ 1310.824073][ T5845] usb 6-1: USB disconnect, device number 102 [ 1310.989882][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1311.149997][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1311.161262][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1311.169417][ T9] usb 3-1: config 0 has no interface number 0 [ 1311.182055][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1311.191580][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.199610][ T9] usb 3-1: Product: syz [ 1311.206807][ T9] usb 3-1: Manufacturer: syz [ 1311.211490][T20822] keytouch 0003:0926:3333.00CF: fixing up Keytouch IEC report descriptor [ 1311.218640][T20822] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00CF/input/input281 [ 1311.227004][ T9] usb 3-1: SerialNumber: syz [ 1311.251947][ T9] usb 3-1: config 0 descriptor?? [ 1311.261726][ T9] smsc95xx v2.0.0 [ 1311.309068][T20822] keytouch 0003:0926:3333.00CF: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1311.423365][T21661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.453647][T21661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.664960][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1311.680599][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1311.875625][T20822] usb 2-1: USB disconnect, device number 20 [ 1312.059529][T21684] fuse: Bad value for 'group_id' [ 1312.065370][T21684] fuse: Bad value for 'group_id' [ 1312.074178][T21684] netlink: 'syz.3.5412': attribute type 10 has an invalid length. [ 1312.082830][T21684] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5412'. [ 1312.094987][T21684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1312.742476][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1312.754279][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 1312.848546][ T9] usb 3-1: USB disconnect, device number 29 [ 1313.000704][T20824] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1313.162839][T20824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1313.178508][T20824] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1313.206843][T20824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.226652][T20824] usb 2-1: config 0 descriptor?? [ 1313.430238][ T9] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1313.553712][ T30] audit: type=1326 audit(1752233742.288:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21695 comm="syz.5.5417" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f84539 code=0x0 [ 1313.614202][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1313.625242][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1313.648970][T21687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.648966][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1313.663965][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1313.681924][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.691924][T21687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.699791][ T9] usb 4-1: Product: syz [ 1313.704025][ T9] usb 4-1: Manufacturer: syz [ 1313.729832][ T9] usb 4-1: SerialNumber: syz [ 1314.174423][ T9] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 1314.194807][ T9] usb 4-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1314.281059][ T9] usb 4-1: USB disconnect, device number 105 [ 1314.856200][T21715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5423'. [ 1314.882428][T21717] binder: 21716:21717 ioctl c018620c 80000100 returned -1 [ 1314.891483][T21717] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5424'. [ 1315.447712][T21721] fuse: Bad value for 'group_id' [ 1315.462753][T21721] fuse: Bad value for 'group_id' [ 1315.472902][T21721] netlink: 'syz.3.5425': attribute type 10 has an invalid length. [ 1315.481547][T21721] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5425'. [ 1315.489832][ T9] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1315.661062][ T9] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1315.678367][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.690023][ T5845] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1315.710418][ T9] usb 6-1: Product: syz [ 1315.715328][ T9] usb 6-1: Manufacturer: syz [ 1315.737896][ T9] usb 6-1: SerialNumber: syz [ 1315.758508][ T9] usb 6-1: config 0 descriptor?? [ 1315.907071][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1315.913587][ T5845] usb 3-1: Using ep0 maxpacket: 16 [ 1315.927227][ T5845] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.937769][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1315.978790][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1315.985552][T20824] usbhid 2-1:0.0: can't add hid device: -71 [ 1316.021577][ T5845] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1316.046037][ T5845] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1316.046209][T20824] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1316.085145][ T5845] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1316.104998][ T5845] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1316.120927][T20824] usb 2-1: USB disconnect, device number 21 [ 1316.133811][ T5845] usb 3-1: Manufacturer: syz [ 1316.161914][ T5845] usb 3-1: config 0 descriptor?? [ 1316.480077][ T5845] rc_core: IR keymap rc-hauppauge not found [ 1316.496565][ T5845] Registered IR keymap rc-empty [ 1316.500782][T20824] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1316.514012][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1316.521692][ T10] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1316.560223][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1316.584726][ T5845] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1316.641341][ T5845] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input282 [ 1316.661522][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1316.669660][T20824] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1316.684976][T20824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.690014][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1316.701103][T20824] usb 2-1: Product: syz [ 1316.705933][T20824] usb 2-1: Manufacturer: syz [ 1316.711811][T20824] usb 2-1: SerialNumber: syz [ 1316.726288][T20824] usb 2-1: config 0 descriptor?? [ 1316.740834][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1316.755982][ T10] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1316.770796][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1316.778174][ T10] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1316.795355][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1316.802614][ T10] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1316.820720][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1316.834717][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.843109][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1316.861920][T21730] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1316.879982][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1316.899944][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1316.924164][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1316.960207][ T5845] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1316.960986][T20824] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1316.983489][ T5845] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1317.009873][ T5845] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1317.045995][T21735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5430'. [ 1317.055616][T20822] usb 3-1: USB disconnect, device number 30 [ 1317.156490][T21728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.168789][T21728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.449236][ T30] audit: type=1326 audit(1752233746.178:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21736 comm="syz.0.5431" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf710e539 code=0x0 [ 1317.702579][ T10] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1317.731366][ T10] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input283 [ 1317.847127][ T10] usb 6-1: USB disconnect, device number 103 [ 1318.300516][T20822] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1318.490715][T20822] usb 3-1: Using ep0 maxpacket: 32 [ 1318.497666][T20822] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 1318.528360][T20822] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1318.543473][T20822] usb 3-1: can't read configurations, error -61 [ 1318.686974][T20822] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1318.872913][T20822] usb 3-1: Using ep0 maxpacket: 32 [ 1318.893965][T20822] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 1318.922002][T20822] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1318.938505][T20822] usb 3-1: can't read configurations, error -61 [ 1318.947704][T20822] usb usb3-port1: attempt power cycle [ 1319.219529][T20824] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1319.248307][T20824] usb 2-1: USB disconnect, device number 22 [ 1319.300726][T20822] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1319.320575][T20823] usb 4-1: USB disconnect, device number 106 [ 1319.320607][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1319.353823][T20822] usb 3-1: Using ep0 maxpacket: 32 [ 1319.367026][T20822] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 1319.389019][T20822] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1319.405280][T20822] usb 3-1: can't read configurations, error -61 [ 1319.550683][T20822] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1319.571371][T20822] usb 3-1: Using ep0 maxpacket: 32 [ 1319.577380][T20822] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 1319.587632][T20822] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1319.595943][T20822] usb 3-1: can't read configurations, error -61 [ 1319.604387][T20822] usb usb3-port1: unable to enumerate USB device [ 1319.730541][T20823] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1319.896530][T20823] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1319.906218][T20823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.916121][T20823] usb 4-1: Product: syz [ 1319.921107][T20823] usb 4-1: Manufacturer: syz [ 1319.925748][T20823] usb 4-1: SerialNumber: syz [ 1319.933605][T20823] usb 4-1: config 0 descriptor?? [ 1320.051271][T20822] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1320.223990][T20822] usb 2-1: Using ep0 maxpacket: 8 [ 1320.234988][T20822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1320.249587][T20822] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1320.266978][T20822] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1320.277145][T20822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.289841][ T10] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1320.306958][T20822] usb 2-1: config 0 descriptor?? [ 1320.449990][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1320.466350][ T10] usb 6-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1320.489908][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1320.524291][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1320.539500][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.563907][ T10] usb 6-1: Product: syz [ 1320.580018][ T10] usb 6-1: Manufacturer: syz [ 1320.584711][ T10] usb 6-1: SerialNumber: syz [ 1320.608044][ T10] usb 6-1: config 0 descriptor?? [ 1320.729361][T20822] hid-rmi 0003:06CB:81A7.00D0: unknown main item tag 0x4 [ 1320.754182][T20822] hid-rmi 0003:06CB:81A7.00D0: unknown main item tag 0x0 [ 1320.775864][T20822] hid-rmi 0003:06CB:81A7.00D0: unknown main item tag 0x0 [ 1320.796241][T20822] hid-rmi 0003:06CB:81A7.00D0: unknown main item tag 0x0 [ 1320.806949][T20822] hid-rmi 0003:06CB:81A7.00D0: unbalanced collection at end of report description [ 1320.818438][T20822] hid-rmi 0003:06CB:81A7.00D0: parse failed [ 1320.857244][T20822] hid-rmi 0003:06CB:81A7.00D0: probe with driver hid-rmi failed with error -22 [ 1321.013996][ T9] usb 2-1: USB disconnect, device number 23 [ 1321.151925][T21770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5442'. [ 1321.166737][T20823] usb 4-1: f81604_read: reg: 100e failed: -EPROTO [ 1321.192436][T20823] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 1321.214274][T20823] usb 4-1: USB disconnect, device number 107 [ 1321.238429][T20823] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 1321.298951][ T5512] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 1321.334372][T20823] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 1321.987043][T21795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1322.077788][ T30] audit: type=1326 audit(1752233750.808:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21786 comm="syz.1.5446" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e539 code=0x0 [ 1322.270525][T20823] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1322.454805][T20823] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1322.499046][T20823] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1322.524564][T20823] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1322.551471][T20823] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1322.562721][T20823] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1322.581513][T20823] usb 3-1: Manufacturer: syz [ 1322.592767][T20823] usb 3-1: SerialNumber: syz [ 1322.829465][T20823] yealink 3-1:36.0: invalid payload size 0, expected 16 [ 1322.877216][T20823] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input284 [ 1322.977852][ T10] usb 6-1: USB disconnect, device number 104 [ 1323.002568][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1323.009668][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1323.017521][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1323.025229][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1323.032901][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1323.040598][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1323.047634][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1323.055469][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1323.062317][ C1] yealink 3-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1323.130538][T20823] usb 3-1: USB disconnect, device number 35 [ 1323.839871][ T10] usb 6-1: new full-speed USB device number 105 using dummy_hcd [ 1324.087356][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1324.120701][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1324.260503][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1324.360400][T20823] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1324.406732][ T10] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1324.426330][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.443586][ T10] usb 6-1: Product: syz [ 1324.491165][ T10] usb 6-1: Manufacturer: syz [ 1324.498527][ T10] usb 6-1: SerialNumber: syz [ 1324.591924][ T10] usb 6-1: config 0 descriptor?? [ 1324.615608][T20823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1324.660434][T20823] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1324.750781][T21825] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1324.761568][T21825] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1324.812027][ T10] usb 6-1: ucan: probing device on interface #0 [ 1324.827623][T20823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1324.912422][T20823] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1324.922315][T20823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.932440][T20823] usb 3-1: Product: syz [ 1324.936652][T20823] usb 3-1: Manufacturer: syz [ 1324.975817][T20823] usb 3-1: SerialNumber: syz [ 1324.999936][ T9] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1325.020794][T20823] usb 3-1: config 0 descriptor?? [ 1325.049464][T21833] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1325.058170][T21833] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1325.068827][T20823] usb 3-1: ucan: probing device on interface #0 [ 1325.431625][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1325.442509][ T9] usb 4-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1325.482016][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1325.587487][T21847] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5455'. [ 1325.620045][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1325.631973][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.645538][ T9] usb 4-1: Product: syz [ 1325.688186][ T9] usb 4-1: Manufacturer: syz [ 1325.720807][ T9] usb 4-1: SerialNumber: syz [ 1325.777871][ T9] usb 4-1: config 0 descriptor?? [ 1325.850256][ T10] usb 6-1: ucan: could not read protocol version, ret=-110 [ 1325.857695][ T10] usb 6-1: ucan: probe failed; try to update the device firmware [ 1326.225014][T20823] usb 3-1: ucan: could not read protocol version, ret=-110 [ 1326.235218][T20823] usb 3-1: ucan: probe failed; try to update the device firmware [ 1326.516063][T21843] binder: 21839:21843 ioctl c0306201 80000100 returned -11 [ 1326.542158][ T10] usb 6-1: USB disconnect, device number 105 [ 1327.100853][T20823] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1327.143440][ T10] usb 3-1: USB disconnect, device number 36 [ 1327.150664][T20822] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1327.254249][T20823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.266783][T20823] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1327.295699][T20823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.314160][T20822] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1327.332527][T20822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.346829][T20822] usb 2-1: Product: syz [ 1327.352118][T20823] usb 6-1: config 0 descriptor?? [ 1327.368573][T20822] usb 2-1: Manufacturer: syz [ 1327.389156][T20822] usb 2-1: SerialNumber: syz [ 1327.421177][T20822] usb 2-1: config 0 descriptor?? [ 1327.590725][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1327.769956][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1327.790085][ T9] usb 4-1: USB disconnect, device number 108 [ 1327.799443][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1327.820845][ T10] usb 3-1: config 0 has no interface number 0 [ 1327.832885][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1327.844293][T20822] airspy 2-1:0.0: Board ID: 00 [ 1327.849197][T20822] airspy 2-1:0.0: Firmware version: [ 1327.852740][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.872696][ T10] usb 3-1: Product: syz [ 1327.883155][ T10] usb 3-1: Manufacturer: syz [ 1327.887807][ T10] usb 3-1: SerialNumber: syz [ 1327.899064][ T10] usb 3-1: config 0 descriptor?? [ 1327.914943][ T10] smsc95xx v2.0.0 [ 1327.983553][T21859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.993305][T21859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.210139][ T9] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1328.314975][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1328.326042][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1328.374964][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1328.382083][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.398007][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1328.411103][ T9] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1328.420233][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.431880][ T9] usb 4-1: config 0 descriptor?? [ 1328.648797][T20822] airspy 2-1:0.0: usb_control_msg() failed -71 request 0f [ 1328.672265][T20822] airspy 2-1:0.0: Registered as swradio24 [ 1328.678101][T20822] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1328.693269][T20822] usb 2-1: USB disconnect, device number 24 [ 1328.865699][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 1328.886248][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1328.906538][ T9] usb 4-1: USB disconnect, device number 109 [ 1329.141137][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1329.153104][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 1329.165400][ T10] usb 3-1: USB disconnect, device number 37 [ 1329.835750][T21877] fuse: Bad value for 'group_id' [ 1329.841613][T21877] fuse: Bad value for 'group_id' [ 1329.854099][T21877] netlink: 'syz.3.5466': attribute type 10 has an invalid length. [ 1329.862752][T21877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5466'. [ 1329.875302][T21877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.990463][T20823] usbhid 6-1:0.0: can't add hid device: -71 [ 1330.023062][T20823] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1330.044182][T20823] usb 6-1: USB disconnect, device number 106 [ 1330.512943][T20822] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1330.741679][T21888] fuse: Bad value for 'group_id' [ 1330.746698][T21888] fuse: Bad value for 'group_id' [ 1330.757088][T21888] netlink: 'syz.1.5469': attribute type 10 has an invalid length. [ 1330.765738][T21888] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5469'. [ 1330.777721][T21888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1331.140514][T20822] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1331.200756][T20822] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1331.213601][T20822] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1331.252430][T20822] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1331.262559][T20823] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1331.283298][T20822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.408202][T21880] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1331.440324][T20823] usb 6-1: Using ep0 maxpacket: 32 [ 1331.465701][T20823] usb 6-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1331.594303][T20823] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1331.710627][T20823] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1331.773264][T20823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.822861][T20823] usb 6-1: Product: syz [ 1331.834985][T20823] usb 6-1: Manufacturer: syz [ 1331.855181][T20823] usb 6-1: SerialNumber: syz [ 1331.875976][T20823] usb 6-1: config 0 descriptor?? [ 1332.049835][ T10] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1332.260051][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1332.271977][T21890] binder: 21885:21890 ioctl c0306201 80000100 returned -11 [ 1332.311351][ T5869] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1332.311445][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1332.437833][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1332.483460][ T10] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1332.516988][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.536437][T21901] fuse: Bad value for 'group_id' [ 1332.547593][T21901] fuse: Bad value for 'group_id' [ 1332.553010][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 1332.566300][ T5869] usb 2-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1332.577963][ T5869] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1332.598860][T21901] netlink: 'syz.0.5474': attribute type 10 has an invalid length. [ 1332.607573][T21901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5474'. [ 1332.619514][T21901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1332.634855][ T10] usb 4-1: config 0 descriptor?? [ 1332.652425][ T5869] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1332.743508][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.782988][T20822] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 1332.801282][T20822] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input285 [ 1332.829366][ T5869] usb 2-1: Product: syz [ 1332.853345][ T5869] usb 2-1: Manufacturer: syz [ 1332.887417][T20822] usb 3-1: USB disconnect, device number 38 [ 1332.894160][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1332.904979][ T5869] usb 2-1: SerialNumber: syz [ 1332.976913][ T5869] usb 2-1: config 0 descriptor?? [ 1333.058199][ T10] hid-rmi 0003:06CB:81A7.00D1: unknown main item tag 0x0 [ 1333.263138][T21899] binder: 21896:21899 ioctl c0306201 80000100 returned -11 [ 1333.303362][ T10] hid-rmi 0003:06CB:81A7.00D1: unknown main item tag 0x0 [ 1333.319801][ T10] hid-rmi 0003:06CB:81A7.00D1: unknown main item tag 0x0 [ 1333.452355][T20823] usb 6-1: USB disconnect, device number 107 [ 1333.486681][ T10] hid-rmi 0003:06CB:81A7.00D1: unknown main item tag 0x0 [ 1333.527083][ T10] hid-rmi 0003:06CB:81A7.00D1: unknown main item tag 0x0 [ 1333.563862][ T10] hid-rmi 0003:06CB:81A7.00D1: unknown main item tag 0x0 [ 1333.585526][ T10] hid-rmi 0003:06CB:81A7.00D1: unknown main item tag 0x0 [ 1333.692999][ T10] hid-rmi 0003:06CB:81A7.00D1: unknown main item tag 0x0 [ 1333.719406][ T10] hid-rmi 0003:06CB:81A7.00D1: unknown main item tag 0x0 [ 1333.728382][ T10] hid-rmi 0003:06CB:81A7.00D1: unbalanced collection at end of report description [ 1333.769465][ T10] hid-rmi 0003:06CB:81A7.00D1: parse failed [ 1333.787824][ T10] hid-rmi 0003:06CB:81A7.00D1: probe with driver hid-rmi failed with error -22 [ 1333.887715][T20823] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1333.963454][ T5845] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1334.091026][ T10] usb 4-1: USB disconnect, device number 110 [ 1334.146163][T20823] usb 6-1: Using ep0 maxpacket: 8 [ 1334.158080][T20823] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1334.169251][T20823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.178301][T20823] usb 6-1: Product: syz [ 1334.184525][T20823] usb 6-1: Manufacturer: syz [ 1334.197285][T20823] usb 6-1: SerialNumber: syz [ 1334.241066][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1334.258128][ T5845] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1334.269548][T20823] usb 6-1: config 0 descriptor?? [ 1334.269824][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.360827][ T5845] usb 3-1: config 0 descriptor?? [ 1334.472129][ T10] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1334.705292][T20823] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1334.800049][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1334.807505][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1334.822920][ T5845] keytouch 0003:0926:3333.00D2: fixing up Keytouch IEC report descriptor [ 1334.860334][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1334.880572][ T5845] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.00D2/input/input286 [ 1334.945933][ T10] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1334.960758][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.008119][ T10] usb 4-1: config 0 descriptor?? [ 1335.023151][T21909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.032800][T21909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.118347][ T5869] usb 2-1: USB disconnect, device number 25 [ 1335.178133][ T5845] keytouch 0003:0926:3333.00D2: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1335.375151][ T5869] usb 3-1: USB disconnect, device number 39 [ 1335.522734][T21906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.542669][T21906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.551787][ T10] hid-rmi 0003:06CB:81A7.00D3: unknown main item tag 0x4 [ 1335.590717][ T10] hid-rmi 0003:06CB:81A7.00D3: unknown main item tag 0x0 [ 1335.598197][ T10] hid-rmi 0003:06CB:81A7.00D3: unknown main item tag 0x0 [ 1335.613788][ T10] hid-rmi 0003:06CB:81A7.00D3: unknown main item tag 0x0 [ 1335.621400][ T5845] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1335.632218][ T10] hid-rmi 0003:06CB:81A7.00D3: unbalanced collection at end of report description [ 1335.645722][ T10] hid-rmi 0003:06CB:81A7.00D3: parse failed [ 1335.653474][ T10] hid-rmi 0003:06CB:81A7.00D3: probe with driver hid-rmi failed with error -22 [ 1335.796707][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.812546][ T5845] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1335.822818][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.834068][ T5845] usb 2-1: config 0 descriptor?? [ 1336.188316][T20823] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1336.205502][T20823] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1336.214434][T20823] usb 6-1: media controller created [ 1336.229973][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1336.243486][T20823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1336.318986][T20823] i2c i2c-1: Added multiplexed i2c bus 2 [ 1336.328452][T20823] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 1336.337840][T20823] usb 6-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1336.349023][T20823] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1336.390228][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1336.404236][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1336.416624][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1336.430626][T20823] DVB: Unable to find symbol r820t_attach() [ 1336.430716][ T10] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1336.447230][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.464944][ T10] usb 3-1: config 0 descriptor?? [ 1336.465151][T21919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.511336][T21919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.541532][ T9] usb 4-1: USB disconnect, device number 111 [ 1336.974773][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1336.999419][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1337.038761][ T10] usb 3-1: USB disconnect, device number 40 [ 1337.229291][T21937] fuse: Bad value for 'group_id' [ 1337.293778][T21937] fuse: Bad value for 'group_id' [ 1337.303174][T21944] netlink: 'syz.0.5485': attribute type 10 has an invalid length. [ 1337.330659][T21944] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5485'. [ 1337.347090][T21944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1337.370495][T20823] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 1337.535219][T20823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1337.579167][T20823] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1337.605896][ T5869] usb 6-1: USB disconnect, device number 108 [ 1337.626552][T20823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1337.687643][T20823] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1337.697619][T20823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.711192][T20823] usb 4-1: Product: syz [ 1337.724955][T20823] usb 4-1: Manufacturer: syz [ 1337.746233][T20823] usb 4-1: SerialNumber: syz [ 1337.779039][T20823] usb 4-1: config 0 descriptor?? [ 1337.811459][T21943] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1337.821198][T21943] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1337.832251][T20823] usb 4-1: ucan: probing device on interface #0 [ 1338.080867][ T5869] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1338.139837][ T10] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1338.243165][ T5869] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1338.263436][ T5869] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1338.278401][ T5869] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1338.291112][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1338.297448][ T5869] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1338.308329][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.317839][ T10] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1338.327581][ T10] usb 6-1: config 0 has no interface number 0 [ 1338.369279][T21951] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1338.389461][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1338.404063][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.415900][ T10] usb 6-1: Product: syz [ 1338.427888][ T5845] usbhid 2-1:0.0: can't add hid device: -71 [ 1338.435422][ T10] usb 6-1: Manufacturer: syz [ 1338.465635][ T10] usb 6-1: SerialNumber: syz [ 1338.471202][ T5845] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1338.536933][ T10] usb 6-1: config 0 descriptor?? [ 1338.549336][ T5845] usb 2-1: USB disconnect, device number 26 [ 1338.562089][ T10] smsc95xx v2.0.0 [ 1338.891274][T20823] usb 4-1: ucan: could not read protocol version, ret=-110 [ 1338.905521][T20823] usb 4-1: ucan: probe failed; try to update the device firmware [ 1338.970596][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1338.981739][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1339.012034][ T5845] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1339.204188][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1339.221485][ T5845] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1339.247994][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.317745][ T5845] usb 2-1: config 0 descriptor?? [ 1339.742491][ T5869] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 1339.761628][ T5845] keytouch 0003:0926:3333.00D4: fixing up Keytouch IEC report descriptor [ 1339.762000][ T5869] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input287 [ 1339.802047][ T5845] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00D4/input/input288 [ 1339.815790][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1339.839039][ T10] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1339.888424][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1339.898424][ T5869] usb 3-1: USB disconnect, device number 41 [ 1339.987662][ T9] usb 4-1: USB disconnect, device number 112 [ 1340.001437][T21955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.014262][T21955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.031381][ T10] usb 6-1: USB disconnect, device number 109 [ 1340.178965][ T5845] keytouch 0003:0926:3333.00D4: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1340.459914][ T9] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1340.495237][ T5869] usb 2-1: USB disconnect, device number 27 [ 1340.645750][ T9] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.688623][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1340.705017][ T9] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1340.718395][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1340.731689][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.759957][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1340.793164][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1340.805124][ T9] usb 4-1: invalid MIDI out EP 0 [ 1340.810398][ T5845] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1340.930188][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1340.953372][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1340.967393][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1340.980383][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1340.997962][ T9] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1341.014491][T21959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.014798][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1341.032295][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.036655][T21959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.050991][ T5845] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1341.071104][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.079437][ T5869] usb 4-1: USB disconnect, device number 113 [ 1341.096168][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.115674][ T5845] usb 6-1: config 0 descriptor?? [ 1341.130333][ T10] usb 3-1: config 0 descriptor?? [ 1341.156958][T21964] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1341.168519][ T10] hub 3-1:0.0: USB hub found [ 1341.371394][ T10] hub 3-1:0.0: 2 ports detected [ 1341.532333][ T5845] keytouch 0003:0926:3333.00D5: fixing up Keytouch IEC report descriptor [ 1341.546936][ T5845] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.00D5/input/input289 [ 1341.640424][ T5845] keytouch 0003:0926:3333.00D5: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1341.754486][T21962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.770361][T21962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.105843][T21975] fuse: Bad value for 'group_id' [ 1342.111924][T21975] fuse: Bad value for 'group_id' [ 1342.126109][T21975] netlink: 'syz.3.5496': attribute type 10 has an invalid length. [ 1342.134610][T21975] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5496'. [ 1342.225014][ T5869] usb 6-1: USB disconnect, device number 110 [ 1342.580506][T20823] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1342.629949][ T5845] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1342.730437][T20823] usb 2-1: Using ep0 maxpacket: 8 [ 1342.737426][T20823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.749560][T20823] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1342.763345][T20823] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1342.774540][T20823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.786345][T20823] usb 2-1: config 0 descriptor?? [ 1342.805343][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.839926][ T5845] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1342.890130][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.910057][ T5845] usb 4-1: config 0 descriptor?? [ 1343.223084][T20823] usbhid 2-1:0.0: can't add hid device: -71 [ 1343.237215][T20823] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1343.266524][T20823] usb 2-1: USB disconnect, device number 28 [ 1343.322895][ T5869] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1343.482192][ T5869] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1343.498818][ T5869] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1343.518560][ T5869] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1343.541788][ T5869] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1343.548911][T21982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.564048][T21982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.578018][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.687857][T21986] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1344.171693][ T9] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 1344.720723][T20823] usb 3-1: USB disconnect, device number 42 [ 1345.112790][ T5869] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 1345.129384][ T5869] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input290 [ 1345.200573][T20823] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1345.358487][ T5869] usb 6-1: USB disconnect, device number 111 [ 1345.358689][ C1] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1345.406589][ T5845] usbhid 4-1:0.0: can't add hid device: -71 [ 1345.540007][T20823] usb 3-1: Using ep0 maxpacket: 32 [ 1345.551905][ T5845] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1345.558833][T20823] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1345.595527][T20823] usb 3-1: config 0 has no interface number 0 [ 1345.600156][ T5845] usb 4-1: USB disconnect, device number 114 [ 1345.629589][T20823] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1345.718665][T20823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.827200][T20823] usb 3-1: Product: syz [ 1345.850978][T20823] usb 3-1: Manufacturer: syz [ 1345.855748][T20823] usb 3-1: SerialNumber: syz [ 1345.864971][T20823] usb 3-1: config 0 descriptor?? [ 1345.876163][T20823] smsc95xx v2.0.0 [ 1346.304047][T20823] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1346.344932][T20823] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1346.820067][ T5845] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1346.908197][ T5869] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1347.117475][ T5845] usb 4-1: Using ep0 maxpacket: 8 [ 1347.123091][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.134843][ T5869] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1347.153419][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.169587][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.177546][ T5869] usb 6-1: config 0 descriptor?? [ 1347.185833][ T5845] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1347.228436][T20823] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1347.245854][T20823] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 1347.275331][ T5845] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1347.297670][T20823] usb 3-1: USB disconnect, device number 43 [ 1347.327038][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.401671][ T5845] usb 4-1: config 0 descriptor?? [ 1347.438465][T22031] fuse: Bad value for 'group_id' [ 1347.447650][T22031] fuse: Bad value for 'group_id' [ 1347.479340][T22031] netlink: 'syz.1.5509': attribute type 10 has an invalid length. [ 1347.498138][T22031] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5509'. [ 1347.517165][T22031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1347.676096][ T5869] keytouch 0003:0926:3333.00D6: fixing up Keytouch IEC report descriptor [ 1347.736112][T22034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5513'. [ 1347.755813][ T5869] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.00D6/input/input291 [ 1347.818699][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 1347.828572][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 1347.852574][ T5845] usbhid 4-1:0.0: can't add hid device: -71 [ 1347.858641][ T5845] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1347.888572][T22025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.911756][ T5845] usb 4-1: USB disconnect, device number 115 [ 1347.955308][T22025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.017808][ T5869] keytouch 0003:0926:3333.00D6: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1348.219888][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1348.391705][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1348.403204][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1348.424701][ T5869] usb 6-1: USB disconnect, device number 112 [ 1348.429772][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1348.463441][ T9] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1348.482191][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.501074][ T9] usb 3-1: config 0 descriptor?? [ 1348.700062][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1348.719959][ T5845] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1348.850105][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1348.856691][ T10] usb 2-1: no configurations [ 1348.861725][ T10] usb 2-1: can't read configurations, error -22 [ 1348.883677][ T5845] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1348.895729][ T5845] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1348.906894][ T5845] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1348.918297][ T5845] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1348.927493][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.941925][T22043] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1348.990736][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1349.169918][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1349.180450][ T10] usb 2-1: no configurations [ 1349.185187][ T10] usb 2-1: can't read configurations, error -22 [ 1349.195314][ T10] usb usb2-port1: attempt power cycle [ 1349.209280][T22050] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1349.209280][T22050] program syz.5.5519 not setting count and/or reply_len properly [ 1349.531185][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1349.537600][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1349.549138][ T9] usb 3-1: USB disconnect, device number 44 [ 1349.587890][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1349.624889][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1349.638978][ T10] usb 2-1: no configurations [ 1349.644669][ T10] usb 2-1: can't read configurations, error -22 [ 1349.783990][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1349.820704][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1349.827149][ T10] usb 2-1: no configurations [ 1349.832053][ T10] usb 2-1: can't read configurations, error -22 [ 1349.858003][ T10] usb usb2-port1: unable to enumerate USB device [ 1350.360544][T20823] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1350.391499][ T5845] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1350.413700][ T5845] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input292 [ 1350.519913][T20823] usb 3-1: Using ep0 maxpacket: 32 [ 1350.536565][T20823] usb 3-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1350.548176][T20823] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1350.559633][ T5845] usb 4-1: USB disconnect, device number 116 [ 1350.565803][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1350.605365][T20823] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1350.633854][T20823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.701589][T20823] usb 3-1: Product: syz [ 1350.766590][T20823] usb 3-1: Manufacturer: syz [ 1350.787258][T20823] usb 3-1: SerialNumber: syz [ 1350.832271][T20823] usb 3-1: config 0 descriptor?? [ 1351.085056][T22067] binder: 22063:22067 ioctl c0306201 80000100 returned -11 [ 1351.699881][ T10] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1351.932238][ T10] usb 4-1: config 0 has an invalid descriptor of length 150, skipping remainder of the config [ 1351.947446][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1351.971517][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1351.981709][ T10] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1351.990084][ T10] usb 4-1: Manufacturer: syz [ 1352.010866][ T10] usb 4-1: config 0 descriptor?? [ 1352.023278][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1352.039809][ T5845] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1352.205331][ T5845] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1352.227925][T22078] fuse: Bad value for 'group_id' [ 1352.234661][T22078] fuse: Bad value for 'group_id' [ 1352.243668][T22078] netlink: 'syz.1.5526': attribute type 10 has an invalid length. [ 1352.266579][T22078] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5526'. [ 1352.303326][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.359915][ T5845] usb 6-1: Product: syz [ 1352.372781][ T5845] usb 6-1: Manufacturer: syz [ 1352.387690][ T5845] usb 6-1: SerialNumber: syz [ 1352.498142][ T5845] usb 6-1: config 0 descriptor?? [ 1353.157778][T20823] usb 3-1: USB disconnect, device number 45 [ 1353.405342][T22087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5528'. [ 1353.422853][T22087] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5528'. [ 1353.483129][T22087] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5528'. [ 1353.736180][ T30] audit: type=1326 audit(1752233782.468:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22085 comm="syz.1.5529" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e539 code=0x0 [ 1354.252438][T22080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.310150][T22080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.358847][T22080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.398625][T22080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.454775][ T5845] usb 6-1: f81604_read: reg: 200e failed: -EPROTO [ 1354.476951][ T5845] usb 6-1: USB disconnect, device number 113 [ 1354.517901][ T5845] usb 6-1: f81604_read: reg: 100f failed: -ENODEV [ 1354.618380][ T5512] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 1354.643938][ T5845] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 1354.879849][T20823] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1355.030575][T20823] usb 3-1: Using ep0 maxpacket: 32 [ 1355.037832][T20823] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1355.058957][T20823] usb 3-1: config 0 has no interface number 0 [ 1355.075449][T20823] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1355.088736][T20823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.109375][T20823] usb 3-1: Product: syz [ 1355.120430][T20823] usb 3-1: Manufacturer: syz [ 1355.131856][T20823] usb 3-1: SerialNumber: syz [ 1355.164888][T20823] usb 3-1: config 0 descriptor?? [ 1355.191776][T20823] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1355.570598][ T5869] usb 6-1: new full-speed USB device number 114 using dummy_hcd [ 1355.785424][T22108] fuse: Bad value for 'group_id' [ 1355.790518][T22108] fuse: Bad value for 'group_id' [ 1355.798784][T22108] netlink: 'syz.1.5533': attribute type 10 has an invalid length. [ 1355.806773][T22108] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5533'. [ 1355.878536][T20823] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1355.960054][ T5845] usb 4-1: USB disconnect, device number 117 [ 1356.009825][T20823] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1356.153478][ T5869] usb 6-1: config 8 has an invalid interface number: 182 but max is 0 [ 1356.162682][ T5869] usb 6-1: config 8 has no interface number 0 [ 1356.176835][ T5869] usb 6-1: config 8 interface 182 has no altsetting 0 [ 1356.285392][ T5869] usb 6-1: New USB device found, idVendor=19d2, idProduct=ff56, bcdDevice=7d.6b [ 1356.295557][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.316128][ T5869] usb 6-1: Product: syz [ 1356.374756][ T5869] usb 6-1: Manufacturer: syz [ 1356.379462][ T5869] usb 6-1: SerialNumber: syz [ 1356.628545][ T5869] option 6-1:8.182: GSM modem (1-port) converter detected [ 1356.681556][ T5869] usb 6-1: USB disconnect, device number 114 [ 1356.707693][ T5869] option 6-1:8.182: device disconnected [ 1357.230819][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1357.231323][ T10] usb 3-1: USB disconnect, device number 46 [ 1357.269075][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1357.320063][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1357.348440][T22116] netlink: 292 bytes leftover after parsing attributes in process `syz.5.5536'. [ 1357.376153][ T10] quatech2 3-1:0.51: device disconnected [ 1357.410132][ T5845] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1357.427124][T22116] netlink: 292 bytes leftover after parsing attributes in process `syz.5.5536'. [ 1357.616909][ T5845] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1357.628373][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.640507][ T5869] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1357.668677][ T5845] usb 2-1: Product: syz [ 1357.677880][ T5845] usb 2-1: Manufacturer: syz [ 1357.699804][ T5845] usb 2-1: SerialNumber: syz [ 1357.719587][ T5845] usb 2-1: config 0 descriptor?? [ 1357.735866][T22123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5538'. [ 1357.835973][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 1357.862297][ T5869] usb 4-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1357.940780][ T5869] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1358.016894][ T5869] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1358.039048][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.052886][ T5869] usb 4-1: Product: syz [ 1358.057150][ T5869] usb 4-1: Manufacturer: syz [ 1358.062591][ T5869] usb 4-1: SerialNumber: syz [ 1358.082331][ T5869] usb 4-1: config 0 descriptor?? [ 1358.270457][T20822] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1358.392756][T22118] binder: 22113:22118 ioctl c0306201 80000100 returned -11 [ 1358.422274][T20822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1358.438002][T20822] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1358.464989][T20822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.559076][T20822] usb 3-1: config 0 descriptor?? [ 1358.947923][ T5845] usb 2-1: f81604_read: reg: 100e failed: -EPROTO [ 1358.977433][ T5845] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 1358.999261][T20822] keytouch 0003:0926:3333.00D7: fixing up Keytouch IEC report descriptor [ 1359.028564][T22135] fuse: Bad value for 'group_id' [ 1359.045810][T22135] fuse: Bad value for 'group_id' [ 1359.059675][T22135] netlink: 'syz.5.5541': attribute type 10 has an invalid length. [ 1359.071728][T20822] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.00D7/input/input293 [ 1359.072171][ T5845] usb 2-1: USB disconnect, device number 33 [ 1359.184555][T22135] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5541'. [ 1359.264599][T22128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.277796][T22128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.319300][T22135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1359.343157][ T5845] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 1359.389258][T20822] keytouch 0003:0926:3333.00D7: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1359.533415][ T5845] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 1359.657672][T20822] usb 3-1: USB disconnect, device number 47 [ 1360.389822][ T5845] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1360.571530][ T5845] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1360.587985][ T5845] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1360.610670][T20822] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1360.615355][ T5845] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1360.664062][ T5869] usb 4-1: USB disconnect, device number 118 [ 1360.805225][ T5845] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1360.841654][T20822] usb 3-1: Using ep0 maxpacket: 8 [ 1360.848815][T20822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1360.861280][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.865924][T20822] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1360.889866][ T5849] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1360.907768][T20822] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1360.919171][T20822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.948303][T20822] usb 3-1: config 0 descriptor?? [ 1360.955788][T22139] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1361.092043][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1361.105805][ T5849] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1361.129777][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.142411][ T5849] usb 6-1: config 0 descriptor?? [ 1361.287315][T22152] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5548'. [ 1361.299447][T22152] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5548'. [ 1361.419859][ T5869] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1361.570563][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 1361.578191][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1361.674336][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1361.717512][ T5869] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1361.729519][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.745930][ T5869] usb 4-1: config 0 descriptor?? [ 1361.763910][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.770581][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.772135][T22143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.829021][T22143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.894667][T22158] fuse: Bad value for 'group_id' [ 1361.900667][T22158] fuse: Bad value for 'group_id' [ 1361.916391][T22158] netlink: 'syz.0.5549': attribute type 10 has an invalid length. [ 1361.925483][T22158] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5549'. [ 1362.029454][T20822] usbhid 3-1:0.0: can't add hid device: -71 [ 1362.037774][T20822] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1362.076537][T20822] usb 3-1: USB disconnect, device number 48 [ 1362.193576][ T5869] usbhid 4-1:0.0: can't add hid device: -71 [ 1362.204180][ T5869] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1362.298208][ T5869] usb 4-1: USB disconnect, device number 119 [ 1362.352252][ T5845] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1362.383531][ T5845] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input294 [ 1362.466327][ T5845] usb 2-1: USB disconnect, device number 34 [ 1362.472420][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1362.570588][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1362.757511][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1362.779402][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.806034][ T10] usb 3-1: Product: syz [ 1362.815993][ T10] usb 3-1: Manufacturer: syz [ 1362.830270][ T10] usb 3-1: SerialNumber: syz [ 1362.839467][ T10] usb 3-1: config 0 descriptor?? [ 1363.189158][ T30] audit: type=1326 audit(1752233791.918:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22163 comm="syz.0.5551" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf710e539 code=0x0 [ 1363.250194][ T5845] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1363.360619][ T5869] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1363.501631][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.519381][ T5845] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1363.520520][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 1363.530947][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.559328][ T5845] usb 2-1: config 0 descriptor?? [ 1363.616766][ T5849] usbhid 6-1:0.0: can't add hid device: -71 [ 1363.626064][ T5849] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1363.707172][ T5849] usb 6-1: USB disconnect, device number 116 [ 1363.800934][ T5869] usb 4-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1363.812956][ T5869] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1363.835691][ T5869] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1363.845839][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.855012][ T5869] usb 4-1: Product: syz [ 1363.861602][ T5869] usb 4-1: Manufacturer: syz [ 1363.866254][ T5869] usb 4-1: SerialNumber: syz [ 1363.876014][ T5869] usb 4-1: config 0 descriptor?? [ 1364.047008][ T5845] keytouch 0003:0926:3333.00D8: fixing up Keytouch IEC report descriptor [ 1364.211227][T22171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.243411][T22171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.267998][ T5845] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00D8/input/input295 [ 1364.298971][T22162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.369120][T22182] fuse: Bad value for 'group_id' [ 1364.374914][T22182] fuse: Bad value for 'group_id' [ 1364.409176][T22180] netlink: 'syz.5.5555': attribute type 10 has an invalid length. [ 1364.417842][T22180] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5555'. [ 1364.442520][ T5845] keytouch 0003:0926:3333.00D8: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1364.491288][T22162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.637244][T22162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.698702][ T5845] usb 2-1: USB disconnect, device number 35 [ 1364.726972][T22162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.774752][ T10] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 1364.841155][ T10] usb 3-1: USB disconnect, device number 49 [ 1364.875272][T22183] fido_id[22183]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1365.076626][ T10] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 1365.172657][ T5512] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 1365.228501][ T10] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 1366.187919][ T5869] usb 4-1: USB disconnect, device number 120 [ 1366.339951][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1366.428433][T22196] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5559'. [ 1366.448738][T22196] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5559'. [ 1366.529318][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1366.555764][ T10] usb 3-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1366.566311][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1366.619506][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1366.647399][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.689528][ T10] usb 3-1: Product: syz [ 1366.739861][ T5845] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1366.806346][ T10] usb 3-1: Manufacturer: syz [ 1366.819040][ T10] usb 3-1: SerialNumber: syz [ 1367.007968][ T10] usb 3-1: config 0 descriptor?? [ 1367.013106][ T5845] usb 6-1: Using ep0 maxpacket: 8 [ 1367.146891][T22209] fuse: Bad value for 'group_id' [ 1367.152913][T22209] fuse: Bad value for 'group_id' [ 1367.171561][T22209] netlink: 'syz.3.5562': attribute type 10 has an invalid length. [ 1367.180435][T22209] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5562'. [ 1367.193136][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1367.242728][T22209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1367.336095][ T5845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1367.380905][ T5845] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1367.409124][T22191] binder: 22186:22191 ioctl c0306201 80000100 returned -11 [ 1367.417931][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.443690][ T5845] usb 6-1: config 0 descriptor?? [ 1368.858716][ T10] usb 3-1: USB disconnect, device number 50 [ 1368.910650][ T5869] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1368.932896][ T5845] usbhid 6-1:0.0: can't add hid device: -71 [ 1368.939181][ T5845] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1368.956815][ T5845] usb 6-1: USB disconnect, device number 117 [ 1369.072901][ T5869] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1369.095956][ T5869] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1369.118424][ T5869] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1369.154416][ T5869] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1369.167505][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.186459][T22218] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1369.349892][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1369.423858][ T5849] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1369.449842][ T5845] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1369.511817][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.529150][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1369.538781][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.549528][ T10] usb 3-1: config 0 descriptor?? [ 1369.595036][ T5849] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1369.604629][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.617303][ T5849] usb 2-1: Product: syz [ 1369.622164][ T5849] usb 2-1: Manufacturer: syz [ 1369.627036][ T5849] usb 2-1: SerialNumber: syz [ 1369.634001][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.645333][ T5845] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1369.655825][ T5849] usb 2-1: config 0 descriptor?? [ 1369.661171][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.676169][ T5845] usb 6-1: config 0 descriptor?? [ 1370.106354][ T5845] keytouch 0003:0926:3333.00D9: fixing up Keytouch IEC report descriptor [ 1370.140435][ T30] audit: type=1326 audit(1752233798.868:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22227 comm="syz.0.5569" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf710e539 code=0x0 [ 1370.162757][ T5845] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.00D9/input/input297 [ 1370.181512][T22220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.211582][T22220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.301809][ T5845] keytouch 0003:0926:3333.00D9: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1370.330604][T22224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.340423][T22224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.611212][ T5869] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1370.622663][ T5869] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input296 [ 1370.844339][ T5869] usb 4-1: USB disconnect, device number 121 [ 1370.851455][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1370.854975][ T5845] usb 6-1: USB disconnect, device number 118 [ 1371.099451][T22226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.141606][T22226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.164444][T22226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.174907][T22226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.196369][ T5849] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 1371.211989][ T5849] usb 2-1: USB disconnect, device number 36 [ 1371.230456][ T5849] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 1371.275617][ T5512] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 1371.311947][ T5849] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 1372.082684][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1372.129311][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1372.259879][ T10] usb 3-1: USB disconnect, device number 51 [ 1372.515811][T22258] fuse: Bad value for 'group_id' [ 1372.521018][T22258] fuse: Bad value for 'group_id' [ 1372.528759][T22258] netlink: 'syz.2.5575': attribute type 10 has an invalid length. [ 1372.536737][T22258] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5575'. [ 1372.689441][T22255] netlink: 292 bytes leftover after parsing attributes in process `syz.1.5574'. [ 1372.742049][T22255] netlink: 292 bytes leftover after parsing attributes in process `syz.1.5574'. [ 1373.484933][ T5849] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1373.512955][T21469] syz_tun (unregistering): left allmulticast mode [ 1373.690873][ T5869] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1373.740464][ T5849] usb 6-1: Using ep0 maxpacket: 32 [ 1373.791143][ T5849] usb 6-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1373.820404][ T5849] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1373.820964][T15489] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1373.841431][T15489] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1373.890891][T15489] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1373.910460][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 1373.919621][T15489] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1373.928016][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1373.939967][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1373.953698][ T5869] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1373.963618][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.972441][T15489] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1373.989251][ T5869] usb 2-1: config 0 descriptor?? [ 1374.164835][ T5849] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1374.235955][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.313983][ T5849] usb 6-1: Product: syz [ 1374.346773][ T5849] usb 6-1: Manufacturer: syz [ 1374.381452][ T5849] usb 6-1: SerialNumber: syz [ 1374.415285][ T5849] usb 6-1: config 0 descriptor?? [ 1374.758763][T22265] binder: 22262:22265 ioctl c0306201 80000100 returned -11 [ 1375.149544][ T5869] usbhid 2-1:0.0: can't add hid device: -71 [ 1375.165785][ T5869] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1375.179907][ T5845] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1375.214234][ T5869] usb 2-1: USB disconnect, device number 37 [ 1375.487927][ T5845] usb 3-1: Using ep0 maxpacket: 8 [ 1375.512850][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1375.705741][ T5845] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1375.843886][ T5845] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1375.906777][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.948858][ T5845] usb 3-1: config 0 descriptor?? [ 1375.958031][T22273] chnl_net:caif_netlink_parms(): no params data found [ 1376.084424][T19830] Bluetooth: hci2: command tx timeout [ 1376.124856][ T5849] usb 6-1: USB disconnect, device number 119 [ 1376.236036][ T30] audit: type=1326 audit(1752233804.958:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22291 comm="syz.1.5580" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e539 code=0x0 [ 1376.404537][ T5845] usbhid 3-1:0.0: can't add hid device: -71 [ 1376.418924][ T5845] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1376.545403][ T49] bridge0: port 3(batadv0) entered disabled state [ 1376.622388][ T49] erspan0: left allmulticast mode [ 1376.628627][ T5845] usb 3-1: USB disconnect, device number 52 [ 1376.634870][ T49] erspan0: left promiscuous mode [ 1376.651868][ T49] bridge0: port 2(erspan0) entered disabled state [ 1376.706586][ T49] batadv1: left allmulticast mode [ 1376.713240][ T5849] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1376.734126][ T49] batadv1: left promiscuous mode [ 1376.739443][ T49] bridge0: port 1(batadv1) entered disabled state [ 1376.872018][ T5849] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1376.915755][ T5849] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1376.926986][ T5849] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1376.943762][ T5849] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1376.971014][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.988760][T22299] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1377.542136][ T49] dvmrp8 (unregistering): left allmulticast mode [ 1377.579795][ T5845] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1377.717325][ T49] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1377.755243][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1377.766410][ T5845] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1377.776407][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.797782][ T5845] usb 3-1: config 0 descriptor?? [ 1377.942407][ T49] bond0 (unregistering): Released all slaves [ 1377.959258][ T49] bond1 (unregistering): Released all slaves [ 1377.990246][T20822] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1378.066462][T22273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.076905][T22273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.096336][T22273] bridge_slave_0: entered allmulticast mode [ 1378.105295][T22273] bridge_slave_0: entered promiscuous mode [ 1378.142583][T22273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.152604][T22273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.163458][T22273] bridge_slave_1: entered allmulticast mode [ 1378.165100][T20822] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1378.169937][T19830] Bluetooth: hci2: command tx timeout [ 1378.179728][T20822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.192835][T20822] usb 2-1: Product: syz [ 1378.197051][T20822] usb 2-1: Manufacturer: syz [ 1378.200542][T22273] bridge_slave_1: entered promiscuous mode [ 1378.218768][T20822] usb 2-1: SerialNumber: syz [ 1378.256971][T20822] usb 2-1: config 0 descriptor?? [ 1378.307361][T22273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1378.322524][T22273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1378.367087][ T49] ------------[ cut here ]------------ [ 1378.381085][ T49] Have pending ack frames! [ 1378.402622][ T49] WARNING: CPU: 0 PID: 49 at net/mac80211/main.c:1715 ieee80211_free_ack_frame+0x4d/0x60 [ 1378.412819][ T49] Modules linked in: [ 1378.417329][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 1378.421284][T22310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.429429][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1378.448112][ T49] Workqueue: netns cleanup_net [ 1378.453036][ T49] RIP: 0010:ieee80211_free_ack_frame+0x4d/0x60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1378.459281][ T49] Code: 00 00 e8 06 5f 71 fe 31 c0 5b e9 fe a3 94 00 cc e8 c8 c7 e2 f6 c6 05 aa 80 ae 04 01 90 48 c7 c7 e0 e0 ae 8c e8 84 a7 a6 f6 90 <0f> 0b 90 90 eb c8 cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 [ 1378.479149][ T49] RSP: 0018:ffffc90000b97610 EFLAGS: 00010246 [ 1378.485462][ T49] RAX: 213c3ff98fda7d00 RBX: ffff8880313ac280 RCX: ffff888022280000 [ 1378.490642][T22310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1378.494013][ T49] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1378.510114][ T49] RBP: ffffc90000b97718 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 1378.518146][ T49] R10: dffffc0000000000 R11: ffffed10170c4853 R12: ffffc90000b97680 [ 1378.526231][ T49] R13: ffff888025fcd630 R14: ffff88803165afa8 R15: 0000000000000001 [ 1378.534431][ T49] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 1378.543510][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1378.550235][ T49] CR2: 00007ffeefcd5ff8 CR3: 0000000077fb8000 CR4: 00000000003526f0 [ 1378.558317][ T49] Call Trace: [ 1378.561722][ T49] [ 1378.564775][ T49] idr_for_each+0x1b5/0x290 [ 1378.569389][ T49] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 1378.575607][ T49] ? __pfx_idr_for_each+0x10/0x10 [ 1378.580871][ T49] ? kobject_put+0x270/0x480 [ 1378.585548][ T49] ? kfree+0x18e/0x440 [ 1378.589765][ T49] ieee80211_free_hw+0xc6/0x480 [ 1378.594782][ T49] mac80211_hwsim_del_radio+0x2de/0x460 [ 1378.600457][ T49] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1378.606709][ T49] hwsim_exit_net+0x584/0x640 [ 1378.611537][ T49] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1378.616809][ T49] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 1378.622798][ T49] ops_undo_list+0x49a/0x990 [ 1378.627473][ T49] ? __pfx_ops_undo_list+0x10/0x10 [ 1378.632726][ T49] cleanup_net+0x4c5/0x800 [ 1378.637232][ T49] ? __pfx_cleanup_net+0x10/0x10 [ 1378.642348][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 1378.647629][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 1378.653503][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 1378.659484][ T49] process_scheduled_works+0xae1/0x17b0 [ 1378.665198][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 1378.671352][ T49] worker_thread+0x8a0/0xda0 [ 1378.676073][ T49] kthread+0x70e/0x8a0 [ 1378.680291][ T49] ? __pfx_worker_thread+0x10/0x10 [ 1378.685486][ T49] ? __pfx_kthread+0x10/0x10 [ 1378.690216][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 1378.695502][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 1378.700820][ T49] ? __pfx_kthread+0x10/0x10 [ 1378.705534][ T49] ret_from_fork+0x3fc/0x770 [ 1378.710388][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 1378.715581][ T49] ? __switch_to_asm+0x39/0x70 [ 1378.720481][ T49] ? __switch_to_asm+0x33/0x70 [ 1378.725329][ T49] ? __pfx_kthread+0x10/0x10 [ 1378.730061][ T49] ret_from_fork_asm+0x1a/0x30 [ 1378.734929][ T49] [ 1378.738035][ T49] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1378.745358][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 1378.757379][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1378.767600][ T49] Workqueue: netns cleanup_net [ 1378.772423][ T49] Call Trace: [ 1378.775740][ T49] [ 1378.778710][ T49] dump_stack_lvl+0x99/0x250 [ 1378.783356][ T49] ? __asan_memcpy+0x40/0x70 [ 1378.787994][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1378.793240][ T49] ? __pfx__printk+0x10/0x10 [ 1378.797890][ T49] panic+0x2db/0x790 [ 1378.801820][ T49] ? __pfx_panic+0x10/0x10 [ 1378.806268][ T49] ? ret_from_fork_asm+0x1a/0x30 [ 1378.811237][ T49] __warn+0x31b/0x4b0 [ 1378.815241][ T49] ? ieee80211_free_ack_frame+0x4d/0x60 [ 1378.820827][ T49] ? ieee80211_free_ack_frame+0x4d/0x60 [ 1378.826399][ T49] report_bug+0x2be/0x4f0 [ 1378.830770][ T49] ? ieee80211_free_ack_frame+0x4d/0x60 [ 1378.836372][ T49] ? ieee80211_free_ack_frame+0x4d/0x60 [ 1378.841939][ T49] ? ieee80211_free_ack_frame+0x4f/0x60 [ 1378.847513][ T49] handle_bug+0x84/0x160 [ 1378.851781][ T49] exc_invalid_op+0x1a/0x50 [ 1378.856296][ T49] asm_exc_invalid_op+0x1a/0x20 [ 1378.861165][ T49] RIP: 0010:ieee80211_free_ack_frame+0x4d/0x60 [ 1378.867340][ T49] Code: 00 00 e8 06 5f 71 fe 31 c0 5b e9 fe a3 94 00 cc e8 c8 c7 e2 f6 c6 05 aa 80 ae 04 01 90 48 c7 c7 e0 e0 ae 8c e8 84 a7 a6 f6 90 <0f> 0b 90 90 eb c8 cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 [ 1378.887001][ T49] RSP: 0018:ffffc90000b97610 EFLAGS: 00010246 [ 1378.893103][ T49] RAX: 213c3ff98fda7d00 RBX: ffff8880313ac280 RCX: ffff888022280000 [ 1378.901095][ T49] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1378.909083][ T49] RBP: ffffc90000b97718 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 1378.917165][ T49] R10: dffffc0000000000 R11: ffffed10170c4853 R12: ffffc90000b97680 [ 1378.925159][ T49] R13: ffff888025fcd630 R14: ffff88803165afa8 R15: 0000000000000001 [ 1378.933175][ T49] idr_for_each+0x1b5/0x290 [ 1378.937716][ T49] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 1378.943851][ T49] ? __pfx_idr_for_each+0x10/0x10 [ 1378.948914][ T49] ? kobject_put+0x270/0x480 [ 1378.953527][ T49] ? kfree+0x18e/0x440 [ 1378.957627][ T49] ieee80211_free_hw+0xc6/0x480 [ 1378.962517][ T49] mac80211_hwsim_del_radio+0x2de/0x460 [ 1378.968088][ T49] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1378.974192][ T49] hwsim_exit_net+0x584/0x640 [ 1378.978895][ T49] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1378.984120][ T49] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 1378.989966][ T49] ops_undo_list+0x49a/0x990 [ 1378.994595][ T49] ? __pfx_ops_undo_list+0x10/0x10 [ 1378.999742][ T49] cleanup_net+0x4c5/0x800 [ 1379.004191][ T49] ? __pfx_cleanup_net+0x10/0x10 [ 1379.009152][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 1379.014397][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 1379.020148][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 1379.025910][ T49] process_scheduled_works+0xae1/0x17b0 [ 1379.031519][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 1379.037564][ T49] worker_thread+0x8a0/0xda0 [ 1379.042218][ T49] kthread+0x70e/0x8a0 [ 1379.046327][ T49] ? __pfx_worker_thread+0x10/0x10 [ 1379.051475][ T49] ? __pfx_kthread+0x10/0x10 [ 1379.056097][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 1379.061347][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 1379.066575][ T49] ? __pfx_kthread+0x10/0x10 [ 1379.071229][ T49] ret_from_fork+0x3fc/0x770 [ 1379.075849][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 1379.080992][ T49] ? __switch_to_asm+0x39/0x70 [ 1379.085782][ T49] ? __switch_to_asm+0x33/0x70 [ 1379.090572][ T49] ? __pfx_kthread+0x10/0x10 [ 1379.095195][ T49] ret_from_fork_asm+0x1a/0x30 [ 1379.100006][ T49] [ 1379.103194][ T49] Kernel Offset: disabled [ 1379.107529][ T49] Rebooting in 86400 seconds..