last executing test programs: 12m23.295609299s ago: executing program 0 (id=369): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xe, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x24040805) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x49, 0x0, 0xf, 0x0, 0xfffffffffffffe86}, 0x9077cb0d43146301) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x1, 0x0, 0x0, 0x40000000b49, 0x9, 0x8, 0x9, 0x3}, 0x0) (async, rerun: 64) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4040100}, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) (async, rerun: 32) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) (async) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x4b05be, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r8 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730481e11889a96cd6cab1909deb85d21aa54b60eb9c95c135f7582ad88179081aa2e52e2b85ef5d9333fcc7ccacbb456e99cc231b9660c1e7befdc353cdc148bb77c19ca86e439a21dde906ce9c9d7e624c7fcd6960fd565b172889ca2324153912d15359d8ae3d7e208ee", 0xb6}, {&(0x7f00000003c0)="e8700e444d50a969ff67", 0xa}], 0x2}], 0x1, 0x0) (async, rerun: 64) recvmmsg$unix(r9, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000a80)=""/13, 0xe}, {&(0x7f0000000cc0)=""/171, 0xab}], 0x2, 0x0, 0xa}}], 0x1, 0x12073, 0x0) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYRESHEX=r2, @ANYRES16=0x0, @ANYRESOCT=r6, @ANYRESHEX=r1, @ANYRES32=r3, @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x2000001) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x890) r10 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000580)=ANY=[@ANYRES64=r0, @ANYRES64=r3, @ANYRES64=r5], 0x0) (async) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r11, 0x0, 0x7ffc, 0x5) (async) syz_usb_control_io(r10, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m23.084171112s ago: executing program 0 (id=370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x80) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000001c0)={0x0, @sdr={0x38414261, 0x7}}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x7}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xcdb041efcda25507, 0xffff00, 0x0, 0xffffff00]}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x6c}}, 0x40040) 12m22.980555357s ago: executing program 0 (id=372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x1, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009947308991121685998000000e20000000000000020000904030005375dd200090506034000070e0509050700000004020309050800000404fe0709050400ff0303020409050a1cff0301ac08"], 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) (async, rerun: 32) syz_usb_connect$uac1(0x3, 0x96, &(0x7f0000000700)=ANY=[@ANYBLOB="12011003000000406b1d010140000102030109028400030105a0100904000000010100000a24010400000201020924030105030202060524050408052404030109040100000102000009040101010102000009050109100002020107250100030600090402000001"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) (rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), 0xffffffffffffffff) (async) r7 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x14003) ioctl$BLKGETDISKSEQ(r7, 0x80081280, &(0x7f0000000340)) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001980)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001940)={&(0x7f0000000740)=ANY=[@ANYRES16=r6, @ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYRES8=r1, @ANYRES32=r8, @ANYBLOB], 0x54}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a3b83000000000000000005000008fd00024000000002040006000900010073797a31000000001400"], 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x3, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x82, 0x3, 0x7c, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x80000000, 0x3, 0x0, 0x5, 0x24, 0x1, 0x47, 0x3c5b, 0x1, 0x24, 0xc, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x9, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x7, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x5, 0x7, 0x7fff, 0x5a80, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0xffffffff, 0x4, 0xb, 0x4, 0x9, 0x8, 0x8, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc46, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x8, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x2, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2e9, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xd, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x6, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa21, 0xf40, 0x738, 0x1, 0x6c1b, 0x80, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000200)={0x3, @vbi={0x6, 0x8, 0x3, 0x34363248, [0x6, 0x2], [0x4, 0x38], 0x1}}) (async, rerun: 32) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12m19.846086352s ago: executing program 0 (id=384): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r1, 0x0, r0, 0x0, 0x46) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getresuid(0x0, 0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00') (async) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00') pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x5e) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000140)="be", 0x1}], 0x1, &(0x7f0000000380)=[@ip_retopts={{0x10}}], 0x10}, 0x0) (async) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000140)="be", 0x1}], 0x1, &(0x7f0000000380)=[@ip_retopts={{0x10}}], 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xdp_devmap_xmit\x00'}, 0x18) 12m18.160297066s ago: executing program 0 (id=393): r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0xfffffffffffffffb) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x1, 0x0, 0x1, 0x4}) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000001c0)={r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a00000000000000000700", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x66c43e29a19c7809) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0x4080) 12m17.992692344s ago: executing program 0 (id=395): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002540)=@newtfilter={0x684, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0x658, 0x2, [@TCA_U32_SEL={0x644, 0x5, {0x1, 0x8, 0x6, 0x34, 0x1, 0x1, 0x1, 0x9, [{0xe, 0x3, 0x401, 0x74}, {0x3, 0x800, 0xe, 0x3}, {0x1, 0xd6, 0x16, 0x2}, {0xfffffff9, 0x28c}, {0x3, 0x44, 0x3ff, 0x1c}, {0x2, 0x38b9bf72, 0x0, 0x2}, {0xcc, 0x8, 0x2, 0x6}, {0x80000001, 0x7, 0x3, 0x2}, {0x3, 0x4, 0x2, 0x3}, {0x8, 0x0, 0x0, 0x1}, {0x9, 0x3c, 0x2, 0xfffffffc}, {0x2, 0xf, 0x8, 0xc5}, {0x9, 0x0, 0x6, 0x7bed}, {0x4, 0x4, 0x41, 0xffffff90}, {0x2, 0x3ff, 0x2, 0xfffffffb}, {0x4, 0x9, 0x9, 0xfffffff7}, {0x5ba3, 0x0, 0x2, 0x6}, {0x2, 0x8, 0x3, 0x8}, {0x5e, 0x29b1, 0x1, 0x7}, {0x6, 0xb, 0x3}, {0x1, 0x7f, 0x10001}, {0xf, 0x1, 0x2, 0x60}, {0x1, 0x75a646e5, 0xb29, 0x1}, {0x8, 0xda, 0x1f1dc93a, 0x3}, {0xdf, 0x9, 0x6, 0xfffffff9}, {0x7, 0x4, 0x7f, 0x1}, {0xa, 0x7, 0x3, 0x80000000}, {0x8a, 0x4, 0x0, 0x4}, {0x675, 0x40d, 0x3d, 0x4}, {0x1ff, 0x10, 0x3, 0x1}, {0x5, 0x91, 0x97f7, 0x3}, {0x47d, 0xffffffff, 0x0, 0x8}, {0x75c, 0xbc3c, 0x4, 0x6}, {0x8, 0x3, 0x56, 0x101}, {0x1, 0x9, 0x2000000, 0x2}, {0x8, 0x7, 0x5396daee, 0x81}, {0x5, 0x8, 0x7f, 0x101}, {0x2, 0xfffff801, 0x8000, 0x3}, {0x80, 0xffff53a4, 0x1, 0x5}, {0x1, 0xffff, 0x3, 0x4}, {0x1, 0x7, 0x5, 0x40}, {0x9, 0x1, 0x7, 0x2}, {0x101, 0xb8de, 0xc84b, 0x2}, {0xf5, 0x7, 0x1, 0x9}, {0x6, 0xff, 0x10000, 0x7}, {0x287, 0x7, 0x5, 0x6}, {0x8, 0x80000001, 0x1000, 0x8}, {0xffffffff, 0xfffffffc, 0x40, 0x1}, {0x8e67, 0x2, 0x4, 0x101}, {0xe, 0x6, 0x9, 0x9}, {0x89c, 0x5, 0x3, 0x3}, {0x4, 0x191, 0x80000001, 0x7c24}, {0xa198, 0x1f5b, 0x17563065, 0x7}, {0x7, 0x4, 0x10001, 0x6}, {0x10, 0x9, 0xfffffffc, 0x5}, {0x7ff, 0x8, 0x8, 0x4f}, {0x7, 0x7, 0x8, 0x6}, {0x0, 0x1, 0x80, 0x3}, {0x9, 0x0, 0x7ff, 0x81}, {0x10000, 0x2, 0x0, 0x1000}, {0x8, 0x3, 0x7a, 0x81}, {0x400000, 0x9, 0x7ff, 0x9}, {0x189, 0x9, 0x9, 0x10000}, {0x8, 0xffffffff, 0x5, 0x8}, {0x6, 0x3, 0x5, 0x2}, {0x8, 0x7fffffff, 0x2e, 0x8}, {0x80, 0x843, 0xf, 0x3}, {0x1, 0x8f, 0x7, 0x5}, {0x8, 0x1, 0x9, 0x2}, {0x1d, 0x738, 0x9, 0x800}, {0x40, 0x3, 0x8, 0x200}, {0x8, 0x9, 0x6, 0x1}, {0x7, 0x3, 0x2, 0x3}, {0x6f, 0x80000000, 0x4f, 0x2}, {0x8, 0x0, 0x800, 0x8}, {0x1, 0x5, 0xd214, 0xfffffffd}, {0x2, 0x2, 0x936, 0xfb5}, {0x8, 0x6db, 0xffff, 0x9}, {0x1, 0xffffff7d, 0x1, 0x3}, {0x9, 0x3, 0x6}, {0x0, 0x1e9, 0x5eff, 0x4}, {0x6, 0x7, 0x4, 0x3}, {0x999, 0x3, 0x3ff, 0xf79d}, {0x7c41, 0xfffffbff, 0x10, 0xe}, {0x7f, 0x5, 0x3, 0x3}, {0x9c31, 0x3, 0x5, 0x5}, {0x8, 0xd, 0x6, 0x3}, {0x7fffffff, 0x7, 0x4, 0x3}, {0x7, 0xbc7, 0x96e5, 0x1}, {0x5, 0xd, 0x9, 0xb}, {0x8000, 0x4, 0x7f, 0x6}, {0xfffffffd, 0x1, 0x80000001, 0x3b}, {0xb, 0xfff, 0x7f, 0x6}, {0x80, 0x1}, {0x80000001, 0x7, 0x5, 0x9}, {0x10, 0x4, 0x7, 0x3}, {0x4, 0x2, 0xe6, 0x3ff9}, {0x5, 0xd, 0x0, 0x1}, {0x0, 0x5, 0x6, 0x4}]}}, @TCA_U32_HASH={0x8, 0x2, 0xffffffff}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0x2}}]}}]}, 0x684}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m17.587890216s ago: executing program 32 (id=395): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002540)=@newtfilter={0x684, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0x658, 0x2, [@TCA_U32_SEL={0x644, 0x5, {0x1, 0x8, 0x6, 0x34, 0x1, 0x1, 0x1, 0x9, [{0xe, 0x3, 0x401, 0x74}, {0x3, 0x800, 0xe, 0x3}, {0x1, 0xd6, 0x16, 0x2}, {0xfffffff9, 0x28c}, {0x3, 0x44, 0x3ff, 0x1c}, {0x2, 0x38b9bf72, 0x0, 0x2}, {0xcc, 0x8, 0x2, 0x6}, {0x80000001, 0x7, 0x3, 0x2}, {0x3, 0x4, 0x2, 0x3}, {0x8, 0x0, 0x0, 0x1}, {0x9, 0x3c, 0x2, 0xfffffffc}, {0x2, 0xf, 0x8, 0xc5}, {0x9, 0x0, 0x6, 0x7bed}, {0x4, 0x4, 0x41, 0xffffff90}, {0x2, 0x3ff, 0x2, 0xfffffffb}, {0x4, 0x9, 0x9, 0xfffffff7}, {0x5ba3, 0x0, 0x2, 0x6}, {0x2, 0x8, 0x3, 0x8}, {0x5e, 0x29b1, 0x1, 0x7}, {0x6, 0xb, 0x3}, {0x1, 0x7f, 0x10001}, {0xf, 0x1, 0x2, 0x60}, {0x1, 0x75a646e5, 0xb29, 0x1}, {0x8, 0xda, 0x1f1dc93a, 0x3}, {0xdf, 0x9, 0x6, 0xfffffff9}, {0x7, 0x4, 0x7f, 0x1}, {0xa, 0x7, 0x3, 0x80000000}, {0x8a, 0x4, 0x0, 0x4}, {0x675, 0x40d, 0x3d, 0x4}, {0x1ff, 0x10, 0x3, 0x1}, {0x5, 0x91, 0x97f7, 0x3}, {0x47d, 0xffffffff, 0x0, 0x8}, {0x75c, 0xbc3c, 0x4, 0x6}, {0x8, 0x3, 0x56, 0x101}, {0x1, 0x9, 0x2000000, 0x2}, {0x8, 0x7, 0x5396daee, 0x81}, {0x5, 0x8, 0x7f, 0x101}, {0x2, 0xfffff801, 0x8000, 0x3}, {0x80, 0xffff53a4, 0x1, 0x5}, {0x1, 0xffff, 0x3, 0x4}, {0x1, 0x7, 0x5, 0x40}, {0x9, 0x1, 0x7, 0x2}, {0x101, 0xb8de, 0xc84b, 0x2}, {0xf5, 0x7, 0x1, 0x9}, {0x6, 0xff, 0x10000, 0x7}, {0x287, 0x7, 0x5, 0x6}, {0x8, 0x80000001, 0x1000, 0x8}, {0xffffffff, 0xfffffffc, 0x40, 0x1}, {0x8e67, 0x2, 0x4, 0x101}, {0xe, 0x6, 0x9, 0x9}, {0x89c, 0x5, 0x3, 0x3}, {0x4, 0x191, 0x80000001, 0x7c24}, {0xa198, 0x1f5b, 0x17563065, 0x7}, {0x7, 0x4, 0x10001, 0x6}, {0x10, 0x9, 0xfffffffc, 0x5}, {0x7ff, 0x8, 0x8, 0x4f}, {0x7, 0x7, 0x8, 0x6}, {0x0, 0x1, 0x80, 0x3}, {0x9, 0x0, 0x7ff, 0x81}, {0x10000, 0x2, 0x0, 0x1000}, {0x8, 0x3, 0x7a, 0x81}, {0x400000, 0x9, 0x7ff, 0x9}, {0x189, 0x9, 0x9, 0x10000}, {0x8, 0xffffffff, 0x5, 0x8}, {0x6, 0x3, 0x5, 0x2}, {0x8, 0x7fffffff, 0x2e, 0x8}, {0x80, 0x843, 0xf, 0x3}, {0x1, 0x8f, 0x7, 0x5}, {0x8, 0x1, 0x9, 0x2}, {0x1d, 0x738, 0x9, 0x800}, {0x40, 0x3, 0x8, 0x200}, {0x8, 0x9, 0x6, 0x1}, {0x7, 0x3, 0x2, 0x3}, {0x6f, 0x80000000, 0x4f, 0x2}, {0x8, 0x0, 0x800, 0x8}, {0x1, 0x5, 0xd214, 0xfffffffd}, {0x2, 0x2, 0x936, 0xfb5}, {0x8, 0x6db, 0xffff, 0x9}, {0x1, 0xffffff7d, 0x1, 0x3}, {0x9, 0x3, 0x6}, {0x0, 0x1e9, 0x5eff, 0x4}, {0x6, 0x7, 0x4, 0x3}, {0x999, 0x3, 0x3ff, 0xf79d}, {0x7c41, 0xfffffbff, 0x10, 0xe}, {0x7f, 0x5, 0x3, 0x3}, {0x9c31, 0x3, 0x5, 0x5}, {0x8, 0xd, 0x6, 0x3}, {0x7fffffff, 0x7, 0x4, 0x3}, {0x7, 0xbc7, 0x96e5, 0x1}, {0x5, 0xd, 0x9, 0xb}, {0x8000, 0x4, 0x7f, 0x6}, {0xfffffffd, 0x1, 0x80000001, 0x3b}, {0xb, 0xfff, 0x7f, 0x6}, {0x80, 0x1}, {0x80000001, 0x7, 0x5, 0x9}, {0x10, 0x4, 0x7, 0x3}, {0x4, 0x2, 0xe6, 0x3ff9}, {0x5, 0xd, 0x0, 0x1}, {0x0, 0x5, 0x6, 0x4}]}}, @TCA_U32_HASH={0x8, 0x2, 0xffffffff}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0x2}}]}}]}, 0x684}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20.007939386s ago: executing program 4 (id=3012): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x11, &(0x7f0000000380)=[@in={0x2, 0x4e21, @remote}]}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_connect(0x2, 0x9f1, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0x98, 0x50, 0x95, 0x40, 0x5ab, 0x351, 0x10c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9df, 0x4, 0x0, 0x8, 0x60, 0xa0, [{{0x9, 0x4, 0x50, 0x4, 0x10, 0xde, 0x89, 0x85, 0x2, [], [{{0x9, 0x5, 0x3, 0x10, 0x40, 0x3d, 0x2, 0xe}}, {{0x9, 0x5, 0x8, 0x12, 0x10, 0xe, 0x4f, 0x8}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x5, 0x27, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1e2}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0xb, 0xa, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x6a}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x3, 0xe, 0x6}}, {{0x9, 0x5, 0x1a, 0x0, 0x40, 0x7, 0x6a, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x80, 0x7fff}]}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x44, 0xb, 0x79}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x8, 0xa0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x18}]}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x6, 0xc, 0x4}}, {{0x9, 0x5, 0x4, 0x2, 0x410, 0x5, 0x8, 0x3}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0xc, 0xbd, 0x8b, [@generic={0x98, 0x24, "b35d6b9f60b53699fb7b5d96b30feee81c39e2471335efa9602165774109c886f8482fa5922eb129cb6d436cde1848b6b6a2b19a196646b534113ecd70eb6a8a7642acfad07dea91ae08930a598d455605bd1f107ef8d964cfdc6ed89d0dddc352dc533a119759b15cfce37c79e2379059128da98c2f139d6ec7cf4e977fd4b45943523c3c0882506842f2e6118118908f8282b87e99"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x2}]}}, {{0x9, 0x5, 0x8f, 0x4, 0x3ff, 0x2, 0x3, 0x1, [@generic={0x3d, 0xd, "bb0fa85a4ed8b007616068b8d9241fedfcb15eca8148792855389b4f26de0a32c46c8c45d10201d1d6511faaf3d8dea34c673be6ca81994a50cf22"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x18, 0x460f}]}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x3, 0x10, 0xcc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x7000}, @uac_iso={0x7, 0x25, 0x1, 0x103, 0x19, 0x2c30}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0xe, 0x9, 0xc8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x81}, @generic={0xd7, 0x22, "b2e252d60123791a56c0639096dad3028c96a4644031ea86b0b1ed16dda1e319a63fa0db2aadee490851c8d5f4494b94b5901d5242bb8d736d475825c6c70ec95ff83852f8ec9c3f8a7d5818a2862745029888bda979dd346f8a16258d2a73726b120eab5e98d020772f3a40577a6e357c63bdc42a40f0dc90041fb91a3f0038685e89d8b9e1ba62eba2fec9593c1f8e7f4613c2870db0481939f02d85798fdfd877b93906a0ca0958edea541aa57192f7d67d7b6c3245906f023550c02018b5620b0fbb4130441acd7369e1792ea231eb3970dec8"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x77, 0x1, 0x6, [@generic={0xae, 0x7, "492c52c617967a1e1caa806719a10f26d694f095b7bdb7e16b8e358ce7987d2a7753a4df0a7912635b9e234df1704487f477803cae5c759773e991dc18332f3fb24a43aee67662dc243713d5d1dc0d9828849d2a6a21fe116239e6963f1482d4a992949be78e834cff1b12424ed03de26c2467e052471294ff8e5ca79df207cbab820acf78a7a87b70ac709630daf1dae64b13c8146917b140cabff1909206da4fe8545d93da8499b7d57fae"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x10, 0xa6, 0x5, 0x0, [@generic={0x59, 0x5, "8e9a4342e0eead927758a7a7aacd6342566c87d62bbb4f452ac9ce42e8a81bffec2d5fbfb093a3c06daecdb73c3166bb023a3cad52b416415d5b10cd5daa8133077c023964f0e4db4b4b90d87bbc8a0e612a3fcc156f63"}, @generic={0x67, 0x9, "587151e2e1a81aa80fcbb1521de0a2f804822ec58093b56c1af5cc13a4d3712bce53fe6e084ce3af8c4e3c7bd2bc0a93e3c51ae49f4d05883bb1f3b40fe8bab82fd8940c232b75ba9010e2a38053733857ed93593b44823560b8d49f6987548c3c101c7358"}]}}]}}, {{0x9, 0x4, 0x2f, 0x1, 0xc, 0xa1, 0xcc, 0x52, 0x0, [], [{{0x9, 0x5, 0x7, 0x0, 0x10, 0x2, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xe8, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x2}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x8, 0xee, 0x7}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0x7, 0x8, 0x9}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x6, 0xb, 0x4}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x10, 0x0, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfd, 0x52}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x4, 0x0, 0x11, [@generic={0x8c, 0x6, "d4a2667c82ba84cbee5b60223e757ba060961f62d08f5f5776e4c069dbfb8e3395b0900f5ccc60017a23ed43e98567071fa24481e1f965d14e80ac72557bb97bc8760065f91a797fc672e2b65e5348258b4fdd303dabd1df2dc1a58111c738a025c595d210f2926215174cc8e40aed759599ef8aa377e213def6cc9a009ca6b43348af40ebb654a51bb9"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x7, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x7f}, @generic={0xec, 0x23, "ed151cbf40ef097f671710d3f71060840a59b0c7f84c1ab8b52404bea91839d0389f766b7be5fa261feababa658d4b03b7116dd9a935890de106d6b353d03ecce6936ac83aee11e5a74b56bced98e84639eead88d7c95c63ac05ed02c9dcdb68db6d647324715b830d6e64363f274ac079c915fb3996864618b9a31577e9c22297f419515365a8bbf0f48adc724f68e088ba85578a9c3acae1d02290a632184e9082fcf931026c327f1133fab04a9ee24db13ec323bbbd1843ac9f2a74a7d52c18b2925a3e5970f90041e7658e59f2a3d8b29fd1447d03a0f0e976c6c19d1f8faa59a4ebea1065e3aab3"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x8, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x6f9e}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x6, 0xe, 0x3e}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x1, 0x5, 0x7f}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0xc, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa0, 0x4fef}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7}]}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x9d, 0x3, 0x2, [@generic={0xcd, 0x21, "e24e7bfb622d0459589df22c1e97b760bafe43319c51107b4fcc552b8418acb6e7f571ecd1b2d7eba77751220459349c4699e4152d0ae79dc59f665497ea23a512d1743d25a965a0541c521fb6a78d745d67f27c6c3e8e04628c630fc76d515092ae5950ae91e2fe779d67d1f82eabfa3af701eb38adc16b9df939de8af4010f5e904d2ab08039586e369fa9120f9f8d6b8bf00bdc1d6c284ff02593d9c9ba10d0b5864d0dd4e492d15ecaa5020328a49bc096d3905d2983089d24d3ab2e2b73b17a4a70949241f3d647fe"}]}}]}}, {{0x9, 0x4, 0x2a, 0xb, 0x1, 0xd0, 0x12, 0x90, 0x1, [@generic={0x63, 0x24, "159fcca52ee9849306c4cc99d04471b1e08eda21547755154bd6c48ec1bba5de8b900c39834b27646bc9517af6d7d9586eb295e4e213234ab6bad182418a21d3d8cf6a5f0bd2c94f5c8685de35f9286c9c1c50ba3958b51546bf164cdff3390e8a"}], [{{0x9, 0x5, 0x1, 0x0, 0x20, 0x4, 0x18, 0x9}}]}}, {{0x9, 0x4, 0xca, 0x7, 0xd, 0xff, 0xff, 0xff, 0xb3, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x91}, [@feature_unit={0xd, 0x24, 0x6, 0x1, 0x5, 0x3, [0x2, 0x1, 0x1], 0x32}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x201, 0x6, 0x9, 0x7, 0xe7, 0xd0}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0xf7affd0f1aa38fa2, 0x5, 0x10, 0x3, 0x8, 0x2}, @mixer_unit={0x8, 0x24, 0x4, 0x2, 0x6, "5fdf66"}, @selector_unit={0xb, 0x24, 0x5, 0x3, 0x4, "80c0cddef801"}]}, @hid_hid={0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0x458}}], [{{0x9, 0x5, 0x8, 0x10, 0x200, 0x8, 0x7f, 0x40}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x0, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x101}, @generic={0x4e, 0x3, "83ad5dbf6413302e097ea45c31266bad42e8864658fed20ab781a0c74535e7a70c69e44bf800554f2d5bd71b5991b62b0dbe06e387f716984cb83a12e9f594eb441cf14db200b293377dfe1c"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x2, 0xa}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x2, 0xf0, 0x5}}, {{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x48, 0x80, 0x6}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x9, 0x2, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x3}, @generic={0x1e, 0x6, "7c514874ae907fb354433ced84c3b352d9cfcde8f3296574c370021b"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x3, 0x58, 0x5, [@generic={0x54, 0x7, "80833f44c5bb25159af2d8288428a1b600bb961c746ac6458f7540c3f9211aea8822db7ca99e2c6d93be641e661f72ffdfc97033255cbce240e86d5191570077187d542c1e8f6e59de4e6b1f4f3f0fcd77d0"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x38, 0x6, 0x1, [@generic={0x81, 0x10, "21ebbad696d540bc8a23311d55d0b01404e35dd5c567af995435f4c2bc1bb4b73fa68141202f8001119ff0dafd3df89bef9d216771501fa7d05c6745f224a8227a492e1fa24ceb74d97582403618fadf593f46864bb9286dc53140666a592dbc34d014b4854971724de2d5ccc4e6ed7ccf6916fe6b33be6cee1321a3739554"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0xffff}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0xc, 0x40, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0x6}, @generic={0x3c, 0x11, "4b77b21baca214e013f225d2321e46adff25619503da665a349d987b265b695f2efbed8d58c947e0c19211dc674ec21485d01e39a1446e7a6f47"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0x7, 0x0, 0xfd}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x7, 0x48, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x5c4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xfc3e}]}}, {{0x9, 0x5, 0xd, 0x3, 0x200, 0x3, 0x6, 0xb}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0xf, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xee}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x3}]}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x90, 0xe, 0x4, 0x10, 0x6}, 0xe2, &(0x7f0000000180)={0x5, 0xf, 0xe2, 0x5, [@generic={0x96, 0x10, 0x2, "8d51eff9103f4e644e01736bbb6aa4b0cefcc79f2c751654484a86b2fd5ad492db1f7af0078b2e1188ee25be777098a6d4b17da2ec5a59b4a1bbb37260b7577f75d3d90500660e07614e60df30a9b422c2f12a7c95eaf5d0a26b352e9694e01a469de1517272edd77168d7fd31d1d03fa0fb6ec3a2fdeae4ad4cda06eda57f3a3cd70f5ac676aa26da91e55dd327f3015ab771"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x28, 0x0, 0x8, 0x3b, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "39c438eefdca9a07bac9d27f19f0ee8f"}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "a7d8718f05dba8289db0369adcc7e576"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "1a7d74a3714427ec56453b7e0e8a1bdf"}]}, 0x5, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x810}}, {0xc, &(0x7f0000000100)=@string={0xc, 0x3, "2031783a71c25afb0763"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42d}}, {0x6d, &(0x7f0000000f40)=ANY=[@ANYBLOB="6d038d0a1a2faea5ba4f95d6faee447ea8ecf51987dbcfcfe750894dfff596c603730a94fbf80f3522b9e4d1a98fa572e42e08f82d39e49b79f2897739d2e4c873745ac3e67806fd70b2e960321c66c49f2eb52d5a08a62f06f23e9e3af250361a23689ccd63cb5d0eac6c60e22bda6b60f50b786d811d379dffa7b449654699531b6580e08e95e4cbc32b225e6fade3f05c0ac41313e4"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2001}}]}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x400000005d9180, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x4}]}, 0x20}}, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 16.12436525s ago: executing program 4 (id=3022): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x50, 0x5810000000000000, &(0x7f00000006c0)="04d28058b5784467c8653b87a1f87d65338b1454020a802f9281193011fd0c74dff60b5c210dc156a140e2b78131b04293383f13bc30aed52d2ae624c4e1fe79f9a8dd0ecba22be33f6e4d3e1b0039c1"}) 15.668291175s ago: executing program 4 (id=3024): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}, 0x108) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f0000000680)="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", 0xfc) sendmsg$NFT_BATCH(r2, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}, 0x1, 0x0, 0x0, 0x240000c1}, 0x0) (async) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000a0a0103000000000000ffc43900000a090001"], 0x20}, 0x1, 0x0, 0x0, 0x2000c801}, 0x0) (async) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000680)=""/254, &(0x7f0000000180)=0xfffffffffffffdd1) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000091000010000000000000000000400000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a014bb0030000e6ff00000000020000000900010073797a30000015000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c00028008000140006fb8d7520340d22d00001505000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) epoll_create(0x40) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) read$FUSE(r5, &(0x7f0000003c80)={0x2020}, 0x2020) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000040)={{}, 0x88}) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905c0f2e8533a0b0611afa3440e5592b190e8ff04000000000905", @ANYRES16], 0x0) 15.429296324s ago: executing program 4 (id=3026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x7}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xcdb041efcda25507, 0xffff00, 0x0, 0xffffff00]}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x6c}, 0x1, 0xffffffffffffffe4}, 0x40040) 14.685940094s ago: executing program 4 (id=3027): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x0, 0x331, 0x70bd2a}, 0x14}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000009ac0)=ANY=[@ANYBLOB="d8010000110001082cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x1d8}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@gettaction={0x44, 0x32, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x44}}, 0x0) 14.428315084s ago: executing program 4 (id=3028): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r7 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x1) unshare(0x42000000) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x53aad4dcc29324f7, &(0x7f0000000200)=0x20, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$isdn(0x22, 0x3, 0x4) ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f0000000780)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x9, 0x2, 0x4, 0x6}, {0x3, 0x2, 0xe, 0xb3b, 0x3, 0x6}, 0x9, 0x0, 0x2d}}, @TCA_TBF_PTAB={0x404, 0x3, [0xfb, 0x2, 0x101, 0x5, 0x2, 0xa28, 0x4, 0x9, 0xf, 0xffff6d77, 0xe4, 0x280, 0x107, 0x8001, 0x2, 0x0, 0x7, 0xff, 0x4, 0x401, 0x9, 0x5, 0x3, 0x1, 0xfffffff5, 0x5, 0xb8, 0x7, 0x5, 0x1, 0x157, 0x26553de0, 0x4, 0x7810, 0x80, 0x4, 0x1, 0x5, 0x1, 0x4, 0xf, 0x1000, 0x9, 0x6, 0xfff, 0x42, 0x44, 0x9, 0x6, 0x1, 0x7f, 0x9, 0x9, 0x6, 0x40, 0xffff, 0x0, 0x3, 0x9, 0x3, 0x7, 0xd61a, 0x1, 0x4, 0x8000, 0x5400000, 0x8000, 0x6, 0x400, 0x8000, 0x401, 0x4, 0xffffffff, 0x5, 0x8000, 0x1000, 0xb5, 0x6, 0x7, 0x0, 0x800, 0x1, 0x7fff, 0x401, 0x0, 0x2, 0x6e9, 0x8, 0x6, 0x5, 0xfffffffa, 0xffffff83, 0x7f, 0x9, 0x5feecc8, 0xb, 0x1a48dadd, 0xa3b, 0xfffffffa, 0x4, 0xffff, 0xc5, 0xbfa, 0x80000001, 0x8, 0x6, 0xacc, 0x7, 0x9, 0x1, 0x8001, 0x9, 0xcd4d, 0x5, 0x0, 0x7ff, 0x5, 0x5fd, 0x8, 0x8001, 0x9, 0xfffffff7, 0x76, 0x400, 0x4, 0x5, 0x9, 0x6, 0x17, 0x6, 0x2, 0x4, 0x400000, 0x10001, 0xd17, 0x1, 0x89, 0x4, 0x4, 0x8, 0x8, 0x10000, 0x9, 0x1, 0xce3, 0x4, 0x9, 0x96, 0x4, 0x6, 0x9, 0x8001, 0xc, 0x3, 0x2, 0x8969, 0x100, 0x100, 0x101, 0x7, 0x10000, 0x0, 0xc, 0x9, 0xfffffff1, 0x1, 0x1, 0x6, 0x7, 0x34a00, 0x45, 0x800800, 0x2, 0x2, 0x7, 0x3800, 0x8, 0x6, 0x4, 0xfffffffb, 0x4, 0xb, 0xc, 0x5, 0x2, 0x4, 0x2000000, 0x2, 0x2, 0x5, 0x5, 0xfffffff8, 0xda, 0x9, 0x8, 0x2, 0x1, 0x4, 0x8, 0x7, 0x36a3, 0x2, 0x5, 0xa1, 0x94, 0x4a9b, 0x9, 0x5, 0x0, 0x3, 0x3, 0x4, 0xe, 0xd, 0xfffffff2, 0x10001, 0x8, 0x0, 0x200, 0x7d, 0x2, 0x4, 0x1, 0x7fff, 0x3, 0x6, 0x3ff, 0x10000, 0x10, 0x0, 0x6, 0x8, 0x6, 0x8, 0x8, 0xf, 0x81, 0x4, 0x400, 0x3, 0xc, 0x8, 0x3, 0x6, 0x2c, 0x8, 0x25, 0x0, 0xb9, 0x3, 0x330c, 0xfffffffe, 0xc, 0x3a8b, 0x9, 0x1]}]}}]}, 0x45c}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) 10.86027899s ago: executing program 3 (id=3036): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000001a00010028bd7000fedbdf24819c8000000000000000000014000200"], 0x30}}, 0x884) (async) recvmmsg(r0, &(0x7f0000009780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/249, 0xf9}, {&(0x7f0000000240)=""/195, 0xc3}], 0x2, &(0x7f0000000480)=""/169, 0xa9}, 0x6}, {{&(0x7f0000000540)=@can, 0x80, &(0x7f0000002780)=[{&(0x7f0000000380)=""/59, 0x3b}, {&(0x7f00000005c0)=""/190, 0xbe}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/78, 0x4e}, {&(0x7f0000001700)=""/115, 0x73}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x6, &(0x7f0000002800)=""/18, 0x12}, 0xb3}, {{&(0x7f0000002840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003bc0)=[{&(0x7f00000028c0)=""/205, 0xcd}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/70, 0x46}, {&(0x7f0000003a40)=""/78, 0x4e}, {&(0x7f0000003ac0)=""/234, 0xea}], 0x5, &(0x7f0000003c40)=""/54, 0x36}}, {{&(0x7f0000003c80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003d00)}, 0x10000}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000003d40)}, {&(0x7f0000003d80)=""/182, 0xb6}, {&(0x7f0000003e40)=""/8, 0x8}], 0x3, &(0x7f0000003ec0)=""/47, 0x2f}, 0xfffffff8}, {{&(0x7f0000003f00)=@nl=@unspec, 0x80, &(0x7f00000052c0)=[{&(0x7f0000003f80)=""/20, 0x14}, {&(0x7f0000003fc0)=""/203, 0xcb}, {&(0x7f00000040c0)=""/215, 0xd7}, {&(0x7f00000041c0)=""/255, 0xff}, {&(0x7f00000042c0)=""/4096, 0x1000}], 0x5, &(0x7f0000005340)=""/56, 0x38}, 0x6}, {{&(0x7f0000005380)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000009540)=[{&(0x7f0000005400)=""/4096, 0x1000}, {&(0x7f0000006400)=""/4096, 0x1000}, {&(0x7f0000007400)=""/4096, 0x1000}, {&(0x7f0000008400)=""/148, 0x94}, {&(0x7f00000084c0)=""/128, 0x80}, {&(0x7f0000008540)=""/4096, 0x1000}], 0x6}, 0xd}, {{&(0x7f00000095c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000009680)=[{&(0x7f0000009640)=""/64, 0x40}], 0x1, &(0x7f00000096c0)=""/164, 0xa4}, 0xf0}], 0x8, 0x2100, &(0x7f0000009980)={0x0, 0x989680}) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0) listen(r3, 0xfffffffc) (async) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000003d00)=0x0) process_vm_readv(r4, &(0x7f0000009d00)=[{&(0x7f0000003d40)}, {&(0x7f00000099c0)=""/52, 0x34}, {&(0x7f0000009a00)=""/222, 0xde}, {&(0x7f0000009b00)=""/134, 0x86}, {&(0x7f0000009bc0)=""/172, 0xac}, {&(0x7f0000009c80)=""/74, 0x4a}], 0x6, &(0x7f000000d200)=[{&(0x7f0000009d80)=""/94, 0x5e}, {&(0x7f0000009e00)=""/4096, 0x1000}, {&(0x7f000000ae00)=""/156, 0x9c}, {&(0x7f000000aec0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/4096, 0x1000}, {&(0x7f000000cec0)=""/147, 0x93}, {&(0x7f000000cf80)=""/223, 0xdf}, {&(0x7f000000d080)=""/158, 0x9e}, {&(0x7f000000d140)=""/135, 0x87}], 0x9, 0x0) (async) r5 = syz_clone(0x10040000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) r6 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0x20000003}) (async) ptrace$getregset(0x4205, r5, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/103, 0x67}) (async) ptrace$ARCH_GET_FS(0x1e, r5, &(0x7f0000000000), 0x1003) 10.235291267s ago: executing program 1 (id=3038): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x41a003) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x7) r2 = syz_io_uring_setup(0x5df, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0xfffffffc, 0x3e}, &(0x7f00000005c0)=0x0, &(0x7f00000001c0)=0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x20008040) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) socket(0x1, 0x803, 0x0) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="b1", 0x1, 0x8801, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 9.796382348s ago: executing program 3 (id=3039): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000001180)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, &(0x7f0000000640), 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff5aaf249011c25c76970000000109021200010800000a0904650700afce4d08"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x7, 0x100000000, 0x0, 0x85, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x1, 0xf012, 0x0, 0x0, 0x0, 0x2, 0x5da], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xf000000000000001, 0x7ffffffffffffffc, 0x4, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.405507687s ago: executing program 2 (id=3040): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0x2000004) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r4 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB="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", @ANYRESDEC=r3, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r1, &(0x7f0000000000)={0x18, 0x0, r5, {0x900000007}}, 0x18) r7 = syz_usb_connect(0x0, 0x68, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a1129510950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa00090582024000000000"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000080)={0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r8, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r8, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r8, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x40}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x102, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000340)=@nbd={'/dev/nbd', 0x0}, r6, &(0x7f0000000380)='./file0\x00') r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r9, 0xc0401289, 0x0) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000140)={0x10, 0xffffffffffffffda, r10}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, 0x0) 9.373448235s ago: executing program 1 (id=3041): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@hoplimit={{0x14, 0x29, 0x34, 0xecf0}}], 0x18}, 0x4008000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x2900, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 9.215472235s ago: executing program 1 (id=3043): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 9.072823919s ago: executing program 1 (id=3044): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x10e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000077249f08ec1888323a3f010203010902fc0001870000000904e67e"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) 6.620103085s ago: executing program 3 (id=3046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000780)="6641da4c627ff388262b6661ce877a32bb2ebed47fe3f8c37ccdfe39ff042426fcf20cedebd893bde17dfb82810c81604d0636059451e66862f55e97001806009fd8f07e19b3f28a5c450602db9d22bd088b696f0de208e225ce7d99da2234ebb77f8e5aa94f1f55f63955cc8369db80d369e54fc44f7d3b2b40f11e78dbfc646f1fe0b905f297d3ed11614c454d23bb41c952bb7fea2a229dbd3f413fa6364f84221640a17a3e2a7dffd9a1d55cf413971173e751c3553eeda76ee34e1554cc6f9c676a16457b9e3ac42f5a874637bc9314b199c4d5ff47e1732c70dbc31546f1", 0xe1}, {&(0x7f0000000140)="5c3b04e3f74226eca6f5e9b270dc7fda1c23f70fd3cf6219423216930de47fe1401f058ad17797658123704eb9f704c9", 0x30}, {&(0x7f0000000400)="6f63d7a1860226b4a4cffa7cdf183f39116dfdcdc2bf43bb918a9706d30dcaf01018d6b48fb73194c9", 0x29}], 0x3, 0x0, 0x0, 0x200080c0}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 6.413159872s ago: executing program 3 (id=3047): openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x68942, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$UHID_INPUT(r3, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x2c}], 0x1}, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$KVM_GET_NR_MMU_PAGES(r7, 0xae45, 0x1d3d) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000001480)={@in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x4e, 0x0, "b071ababb640374581f8922529befca78cd769ffe92aafa164dddf6598b3f667ce7ac04171f4e35176fe0a24feefd5384db8ad7fbe59f9a861e4de910f5955fdc52794eeede81d09ce3caff695b5724f"}, 0xd8) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x20, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x80, 0x9, 0x61e}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x6, 0x3, 0x1, 0x4000a, 0x1, 0x1, '\x00', r9, r7, 0x5, 0x6372, 0x2}, 0x50) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r8, @ANYBLOB="101000000000000008000d03e8000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r8], 0x40c}}, 0x0) 6.128215249s ago: executing program 2 (id=3048): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x20000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r3, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000002c0), 0x12) syz_clone(0x1200, &(0x7f0000004300), 0x0, &(0x7f0000004340), 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000b7020000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=0x632a, 0x4) r7 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="66643d7f4f097caddd577874f6c6cb4b71a80a65bb64ed6cc2cf0d5002c1de2e8b6687bc9036ae54d14601db39c53cb0830ee96a465c0b00"/68, @ANYRES32=r4, @ANYRES8=r6, @ANYRESDEC=0x0, @ANYRES64=r7, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(r8, &(0x7f0000009b40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x1, {0x8, 0x20000000, 0x0, {0x5, 0x7, 0x0, 0x80000001, 0x40000000000003, 0x1, 0x9ec, 0x35341061, 0x10000, 0xa593e9c1ca988eda, 0x9e7, 0xffffffffffffffff, 0x0, 0x3d, 0x200}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000007b40)=ANY=[@ANYRESHEX=r7, @ANYRESHEX=r8, @ANYBLOB="bb9d2c57d3b8f63152cee243a3c42d1de44d7adc7f8f57037f3696a3dbe08b05d846785569bb5de641e708ce8d89abc2c6a8060c48824429267b0f03e48d6c2535efce3d233b1cba8ce15482c18688e0925d0decad2a0128d1644bfa47f6e3dd39df2817b02bc4cbfe825d0cd248a105212336dfee49d0b8b3f4134745ca9c28bfdec2ecd1600acfec1eda01db4b9d3a3b3c2817064259be2ed195347c0a880d974c00de6e62be66149e6c5e3ffb4a7bd13fedd0d4fdbaec5162f4de26b2eb66797cb2fdaf209d61f88f0d8c40db5220b09856fc3e174dc0acb45062f9503c477277b570d807804f9abc", @ANYRES32=r4]) read$FUSE(r8, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r8, &(0x7f00000000c0)={0x18, 0x0, r9, {0x3}}, 0x18) 5.768364565s ago: executing program 3 (id=3049): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x80000003, {0x0, 0x7ffffffffffc, 0x2, 0x3, 0x30c7, 0xa2, {0x0, 0x2, 0x3, 0xa, 0x8000000000000001, 0x9, 0x1, 0x801, 0x42, 0x6000, 0x4, 0x0, 0x0, 0xffffffff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000206010200000000000000000100000005fa0300000000000900020073797a31"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0xdabe, 0x0, 0x1a, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ab0e1fac11d875397bdb22d00f4b320a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007003219002bfd000000000000000000af1e4ccfb7b3cad800000800", [0x0, 0x2000000000001]}}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 5.490234934s ago: executing program 3 (id=3051): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x2000000000000d23, 0x4000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f0000001000)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @remote}, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/53}]}, 0x3ff}, {{&(0x7f00000001c0)=@tipc=@id, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)=""/41}, {&(0x7f0000000400)=""/160}, {&(0x7f0000000340)=""/62}, {&(0x7f00000004c0)=""/73}, {&(0x7f0000000600)=""/201}, {&(0x7f0000000540)=""/15}, {&(0x7f0000000580)=""/1}, {&(0x7f0000000700)=""/189}, {&(0x7f00000007c0)=""/168}, {&(0x7f0000000880)=""/145}], 0x0, &(0x7f0000000a00)=""/146}, 0x4}, {{&(0x7f0000000ac0)=@isdn, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/26}, {&(0x7f0000000b80)=""/232}, {&(0x7f0000000c80)=""/88}, {&(0x7f0000000d00)=""/46}, {&(0x7f0000000d40)=""/224}, {&(0x7f0000000e40)=""/111}], 0x0, &(0x7f0000000f40)=""/168}}], 0xde0fddea64781a, 0x10002, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = socket$inet(0x2, 0x1, 0x100) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff0000000000000000020013"], 0xd8}}, 0x0) r7 = syz_io_uring_setup(0x1911, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r7}) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$printer(r10, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000001c0)={0x40, 0x30, 0x4, "02ab0e4b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r7, 0xa3d, 0x0, 0x0, 0x0, 0xff39) setsockopt$sock_int(r5, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10) 5.368375776s ago: executing program 1 (id=3052): syz_usb_connect(0x0, 0x33, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007b8955403a0976245b0d0102030109022100010d20000009040000000e0100000f2402010102", @ANYRES64], 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 5.177120917s ago: executing program 5 (id=3054): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00') read$FUSE(r1, &(0x7f00000061c0)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f00000061c0)={0x2020}, 0x2020) recvmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)=""/171, 0xab}, {&(0x7f00000001c0)=""/172, 0xac}], 0x2, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x40002101) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x8, 0xfffffffffffffffd, &(0x7f0000000040)=0x18) (async) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x8, 0xfffffffffffffffd, &(0x7f0000000040)=0x18) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 3.368164706s ago: executing program 1 (id=3055): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1d, 0x0, 0xfff, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x86, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000190001090000000000000000021800000002fd010000000008000100ac14140008000500ac1e0101100016800c0001000000000000000005060015"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0xd}, 0x8) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r8, &(0x7f0000000180)='./control\x00', 0xa4000960) 2.91827796s ago: executing program 2 (id=3056): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000600)=@x86={0xfd, 0x0, 0x8, 0x0, 0x1, 0x0, 0x8, 0x8b, 0x5, 0xf, 0x5, 0x0, 0x0, 0x9, 0x2b, 0x8d, 0x0, 0x2, 0x45, '\x00', 0x0, 0xf}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000580)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000300), 0x2, r8}) (async) r11 = gettid() ptrace$setopts(0x4206, r11, 0x5, 0x20) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000040)=[0x2], &(0x7f0000000240)=[r9, r10], &(0x7f0000000340)}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r13 = inotify_init1(0x0) inotify_add_watch(r13, &(0x7f0000000000)='.\x00', 0x2000775) (async) write$binfmt_elf64(r12, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, 0x3e, 0xfffbffee, 0x294, 0x40, 0xcf, 0xf, 0x8f2c, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1c8, 0xe6, 0xffffffffffffffff, 0x3}], "", ['\x00']}, 0x178) (async) close(r12) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async) r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$dri(&(0x7f0000000180), 0x484, 0x650001) (async) close_range(r14, 0xffffffffffffffff, 0x0) 2.560843644s ago: executing program 2 (id=3057): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) copy_file_range(r1, 0x0, r1, 0x0, 0x8, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f108b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e97030000000000000000000000000081e1df1a0000008dc5fb510162", 0xd8}], 0x1}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r5, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x52800, 0x0) read$nci(r8, &(0x7f0000002780)=""/3, 0x3) request_key(&(0x7f0000001000)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000300)='\xa7x{8\xb8\x81\xae$\xbb\x17\x90\xaa\x96\xd4\x9b\xd8\x87\x84\xca\xf6\x03;\xd2!?,J\r\x94EA\x11\xc2\n\xc4t\xad\xc4\xe7*<\x87\xb5H\xfb\xf6j\x12\xed\x8f\x9caU^\xffW\xa1\x06\xcc\xc0\xc5\t\x86\xf9\xa5\x15\x95&\x8eF\xf3\x94A\xaf\xddY\x84\xe0\xde\nh\x11{\x05\xa4pW\xca\xec\xc4\x9e\xc0/\xf3\xcb.\x19\xcfM\xe8\xc9\x9e\x97S', 0x0) 1.804072527s ago: executing program 5 (id=3058): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r4, &(0x7f00000001c0)=""/110, 0x6e, 0x40020121, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010040000000000000000700000828000180080006000000e4ff130004"], 0x3c}, 0x1, 0x0, 0x0, 0xc00c4}, 0x14) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000) 1.584517606s ago: executing program 5 (id=3059): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a48000000060a0b040000000000000000020000001c0004801800018008000100647570000c000280080001400000008c0900010073797a30000000000900020073797a32"], 0x70}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a48000000060a0b040000000000000000020000001c0004801800018008000100647570000c000280080001400000008c0900010073797a30000000000900020073797a32"], 0x70}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x9, 0x8, 0xfffffffa, 0x4003}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x9, 0x8, 0xfffffffa, 0x4003}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], 0x0, 0x1, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x601, 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000580)}) r5 = open(0x0, 0x0, 0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x378, 0xa4, 0x27c, 0xfeffffff, 0x138, 0x0, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xa4}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xe, 0x0, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) (async) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x378, 0xa4, 0x27c, 0xfeffffff, 0x138, 0x0, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xa4}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xe, 0x0, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x140) renameat2(r5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x4) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000140)='./file3\x00', 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000400)={0x1c, 0x0, 0x0, 0x0}) renameat2(0xffffffffffffffff, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) (async) renameat2(0xffffffffffffffff, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffa, 0x20031, 0xffffffffffffffff, 0x0) 1.103419022s ago: executing program 5 (id=3060): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x80000003, {0x0, 0x7ffffffffffc, 0x2, 0x3, 0x30c7, 0xa2, {0x0, 0x2, 0x3, 0xa, 0x8000000000000001, 0x9, 0x1, 0x801, 0x42, 0x6000, 0x4, 0x0, 0x0, 0xffffffff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000206010200000000000000000100000005fa0300000000000900020073797a31"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0xfe01, 0x0, 0x1a, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ab0e1fac11d875397bdb22d00f4b320a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007003219002bfd000000000000000000af1e4ccfb7b3cad800000800", [0x0, 0x2000000000001]}}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.012407888s ago: executing program 5 (id=3061): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x800) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) mmap(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0xb59db000) 932.243162ms ago: executing program 5 (id=3062): r0 = socket(0x8000000010, 0x2, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045518, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000180)) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000280)={r6}, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={r6, @in={{0x2, 0x4e21, @empty}}, 0x7ff, 0xf800}, &(0x7f0000000000)=0x90) (async) write(r0, &(0x7f00000002c0)="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", 0xfc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, 0x0, 0x0, 0x2000c000, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x20, {0x2, 0x0, @multicast1=0xe000cc02}}) ftruncate(0xffffffffffffffff, 0x88801) sched_setscheduler(0x0, 0x2, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 387.733602ms ago: executing program 2 (id=3063): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@hoplimit={{0x14, 0x29, 0x34, 0xecf0}}], 0x18}, 0x4008000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0xff80, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 0s ago: executing program 2 (id=3064): socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x7fff, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xc41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff951d, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x5, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x76e, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x45d0852c, 0xffffffff, 0x4, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x6, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400, 0xd}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040), &(0x7f0000000080)) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r3, 0x0, 0x0, 0x0, 0x80000}) kernel console output (not intermixed with test programs): 46d:0870 [ 824.927105][ T5936] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 825.108904][ T5936] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 825.138268][ T5936] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 825.176536][ T5936] usb 4-1: config 0 has no interface number 0 [ 825.188809][ T5936] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 825.204639][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.220307][ T5936] usb 4-1: Product: syz [ 825.224837][ T5936] usb 4-1: Manufacturer: syz [ 825.235953][ T5936] usb 4-1: SerialNumber: syz [ 825.246599][ T5936] usb 4-1: config 0 descriptor?? [ 825.453245][T16163] ptrace attach of "./syz-executor exec"[7601] was attempted by "./syz-executor exec"[16163] [ 825.975421][ T5929] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 826.044583][ T5929] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register: ffffffe0 [ 826.074188][ T5929] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 826.168763][T16172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.178093][T16172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.245788][ T5929] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffe0 [ 826.430075][ T5929] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 826.920425][T16156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.942105][ T5929] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 826.956435][T16156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.090978][ T5936] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 827.111669][ T5936] usb 4-1: No valid video chain found. [ 827.133862][ T5929] asix 3-1:0.0 (unnamed net_device) (uninitialized): Could not register MDIO bus (err -5) [ 827.180279][ T5936] usb 4-1: USB disconnect, device number 10 [ 827.186787][ T5929] asix 3-1:0.0: probe with driver asix failed with error -5 [ 827.229688][ T5929] usb 3-1: USB disconnect, device number 120 [ 827.785838][ T5929] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 827.945983][ T5929] usb 2-1: device descriptor read/64, error -71 [ 827.992720][T16179] kvm: kvm [16178]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8aa6 [ 828.075432][T16179] kvm: kvm [16178]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x733e [ 828.119863][T16179] kvm: kvm [16178]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xdb9f [ 828.206147][ T5929] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 828.406289][ T5929] usb 2-1: device descriptor read/64, error -71 [ 828.510728][ T5956] usb 5-1: USB disconnect, device number 11 [ 828.526303][ T5929] usb usb2-port1: attempt power cycle [ 828.548016][T16190] vivid-000: disconnect [ 829.092407][T16181] vivid-000: reconnect [ 829.345991][ T5929] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 829.450861][ T5929] usb 2-1: device descriptor read/8, error -71 [ 830.018992][T16207] netlink: 'syz.2.2725': attribute type 9 has an invalid length. [ 830.027318][T16207] netlink: 212160 bytes leftover after parsing attributes in process `syz.2.2725'. [ 830.239308][ T5929] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 830.311660][ T5929] usb 2-1: device descriptor read/8, error -71 [ 830.455989][ T5929] usb usb2-port1: unable to enumerate USB device [ 831.376405][T16226] kvm: user requested TSC rate below hardware speed [ 831.860705][T16237] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 832.036184][ T5956] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 832.077542][T16238] kvm: kvm [16235]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xe889 [ 832.102511][T16238] kvm: kvm [16235]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2465 [ 832.219560][T16253] syzkaller1: entered promiscuous mode [ 832.225215][T16253] syzkaller1: entered allmulticast mode [ 832.231081][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 832.287914][T16238] kvm: kvm [16235]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x9f7f [ 832.300880][T16238] kvm: kvm [16235]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xab7f [ 832.312127][T16238] kvm: kvm [16235]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xda5d [ 832.368328][ T5956] usb 2-1: unable to get BOS descriptor or descriptor too short [ 832.385799][ T5956] usb 2-1: no configurations [ 832.395288][ T5956] usb 2-1: can't read configurations, error -22 [ 833.696026][ T5936] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 833.860944][ T5936] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 833.904018][ T5936] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 833.961580][ T5936] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 833.989721][ T5936] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 834.053147][ T5936] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 834.093716][ T5936] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 834.120711][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 834.175150][ T5936] usb 3-1: Product: syz [ 834.253015][ T5936] usb 3-1: Manufacturer: syz [ 834.284058][ T5936] cdc_wdm 3-1:1.0: skipping garbage [ 834.298589][ T5936] cdc_wdm 3-1:1.0: skipping garbage [ 834.335824][ T5956] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 834.348232][ T5936] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 834.385806][ T5936] cdc_wdm 3-1:1.0: Unknown control protocol [ 834.627554][ T5956] usb 4-1: config 0 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.649416][ T5956] usb 4-1: config 0 interface 0 altsetting 238 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.665437][ T5956] usb 4-1: config 0 interface 0 has no altsetting 0 [ 834.672600][ T5956] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 834.682485][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.738186][ T5956] usb 4-1: config 0 descriptor?? [ 835.221320][ T5956] acrux 0003:1A34:F705.005F: unknown global tag 0xd [ 835.244124][ T5956] acrux 0003:1A34:F705.005F: item 0 0 1 13 parsing failed [ 835.282841][ T5956] acrux 0003:1A34:F705.005F: parse failed [ 835.296202][ T5956] acrux 0003:1A34:F705.005F: probe with driver acrux failed with error -22 [ 835.430590][ T30] audit: type=1326 audit(1754388213.425:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2445f8eb69 code=0x7ffc0000 [ 835.506419][ T30] audit: type=1326 audit(1754388213.455:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2445f8eb69 code=0x7ffc0000 [ 835.529462][ T30] audit: type=1326 audit(1754388213.475:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2445f8eb69 code=0x7ffc0000 [ 835.552643][ T30] audit: type=1326 audit(1754388213.475:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2445f8eb69 code=0x7ffc0000 [ 835.576413][ T30] audit: type=1326 audit(1754388213.475:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f2445f8eb69 code=0x7ffc0000 [ 835.599511][ T30] audit: type=1326 audit(1754388213.505:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2445f8eb69 code=0x7ffc0000 [ 835.622829][ T30] audit: type=1326 audit(1754388213.505:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2445f8eb69 code=0x7ffc0000 [ 835.674168][ T30] audit: type=1326 audit(1754388213.505:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2445f8eb69 code=0x7ffc0000 [ 835.841960][ T30] audit: type=1326 audit(1754388213.505:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2445f8eb69 code=0x7ffc0000 [ 835.879003][ T30] audit: type=1326 audit(1754388213.505:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16274 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2445f8eb69 code=0x7ffc0000 [ 836.016092][ T5956] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 836.280476][ T5956] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 836.285993][ T5936] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 836.330407][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.366196][ T5956] usb 2-1: Product: syz [ 836.381774][ T5956] usb 2-1: Manufacturer: syz [ 836.394479][ T5956] usb 2-1: SerialNumber: syz [ 836.453131][ T5956] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 836.485459][ T5936] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 836.504378][ T5975] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 836.537966][ T5936] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 836.615265][ T5936] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 836.664665][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 836.690834][ T5936] usb 5-1: SerialNumber: syz [ 836.877016][ T5945] usb 2-1: USB disconnect, device number 33 [ 837.136021][ T5956] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 837.157001][T16298] kvm: kvm [16297]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8aa6 [ 837.199219][T16298] kvm: kvm [16297]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x733e [ 837.213787][T16298] kvm: kvm [16297]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xdb9f [ 837.273019][ T24] usb 4-1: USB disconnect, device number 11 [ 837.305790][ T5956] usb 6-1: Using ep0 maxpacket: 16 [ 837.315017][ T5956] usb 6-1: config 7 has an invalid interface number: 148 but max is 0 [ 837.362391][ T5956] usb 6-1: config 7 has no interface number 0 [ 837.371589][ T5929] usb 3-1: USB disconnect, device number 121 [ 837.399215][ T5956] usb 6-1: config 7 interface 148 altsetting 6 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 837.512558][ T5956] usb 6-1: config 7 interface 148 has no altsetting 0 [ 837.525356][ T5956] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=58.61 [ 837.548264][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.576291][ T5956] usb 6-1: Product: syz [ 837.580536][ T5956] usb 6-1: Manufacturer: syz [ 837.585280][ T5956] usb 6-1: SerialNumber: syz [ 837.596288][ T5975] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 837.603737][ T5975] ath9k_htc: Failed to initialize the device [ 837.639010][ T5936] usb 5-1: 0:2 : does not exist [ 837.665256][ T5945] usb 2-1: ath9k_htc: USB layer deinitialized [ 837.717551][ T5936] usb 5-1: USB disconnect, device number 12 [ 837.795014][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 837.836657][T16304] netlink: 'syz.5.2754': attribute type 21 has an invalid length. [ 837.860341][T16304] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2754'. [ 837.889340][T16304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.906003][T16304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.919360][ T5956] usb 6-1: probing VID:PID(0424:012C) [ 837.932653][ T5956] usb 6-1: vub300 testing UNKNOWN EndPoint(0) 01 [ 837.939847][ T5956] usb 6-1: vub300 ignoring EndPoint(0) 01 [ 837.945965][ T5956] usb 6-1: vub300 testing UNKNOWN EndPoint(1) 05 [ 837.952724][ T5956] usb 6-1: vub300 ignoring EndPoint(1) 05 [ 837.960382][ T5956] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 837.970875][ T5956] vub300 6-1:7.148: probe with driver vub300 failed with error -22 [ 837.983921][ T5956] usb 6-1: USB disconnect, device number 27 [ 839.015820][ T5936] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 839.244969][T16356] FAULT_INJECTION: forcing a failure. [ 839.244969][T16356] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 839.391048][T16356] CPU: 0 UID: 0 PID: 16356 Comm: syz.2.2769 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 839.391082][T16356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 839.391095][T16356] Call Trace: [ 839.391103][T16356] [ 839.391111][T16356] dump_stack_lvl+0x189/0x250 [ 839.391138][T16356] ? __pfx____ratelimit+0x10/0x10 [ 839.391157][T16356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 839.391178][T16356] ? __pfx__printk+0x10/0x10 [ 839.391204][T16356] ? fs_reclaim_acquire+0x7d/0x100 [ 839.391239][T16356] should_fail_ex+0x414/0x560 [ 839.391271][T16356] prepare_alloc_pages+0x213/0x610 [ 839.391307][T16356] __alloc_frozen_pages_noprof+0x123/0x370 [ 839.391328][T16356] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 839.391362][T16356] alloc_pages_bulk_noprof+0x560/0x710 [ 839.391395][T16356] ? alloc_pages_noprof+0xbe/0x190 [ 839.391424][T16356] kasan_populate_vmalloc+0xba/0x1a0 [ 839.391452][T16356] alloc_vmap_area+0xd51/0x1490 [ 839.391490][T16356] ? __pfx_alloc_vmap_area+0x10/0x10 [ 839.391512][T16356] ? __kasan_kmalloc+0x93/0xb0 [ 839.391543][T16356] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 839.391569][T16356] ? __get_vm_area_node+0x13f/0x300 [ 839.391592][T16356] ? copy_process+0x54b/0x3c00 [ 839.391611][T16356] __get_vm_area_node+0x1f8/0x300 [ 839.391641][T16356] __vmalloc_node_range_noprof+0x301/0x12f0 [ 839.391667][T16356] ? copy_process+0x54b/0x3c00 [ 839.391694][T16356] ? percpu_ref_get_many+0x19/0x140 [ 839.391720][T16356] ? percpu_ref_get_many+0x19/0x140 [ 839.391756][T16356] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 839.391785][T16356] ? memcpy_and_pad+0x48/0x80 [ 839.391806][T16356] __vmalloc_node_noprof+0xc2/0x110 [ 839.391831][T16356] ? copy_process+0x54b/0x3c00 [ 839.391848][T16356] ? copy_process+0x54b/0x3c00 [ 839.391868][T16356] dup_task_struct+0x3e7/0x860 [ 839.391892][T16356] copy_process+0x54b/0x3c00 [ 839.391935][T16356] ? __pfx_copy_process+0x10/0x10 [ 839.391964][T16356] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 839.391990][T16356] vhost_task_create+0x1c4/0x290 [ 839.392017][T16356] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 839.392043][T16356] ? __pfx_vhost_task_create+0x10/0x10 [ 839.392071][T16356] ? __pfx_vhost_task_fn+0x10/0x10 [ 839.392126][T16356] kvm_mmu_post_init_vm+0x14c/0x300 [ 839.392157][T16356] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 839.392186][T16356] ? __mutex_trylock_common+0x153/0x260 [ 839.392207][T16356] ? __pfx___mutex_trylock_common+0x10/0x10 [ 839.392227][T16356] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 839.392252][T16356] ? rcu_is_watching+0x15/0xb0 [ 839.392270][T16356] ? trace_contention_end+0x39/0x120 [ 839.392290][T16356] ? look_up_lock_class+0x74/0x170 [ 839.392309][T16356] ? register_lock_class+0x51/0x320 [ 839.392339][T16356] ? __lock_acquire+0xab9/0xd20 [ 839.392389][T16356] kvm_vcpu_ioctl+0x95c/0xe90 [ 839.392418][T16356] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 839.392438][T16356] ? __lock_acquire+0xab9/0xd20 [ 839.392480][T16356] ? __fget_files+0x2a/0x420 [ 839.392509][T16356] ? __fget_files+0x2a/0x420 [ 839.392540][T16356] ? __fget_files+0x3a0/0x420 [ 839.392565][T16356] ? __fget_files+0x2a/0x420 [ 839.392594][T16356] ? bpf_lsm_file_ioctl+0x9/0x20 [ 839.392616][T16356] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 839.392638][T16356] __se_sys_ioctl+0xf9/0x170 [ 839.392662][T16356] do_syscall_64+0xfa/0x3b0 [ 839.392680][T16356] ? lockdep_hardirqs_on+0x9c/0x150 [ 839.392697][T16356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.392714][T16356] ? clear_bhb_loop+0x60/0xb0 [ 839.392736][T16356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.392753][T16356] RIP: 0033:0x7efe9958eb69 [ 839.392770][T16356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 839.392786][T16356] RSP: 002b:00007efe9a33d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 839.392805][T16356] RAX: ffffffffffffffda RBX: 00007efe997b6080 RCX: 00007efe9958eb69 [ 839.392819][T16356] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 839.392830][T16356] RBP: 00007efe9a33d090 R08: 0000000000000000 R09: 0000000000000000 [ 839.392841][T16356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.392852][T16356] R13: 0000000000000000 R14: 00007efe997b6080 R15: 00007efe998dfa28 [ 839.392879][T16356] [ 839.825776][ T5936] usb 4-1: Using ep0 maxpacket: 16 [ 839.850298][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.862191][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 839.887656][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 839.926382][T16356] syz.2.2769: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 840.175337][ T5936] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 840.202862][T16356] CPU: 0 UID: 0 PID: 16356 Comm: syz.2.2769 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 840.202895][T16356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 840.202910][T16356] Call Trace: [ 840.202920][T16356] [ 840.202930][T16356] dump_stack_lvl+0x189/0x250 [ 840.202966][T16356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 840.203001][T16356] ? __pfx__printk+0x10/0x10 [ 840.203032][T16356] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 840.203059][T16356] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 840.203088][T16356] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 840.203118][T16356] warn_alloc+0x214/0x310 [ 840.203151][T16356] ? kasan_quarantine_put+0xdd/0x220 [ 840.203178][T16356] ? lockdep_hardirqs_on+0x9c/0x150 [ 840.203203][T16356] ? __pfx_warn_alloc+0x10/0x10 [ 840.203248][T16356] ? kfree+0x18e/0x440 [ 840.203272][T16356] ? __get_vm_area_node+0x13f/0x300 [ 840.203305][T16356] ? copy_process+0x54b/0x3c00 [ 840.203329][T16356] ? __get_vm_area_node+0x211/0x300 [ 840.203367][T16356] __vmalloc_node_range_noprof+0x326/0x12f0 [ 840.203418][T16356] ? percpu_ref_get_many+0x19/0x140 [ 840.203451][T16356] ? percpu_ref_get_many+0x19/0x140 [ 840.203500][T16356] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 840.203536][T16356] ? memcpy_and_pad+0x48/0x80 [ 840.203563][T16356] __vmalloc_node_noprof+0xc2/0x110 [ 840.203595][T16356] ? copy_process+0x54b/0x3c00 [ 840.203616][T16356] ? copy_process+0x54b/0x3c00 [ 840.203643][T16356] dup_task_struct+0x3e7/0x860 [ 840.203673][T16356] copy_process+0x54b/0x3c00 [ 840.203730][T16356] ? __pfx_copy_process+0x10/0x10 [ 840.203768][T16356] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 840.203799][T16356] vhost_task_create+0x1c4/0x290 [ 840.203827][T16356] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 840.203860][T16356] ? __pfx_vhost_task_create+0x10/0x10 [ 840.203896][T16356] ? __pfx_vhost_task_fn+0x10/0x10 [ 840.203943][T16356] kvm_mmu_post_init_vm+0x14c/0x300 [ 840.203979][T16356] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 840.204014][T16356] ? __mutex_trylock_common+0x153/0x260 [ 840.204039][T16356] ? __pfx___mutex_trylock_common+0x10/0x10 [ 840.204061][T16356] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 840.204092][T16356] ? rcu_is_watching+0x15/0xb0 [ 840.204114][T16356] ? trace_contention_end+0x39/0x120 [ 840.204137][T16356] ? look_up_lock_class+0x74/0x170 [ 840.204162][T16356] ? register_lock_class+0x51/0x320 [ 840.204199][T16356] ? __lock_acquire+0xab9/0xd20 [ 840.204275][T16356] kvm_vcpu_ioctl+0x95c/0xe90 [ 840.204311][T16356] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 840.204336][T16356] ? __lock_acquire+0xab9/0xd20 [ 840.204388][T16356] ? __fget_files+0x2a/0x420 [ 840.204422][T16356] ? __fget_files+0x2a/0x420 [ 840.204452][T16356] ? __fget_files+0x3a0/0x420 [ 840.204483][T16356] ? __fget_files+0x2a/0x420 [ 840.204520][T16356] ? bpf_lsm_file_ioctl+0x9/0x20 [ 840.204547][T16356] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 840.204574][T16356] __se_sys_ioctl+0xf9/0x170 [ 840.204603][T16356] do_syscall_64+0xfa/0x3b0 [ 840.204624][T16356] ? lockdep_hardirqs_on+0x9c/0x150 [ 840.204645][T16356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.204667][T16356] ? clear_bhb_loop+0x60/0xb0 [ 840.204693][T16356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.204714][T16356] RIP: 0033:0x7efe9958eb69 [ 840.204735][T16356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.204754][T16356] RSP: 002b:00007efe9a33d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 840.204777][T16356] RAX: ffffffffffffffda RBX: 00007efe997b6080 RCX: 00007efe9958eb69 [ 840.204793][T16356] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 840.204807][T16356] RBP: 00007efe9a33d090 R08: 0000000000000000 R09: 0000000000000000 [ 840.204821][T16356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.204834][T16356] R13: 0000000000000000 R14: 00007efe997b6080 R15: 00007efe998dfa28 [ 840.204868][T16356] [ 840.204890][T16356] Mem-Info: [ 840.224249][ T5936] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 840.227209][T16356] active_anon:14965 inactive_anon:0 isolated_anon:0 [ 840.227209][T16356] active_file:16701 inactive_file:4127 isolated_file:0 [ 840.227209][T16356] unevictable:768 dirty:83 writeback:0 [ 840.227209][T16356] slab_reclaimable:8548 slab_unreclaimable:127165 [ 840.227209][T16356] mapped:31299 shmem:7357 pagetables:1725 [ 840.227209][T16356] sec_pagetables:0 bounce:0 [ 840.227209][T16356] kernel_misc_reclaimable:0 [ 840.227209][T16356] free:1304189 free_pcp:16740 free_cma:0 [ 840.227314][T16356] Node 0 active_anon:59860kB inactive_anon:0kB active_file:66784kB inactive_file:16376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125176kB dirty:332kB writeback:0kB shmem:27892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB kernel_stack:12580kB pagetables:6752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 840.227373][T16356] Node 1 active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 840.227428][T16356] Node 0 DMA free:15356kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 840.227492][T16356] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 840.273540][ T5936] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 840.276391][T16356] [ 840.290145][ T5936] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 840.290177][ T5936] usb 4-1: Manufacturer: syz [ 840.335859][T16356] Node 0 [ 840.364390][ T5936] usb 4-1: config 0 descriptor?? [ 840.415922][T16356] DMA32 free:1316596kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60020kB inactive_anon:0kB active_file:66568kB inactive_file:15148kB unevictable:1536kB writepending:232kB present:3129332kB managed:2557600kB mlocked:0kB bounce:0kB free_pcp:47972kB local_pcp:27760kB free_cma:0kB [ 840.834936][ T5956] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 840.904333][T16356] lowmem_reserve[]: 0 0 1 1 1 [ 840.909437][T16356] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:140kB inactive_anon:0kB active_file:216kB inactive_file:1228kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 841.016112][T16356] lowmem_reserve[]: 0 0 0 0 0 [ 841.021147][T16356] Node 1 Normal free:3885408kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21208kB local_pcp:10448kB free_cma:0kB [ 841.065763][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 841.106631][T16364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.115261][T16376] binder: 16375:16376 unknown command 0 [ 841.121454][ T5936] rc_core: IR keymap rc-hauppauge not found [ 841.135477][ T5936] Registered IR keymap rc-empty [ 841.136370][T16364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.146048][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 841.152225][T16356] lowmem_reserve[]: [ 841.167902][T16376] binder: 16375:16376 ioctl c0306201 200000000080 returned -22 [ 841.178310][T16356] 0 [ 841.179939][ T5956] usb 2-1: unable to get BOS descriptor or descriptor too short [ 841.191402][T16376] binder: 16375:16376 ioctl c0306201 200000000280 returned -11 [ 841.201245][ T5956] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 841.206068][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 841.209540][T16356] 0 [ 841.316869][ T5936] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 841.556891][ T5936] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input50 [ 841.568422][ T5956] usb 2-1: can't read configurations, error -71 [ 841.589252][T16356] 0 0 0 [ 841.592208][T16356] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 841.619123][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 841.630934][T16356] Node 0 DMA32: 1008*4kB (UM) 907*8kB (UE) 617*16kB (UME) 564*32kB (UME) 423*64kB (UME) 194*128kB (UME) 105*256kB (UME) 46*512kB (UME) 25*1024kB (UME) 11*2048kB (UME) 276*4096kB (M) = 1320168kB [ 841.655821][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 841.667555][T16356] Node 0 Normal: 2*4kB (M) 2*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 841.682310][T16356] Node 1 Normal: 198*4kB (UME) 55*8kB (UME) 39*16kB (UME) 147*32kB (UE) 43*64kB (UME) 6*128kB (UME) 4*256kB (UME) 3*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 944*4096kB (M) = 3885408kB [ 841.702093][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 841.722348][T16356] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 841.888844][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 841.896293][T16356] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 841.932800][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 841.955852][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 841.980676][T16356] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 841.991271][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 841.999925][T16356] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 842.011611][T16356] 28524 total pagecache pages [ 842.016927][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 842.025429][T16356] 0 pages in swap cache [ 842.037278][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 842.054879][T16356] Free swap = 124996kB [ 842.067619][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 842.103986][T16356] Total swap = 124996kB [ 842.226093][T16356] 2097051 pages RAM [ 842.230179][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 842.250348][T16356] 0 pages HighMem/MovableOnly [ 842.255181][T16356] 425625 pages reserved [ 842.288909][ T5936] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version c8 [ 842.375331][T16356] 0 pages cma reserved [ 842.379811][ T5936] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 842.534652][ T5936] usb 4-1: USB disconnect, device number 12 [ 843.947253][ T30] kauditd_printk_skb: 380 callbacks suppressed [ 843.947276][ T30] audit: type=1326 audit(1754388221.945:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16411 comm="syz.3.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2445f8eb69 code=0x7ffc0000 [ 844.067642][ T5929] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 844.230277][ T30] audit: type=1326 audit(1754388221.945:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16411 comm="syz.3.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2445f8eb69 code=0x7ffc0000 [ 844.230341][ T30] audit: type=1326 audit(1754388222.055:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16411 comm="syz.3.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f2445f8eb69 code=0x7ffc0000 [ 844.230392][ T30] audit: type=1326 audit(1754388222.055:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16411 comm="syz.3.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2445f8eb69 code=0x7ffc0000 [ 844.230438][ T30] audit: type=1326 audit(1754388222.055:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16411 comm="syz.3.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2445f8eb69 code=0x7ffc0000 [ 844.230557][ T30] audit: type=1326 audit(1754388222.115:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16411 comm="syz.3.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2445f8eb69 code=0x7ffc0000 [ 844.230607][ T30] audit: type=1326 audit(1754388222.115:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16411 comm="syz.3.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2445f8eb69 code=0x7ffc0000 [ 844.230655][ T30] audit: type=1326 audit(1754388222.115:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16411 comm="syz.3.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2445f8eb69 code=0x7ffc0000 [ 844.230702][ T30] audit: type=1326 audit(1754388222.115:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16411 comm="syz.3.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2445f8eb69 code=0x7ffc0000 [ 844.230749][ T30] audit: type=1326 audit(1754388222.115:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16411 comm="syz.3.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2445f8eb69 code=0x7ffc0000 [ 844.294676][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 844.314936][ T5929] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 844.587457][ T5936] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 844.745876][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 844.747719][ T5936] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 844.747754][ T5936] usb 4-1: config 0 has no interface number 0 [ 844.747787][ T5936] usb 4-1: config 0 interface 105 has no altsetting 0 [ 844.749859][ T5936] usb 4-1: New USB device found, idVendor=0f11, idProduct=1040, bcdDevice=61.49 [ 844.749894][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.749919][ T5936] usb 4-1: Product: syz [ 844.749938][ T5936] usb 4-1: Manufacturer: syz [ 844.749957][ T5936] usb 4-1: SerialNumber: syz [ 844.753411][ T5936] usb 4-1: config 0 descriptor?? [ 844.820563][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.820597][ T5929] usb 5-1: Product: syz [ 844.820612][ T5929] usb 5-1: Manufacturer: syz [ 844.820624][ T5929] usb 5-1: SerialNumber: syz [ 844.840416][ T5929] r8152-cfgselector 5-1: Unknown version 0x0000 [ 844.840451][ T5929] r8152-cfgselector 5-1: config 0 descriptor?? [ 844.977007][ T5936] ldusb 4-1:0.105: Interrupt in endpoint not found [ 844.981460][ T5936] usb 4-1: USB disconnect, device number 13 [ 845.022674][ T5866] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 845.028834][ T5866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 845.030553][ T5866] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 845.032372][ T5866] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 845.033133][ T5866] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 845.427078][T16420] binder: 16419:16420 unknown command 0 [ 845.427107][T16420] binder: 16419:16420 ioctl c0306201 200000000080 returned -22 [ 845.463059][T16420] binder: 16419:16420 ioctl c0306201 200000000280 returned -11 [ 846.065443][T16426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2787'. [ 846.196192][T16426] ipvlan1: entered promiscuous mode [ 846.228905][T16418] chnl_net:caif_netlink_parms(): no params data found [ 847.117963][ T5866] Bluetooth: hci5: command tx timeout [ 847.791622][ T5929] r8152-cfgselector 5-1: Unknown version 0x0000 [ 847.803225][ T5929] r8152-cfgselector 5-1: bad CDC descriptors [ 847.855368][T16418] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.867322][ T5929] r8152-cfgselector 5-1: USB disconnect, device number 13 [ 847.882585][T16418] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.931664][T16418] bridge_slave_0: entered allmulticast mode [ 847.958520][T16418] bridge_slave_0: entered promiscuous mode [ 848.006931][T16418] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.015764][ T5975] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 848.031122][T16418] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.048355][T16418] bridge_slave_1: entered allmulticast mode [ 848.061601][T16418] bridge_slave_1: entered promiscuous mode [ 848.158214][ T5975] usb 3-1: device descriptor read/64, error -71 [ 848.203054][T16418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.208004][T16452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 848.221241][T16418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.428652][ T5975] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 848.477713][T16418] team0: Port device team_slave_0 added [ 848.497298][T16418] team0: Port device team_slave_1 added [ 848.585752][ T5975] usb 3-1: device descriptor read/64, error -71 [ 848.629482][T16418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.637023][T16418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.671886][T16418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.703699][ T5975] usb usb3-port1: attempt power cycle [ 848.737089][T16418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.772840][T16418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.934646][T16418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.068949][T16467] binder: 16465:16467 unknown command 0 [ 849.074743][T16467] binder: 16465:16467 ioctl c0306201 200000000080 returned -22 [ 849.096677][ T5975] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 849.148722][ T5975] usb 3-1: device descriptor read/8, error -71 [ 849.167690][T16467] binder: 16465:16467 ioctl c0306201 200000000280 returned -11 [ 849.223003][ T5866] Bluetooth: hci5: command tx timeout [ 849.252526][ T5936] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 849.395989][ T5975] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 849.465876][ T5936] usb 4-1: Using ep0 maxpacket: 16 [ 849.478903][ T5936] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 849.492627][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.500984][ T5936] usb 4-1: Product: syz [ 849.511147][ T5936] usb 4-1: Manufacturer: syz [ 849.542111][ T5936] usb 4-1: SerialNumber: syz [ 849.714706][ T5975] usb 3-1: device descriptor read/8, error -71 [ 849.865740][ T5975] usb usb3-port1: unable to enumerate USB device [ 849.881067][T16418] hsr_slave_0: entered promiscuous mode [ 849.889746][ T5936] r8152-cfgselector 4-1: Unknown version 0x0000 [ 850.040214][ T5936] r8152-cfgselector 4-1: config 0 descriptor?? [ 850.056918][T16418] hsr_slave_1: entered promiscuous mode [ 850.074813][T16418] debugfs: 'hsr0' already exists in 'hsr' [ 850.082860][T16418] Cannot create hsr debugfs directory [ 850.285883][ T5945] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 850.455795][ T5945] usb 6-1: device descriptor read/64, error -71 [ 850.725999][ T5945] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 850.833054][T16418] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.855895][ T5945] usb 6-1: device descriptor read/64, error -71 [ 850.987652][ T5945] usb usb6-port1: attempt power cycle [ 851.174491][T16418] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.285989][ T5866] Bluetooth: hci5: command tx timeout [ 851.434686][T16418] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.536166][ T5945] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 851.624637][T16418] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.656729][ T5945] usb 6-1: device descriptor read/8, error -71 [ 851.890066][ T5936] r8152-cfgselector 4-1: Unknown version 0x0000 [ 851.914130][ T5936] r8152-cfgselector 4-1: bad CDC descriptors [ 851.945767][ T5945] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 851.958854][ T5936] r8152-cfgselector 4-1: USB disconnect, device number 14 [ 851.986855][ T5945] usb 6-1: device descriptor read/8, error -71 [ 852.107165][ T5945] usb usb6-port1: unable to enumerate USB device [ 852.172199][T16418] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 852.216670][T16418] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 852.260492][T16418] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 852.527616][T16418] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 852.616536][ T5975] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 852.813654][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 852.835565][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 852.858994][T16418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.866582][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 852.923662][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 853.005616][T16418] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.037981][ T5975] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 853.047644][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.166149][ T5956] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 853.185173][T12043] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.192464][T12043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.216059][ T5975] usb 5-1: Product: syz [ 853.220346][ T5975] usb 5-1: Manufacturer: syz [ 853.224977][ T5975] usb 5-1: SerialNumber: syz [ 853.268301][T12051] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.275609][T12051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.324281][ T5975] usb 5-1: config 0 descriptor?? [ 853.345760][ T5956] usb 3-1: Using ep0 maxpacket: 32 [ 853.356700][ T5866] Bluetooth: hci5: command tx timeout [ 853.367896][ T5956] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 853.485741][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.542736][ T5956] usb 3-1: config 0 descriptor?? [ 853.581653][ T5975] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 853.664565][T16418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.805342][ T5956] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 853.807391][T16494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.873406][ T5956] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 853.881242][T16494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.894781][T16418] veth0_vlan: entered promiscuous mode [ 853.967537][ T5956] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 854.001144][ T5956] usb 3-1: media controller created [ 854.012167][T16504] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 854.020310][T16418] veth1_vlan: entered promiscuous mode [ 854.063478][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 854.068285][ T44] usb 5-1: USB disconnect, device number 14 [ 854.117565][T16518] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2808'. [ 854.403559][ T5956] az6027: usb out operation failed. (-71) [ 854.403980][ T5956] az6027: usb out operation failed. (-71) [ 854.446649][ T5956] stb0899_attach: Driver disabled by Kconfig [ 854.468308][ T5956] az6027: no front-end attached [ 854.468308][ T5956] [ 854.468695][ T5956] az6027: usb out operation failed. (-71) [ 854.468714][ T5956] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 854.469380][T16418] veth0_macvtap: entered promiscuous mode [ 854.473393][ T5956] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input51 [ 854.494792][T16418] veth1_macvtap: entered promiscuous mode [ 854.547308][ T5956] dvb-usb: schedule remote query interval to 400 msecs. [ 854.547339][ T5956] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 854.552611][ T5956] usb 3-1: USB disconnect, device number 126 [ 854.659320][T16418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.682672][T16418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.729492][T12049] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.729561][T12049] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.729600][T12049] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.729638][T12049] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.811195][ T5956] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 854.923815][ T1331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.923841][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.991615][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.016535][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.104063][T16526] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2813'. [ 855.325788][ T5956] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 855.507639][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.543409][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.647707][T16540] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 855.670200][T16540] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2814'. [ 855.714397][ T5956] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 855.728739][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.742386][ T5956] usb 3-1: config 0 descriptor?? [ 856.471146][ T5956] hid-steam 0003:28DE:1142.0060: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 856.525803][ T44] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 856.566299][ T5956] hid-steam 0003:28DE:1142.0060: Steam wireless receiver connected [ 856.656294][ T5956] hid-steam 0003:28DE:1142.0061: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 856.700315][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 856.729414][ T5956] usb 3-1: USB disconnect, device number 127 [ 856.740188][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.778857][ T5956] hid-steam 0003:28DE:1142.0060: Steam wireless receiver disconnected [ 856.815823][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.864185][ T44] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 856.907801][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.924233][T16546] fido_id[16546]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 856.962513][ T44] usb 4-1: config 0 descriptor?? [ 857.493801][ T44] ft260 0003:0403:6030.0062: unknown main item tag 0x7 [ 857.636162][ T44] ft260 0003:0403:6030.0062: chip code: 6424 8183 [ 857.862156][T16559] usb usb8: usbfs: process 16559 (syz.4.2819) did not claim interface 0 before use [ 857.929226][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 857.929247][ T30] audit: type=1326 audit(1754388235.925:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16553 comm="syz.2.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9958eb69 code=0x7ffc0000 [ 858.019780][ T30] audit: type=1326 audit(1754388235.925:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16553 comm="syz.2.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7efe9958eb69 code=0x7ffc0000 [ 858.086801][ T30] audit: type=1326 audit(1754388236.055:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16557 comm="syz.5.2821" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee2278eb69 code=0x0 [ 858.556957][ T5945] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 858.567088][ T44] ft260 0003:0403:6030.0062: failed to retrieve system status [ 858.571105][ T30] audit: type=1326 audit(1754388236.275:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16553 comm="syz.2.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9958eb69 code=0x7ffc0000 [ 858.607884][ T44] ft260 0003:0403:6030.0062: probe with driver ft260 failed with error -71 [ 858.665456][ T44] usb 4-1: USB disconnect, device number 15 [ 858.666050][ T30] audit: type=1326 audit(1754388236.275:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16553 comm="syz.2.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9958eb69 code=0x7ffc0000 [ 858.724015][ T5945] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 858.744632][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.761880][ T30] audit: type=1326 audit(1754388236.275:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16553 comm="syz.2.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe9958eb69 code=0x7ffc0000 [ 858.828811][ T5945] usb 2-1: Product: syz [ 858.840444][ T5945] usb 2-1: Manufacturer: syz [ 858.856707][ T5945] usb 2-1: SerialNumber: syz [ 858.887198][ T30] audit: type=1326 audit(1754388236.275:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16553 comm="syz.2.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9958eb69 code=0x7ffc0000 [ 858.918580][ T5945] usb 2-1: config 0 descriptor?? [ 858.967849][ T30] audit: type=1326 audit(1754388236.275:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16553 comm="syz.2.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe9958eb69 code=0x7ffc0000 [ 859.018695][ T30] audit: type=1326 audit(1754388236.325:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16553 comm="syz.2.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9958eb69 code=0x7ffc0000 [ 859.091764][ T30] audit: type=1326 audit(1754388236.325:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16553 comm="syz.2.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9958eb69 code=0x7ffc0000 [ 859.147770][ T5945] usb 2-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 859.171154][ T5945] f81604 2-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 859.202236][ T5945] f81604 2-1:0.0: probe with driver f81604 failed with error -121 [ 859.445776][ T5936] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 859.595969][ T5936] usb 6-1: Invalid ep0 maxpacket: 64 [ 859.735982][ T5936] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 859.885807][ T5936] usb 6-1: Invalid ep0 maxpacket: 64 [ 859.899562][ T5936] usb usb6-port1: attempt power cycle [ 860.335938][ T5936] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 860.357762][ T5936] usb 6-1: Invalid ep0 maxpacket: 64 [ 860.426000][ T5929] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 860.545923][ T5936] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 860.566595][ T5936] usb 6-1: Invalid ep0 maxpacket: 64 [ 860.574156][ T5936] usb usb6-port1: unable to enumerate USB device [ 860.587847][ T5929] usb 5-1: unable to get BOS descriptor or descriptor too short [ 860.602564][ T5929] usb 5-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 860.612991][ T5929] usb 5-1: config 66 interface 0 has no altsetting 0 [ 860.624061][ T5929] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 860.633677][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.643866][ T5929] usb 5-1: Product: syz [ 860.652869][ T5929] usb 5-1: Manufacturer: syz [ 860.657738][ T5929] usb 5-1: SerialNumber: syz [ 860.669547][T16598] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 860.765914][ T5956] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 860.955831][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 860.962692][ T5956] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 860.973517][ T5956] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 860.986628][ T5929] ati_remote2 5-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 861.011305][ T5956] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 861.022405][ T5929] usb 5-1: USB disconnect, device number 15 [ 861.041712][ T5956] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 861.050986][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.080230][ T5956] usb 3-1: Product: syz [ 861.085743][ T5956] usb 3-1: Manufacturer: syz [ 861.091267][ T5956] usb 3-1: SerialNumber: syz [ 861.320997][ T5956] usb 3-1: 0:2 : does not exist [ 861.509086][ T5929] usb 2-1: USB disconnect, device number 36 [ 861.798105][ T5956] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 861.889566][ T5956] usb 3-1: USB disconnect, device number 2 [ 861.911332][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 861.986672][ T5929] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 862.158424][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 862.175797][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 862.195762][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 862.256103][ T5945] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 862.285247][ T5956] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 862.315591][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 862.358668][ T5929] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 862.388272][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.420078][ T5929] usb 2-1: Product: syz [ 862.426158][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 862.429866][ T5929] usb 2-1: Manufacturer: syz [ 862.445907][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.450114][ T5929] usb 2-1: SerialNumber: syz [ 862.472745][ T5956] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 862.484870][ T5945] usb 4-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 862.496810][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 862.509451][ T5929] usb 2-1: config 0 descriptor?? [ 862.525978][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.537200][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 862.564550][ T5956] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 862.576614][ T5945] usb 4-1: config 0 descriptor?? [ 862.584891][ T5956] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 862.607016][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.645898][ T44] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 862.652718][ T5956] usb 3-1: config 0 descriptor?? [ 862.724977][ T5929] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 862.798554][ T44] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 862.835319][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.880264][ T44] usb 6-1: config 0 descriptor?? [ 862.971790][T16614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.027971][ T5945] logitech-djreceiver 0003:046D:C513.0063: unknown main item tag 0x0 [ 863.047601][T16614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.077669][ T5945] logitech-djreceiver 0003:046D:C513.0063: unknown main item tag 0x0 [ 863.093112][ T5956] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 863.114950][ T5945] logitech-djreceiver 0003:046D:C513.0063: unknown main item tag 0x0 [ 863.121707][ T5956] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 863.153077][ T44] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 863.165992][ T5945] logitech-djreceiver 0003:046D:C513.0063: unknown main item tag 0x0 [ 863.166517][ T5956] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 863.198221][ T5945] logitech-djreceiver 0003:046D:C513.0063: unknown main item tag 0x0 [ 863.224974][ T5956] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 863.233502][ T5956] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 863.260926][ T5956] plantronics 0003:047F:FFFF.0064: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 863.298978][ T5945] usb 2-1: USB disconnect, device number 37 [ 863.363129][ T44] [drm:udl_init] *ERROR* Selecting channel failed [ 863.451385][ T44] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 863.469119][ T44] [drm] Initialized udl on minor 2 [ 863.493199][ T44] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 863.545114][ T44] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 863.574132][T16307] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 863.588535][ T44] usb 6-1: USB disconnect, device number 36 [ 863.604067][T16307] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 864.159470][ T5956] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 864.306649][ T5956] usb 5-1: too many configurations: 22, using maximum allowed: 8 [ 864.548641][T16307] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 864.561990][ T5956] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 864.562027][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.562050][ T5956] usb 5-1: Product: syz [ 864.562067][ T5956] usb 5-1: Manufacturer: syz [ 864.562084][ T5956] usb 5-1: SerialNumber: syz [ 864.613492][ T5956] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 864.686118][T16307] usb 2-1: device descriptor read/64, error -71 [ 864.954009][T16307] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 865.173143][ T5960] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 865.176103][ T5945] usb 3-1: USB disconnect, device number 3 [ 865.266198][T16307] usb 2-1: device descriptor read/64, error -71 [ 865.376534][T16307] usb usb2-port1: attempt power cycle [ 865.566061][ T44] usb 4-1: USB disconnect, device number 16 [ 865.730254][T16307] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 865.761584][T16307] usb 2-1: device descriptor read/8, error -71 [ 866.005758][T16307] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 866.056849][T16307] usb 2-1: device descriptor read/8, error -71 [ 866.179219][T16307] usb usb2-port1: unable to enumerate USB device [ 866.288157][ T44] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 866.477099][ T5960] usb 5-1: Service connection timeout for: 256 [ 866.477192][ T5960] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 866.501053][ T5960] ath9k_htc: Failed to initialize the device [ 866.505063][ T5960] usb 5-1: ath9k_htc: USB layer deinitialized [ 866.560566][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 866.626328][ T44] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 866.626369][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.626391][ T44] usb 4-1: config 0 has no interfaces? [ 866.626426][ T44] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 866.626446][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.633530][ T44] usb 4-1: config 0 descriptor?? [ 867.329406][ T5956] usb 5-1: USB disconnect, device number 16 [ 867.537487][ T5975] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 867.695924][ T5975] usb 6-1: Using ep0 maxpacket: 16 [ 867.703835][ T5975] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 867.716945][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 867.773646][ T5975] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 867.783836][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.810231][ T5975] usb 6-1: Product: syz [ 867.826034][ T5975] usb 6-1: Manufacturer: syz [ 867.842250][ T5975] usb 6-1: SerialNumber: syz [ 867.876179][ T5975] usb 6-1: config 0 descriptor?? [ 867.941925][ T5975] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 868.038957][ T5975] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 868.156018][ T5956] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 868.315915][ T5956] usb 5-1: Using ep0 maxpacket: 8 [ 868.332643][ T5956] usb 5-1: config 0 has an invalid interface number: 155 but max is 1 [ 868.341886][ T5956] usb 5-1: config 0 has an invalid interface number: 245 but max is 1 [ 868.350983][ T5956] usb 5-1: config 0 has no interface number 0 [ 868.376721][ T5956] usb 5-1: config 0 has no interface number 1 [ 868.410660][ T5956] usb 5-1: config 0 interface 155 has no altsetting 0 [ 868.446117][ T5956] usb 5-1: config 0 interface 245 has no altsetting 0 [ 868.479870][ T5956] usb 5-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=b8.b6 [ 868.520625][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.551166][ T5975] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 868.558792][ T5975] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 868.593703][ T5956] usb 5-1: config 0 descriptor?? [ 868.883068][ T44] usb 4-1: string descriptor 0 read error: -71 [ 868.956673][ T44] usb 4-1: USB disconnect, device number 17 [ 869.112075][T16678] 8021q: adding VLAN 0 to HW filter on device bond3 [ 869.207409][ T5975] em28xx 6-1:0.0: AC97 command still being executed: not handled properly! [ 869.216695][ T5975] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 869.618872][ T5975] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 869.649548][ T5975] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 869.862547][ T5975] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 869.891634][ T5975] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 869.910234][ T5975] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 869.932474][ T5975] usb 6-1: USB disconnect, device number 37 [ 872.036716][ T5956] usb 5-1: string descriptor 0 read error: -71 [ 872.135398][ T5956] usb 5-1: USB disconnect, device number 17 [ 872.392401][ T5945] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 872.468831][ T5945] hid-generic 0000:0000:0000.0065: hidraw0: HID v0.00 Device [syz1] on syz0 [ 872.795837][ T5956] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 872.843370][T16701] fido_id[16701]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 873.509085][T16722] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 873.538579][T16722] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 874.755138][T13281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 874.768931][T13281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 874.778384][T13281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 874.787562][T13281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 874.795339][T13281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 874.865989][ T5956] usb 4-1: device descriptor read/64, error -71 [ 875.192470][ T5956] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 875.433632][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.461913][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.465147][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.478369][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.520238][ T5956] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 875.595813][ T5960] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 876.085894][ T5956] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 876.095009][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.132489][ T5956] usb 4-1: config 0 descriptor?? [ 876.166246][ T5960] usb 2-1: device descriptor read/64, error -71 [ 876.540558][ T5960] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 876.621801][ T5956] plantronics 0003:047F:FFFF.0066: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 876.708994][ T5960] usb 2-1: device descriptor read/64, error -71 [ 876.839157][ T5960] usb usb2-port1: attempt power cycle [ 876.867271][T16745] chnl_net:caif_netlink_parms(): no params data found [ 876.877561][T13281] Bluetooth: hci2: command tx timeout [ 877.196077][ T5960] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 877.229212][ T5960] usb 2-1: device descriptor read/8, error -71 [ 877.495746][ T5960] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 877.536221][ T5960] usb 2-1: device descriptor read/8, error -71 [ 877.588001][T16745] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.644944][T16745] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.688329][ T5960] usb usb2-port1: unable to enumerate USB device [ 877.715004][T16745] bridge_slave_0: entered allmulticast mode [ 877.739268][T16745] bridge_slave_0: entered promiscuous mode [ 877.871290][T16745] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.901300][T16745] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.931039][T16745] bridge_slave_1: entered allmulticast mode [ 877.985163][T16745] bridge_slave_1: entered promiscuous mode [ 878.059343][ T5945] usb 4-1: reset high-speed USB device number 19 using dummy_hcd [ 878.233917][T16745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.264882][T16745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.284928][ T5945] usb 4-1: device descriptor read/64, error -32 [ 878.370750][T16745] team0: Port device team_slave_0 added [ 878.384657][T16745] team0: Port device team_slave_1 added [ 878.441086][T16745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.450185][T16745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.482981][T16745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.563282][T16745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.570809][T16745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.598776][T16745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.606533][ T5945] usb 4-1: reset high-speed USB device number 19 using dummy_hcd [ 878.757947][ T5945] usb 4-1: device descriptor read/64, error -32 [ 878.972258][T13281] Bluetooth: hci2: command tx timeout [ 879.016189][ T5945] usb 4-1: reset high-speed USB device number 19 using dummy_hcd [ 879.046318][ T5945] usb 4-1: device descriptor read/8, error -32 [ 879.267967][T16745] hsr_slave_0: entered promiscuous mode [ 879.295964][ T5945] usb 4-1: reset high-speed USB device number 19 using dummy_hcd [ 879.306949][T16745] hsr_slave_1: entered promiscuous mode [ 879.340136][T16745] debugfs: 'hsr0' already exists in 'hsr' [ 879.358712][ T5945] usb 4-1: device descriptor read/8, error -32 [ 879.372390][T16745] Cannot create hsr debugfs directory [ 879.443733][T16767] raw-gadget.0 gadget.3: failed to queue suspend event [ 879.454048][T16767] raw-gadget.0 gadget.3: failed to queue disconnect event [ 879.499389][ T44] usb 4-1: USB disconnect, device number 19 [ 879.667796][T16797] batadv_slave_0: entered promiscuous mode [ 879.701725][T16795] batadv_slave_0: left promiscuous mode [ 880.037089][T16745] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.106063][ T5945] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 880.210406][T16745] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.246015][ T44] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 880.275923][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 880.335298][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.346845][ T5945] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 880.362516][ T5945] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 880.372349][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.396936][ T5945] usb 2-1: config 0 descriptor?? [ 880.409593][ T44] usb 5-1: config 0 has no interfaces? [ 880.421923][T16745] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.464119][ T44] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 880.513643][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.575863][ T44] usb 5-1: Product: syz [ 880.596148][ T44] usb 5-1: Manufacturer: syz [ 880.642588][T16745] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.700365][ T44] usb 5-1: SerialNumber: syz [ 880.981533][ T44] usb 5-1: config 0 descriptor?? [ 881.036107][T13281] Bluetooth: hci2: command tx timeout [ 881.177720][ T5975] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 881.241057][T16745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 881.276273][ T5945] nintendo 0003:057E:2019.0067: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 881.292710][T16745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 881.338396][T16810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.377130][ T5945] nintendo 0003:057E:2019.0067: Failed to get joycon info; ret=-38 [ 881.387163][ T5945] nintendo 0003:057E:2019.0067: Failed to retrieve controller info; ret=-38 [ 881.400675][T16810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.419075][ T5945] nintendo 0003:057E:2019.0067: Failed to initialize controller; ret=-38 [ 881.457967][T16745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 881.529704][T16745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 881.595795][ T5945] nintendo 0003:057E:2019.0067: probe - fail = -38 [ 881.775904][ T5945] nintendo 0003:057E:2019.0067: probe with driver nintendo failed with error -38 [ 881.824913][ T5945] usb 2-1: USB disconnect, device number 46 [ 881.922886][T16821] fido_id[16821]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 882.314995][T16745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.439013][T16745] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.652578][T12053] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.659830][T12053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.845263][T16840] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2881'. [ 882.893809][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.901059][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.117665][T13281] Bluetooth: hci2: command tx timeout [ 883.430358][T16745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 883.496230][ T5945] usb 5-1: USB disconnect, device number 18 [ 883.655841][ T44] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 883.683764][T16745] veth0_vlan: entered promiscuous mode [ 883.775850][T16745] veth1_vlan: entered promiscuous mode [ 883.821743][ T44] usb 2-1: device descriptor read/64, error -71 [ 883.936383][T16745] veth0_macvtap: entered promiscuous mode [ 883.970521][T16745] veth1_macvtap: entered promiscuous mode [ 884.082104][T16745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 884.100734][ T44] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 884.131023][T16745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 884.162189][T12053] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.171517][T12053] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.181547][ T3010] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.201402][ T3010] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.236218][ T44] usb 2-1: device descriptor read/64, error -71 [ 884.353449][ T44] usb usb2-port1: attempt power cycle [ 884.366846][T12053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.394968][T12053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.446057][ T5945] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 884.532167][T12043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.545135][T12043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.611526][ T5945] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 884.625461][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.640505][ T5945] usb 4-1: Product: syz [ 884.644916][ T5945] usb 4-1: Manufacturer: syz [ 884.650653][ T5945] usb 4-1: SerialNumber: syz [ 884.663191][ T5945] usb 4-1: config 0 descriptor?? [ 884.716404][ T44] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 884.817101][ T44] usb 2-1: device descriptor read/8, error -71 [ 884.892839][ T5945] usb 4-1: USB disconnect, device number 21 [ 885.055827][ T44] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 885.103578][ T44] usb 2-1: device descriptor read/8, error -71 [ 885.216269][ T44] usb usb2-port1: unable to enumerate USB device [ 886.666041][ T44] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 886.835962][ T5929] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 886.843763][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 886.909272][ T44] usb 4-1: config 0 has no interfaces? [ 886.928361][ T44] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 886.977182][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.985249][ T44] usb 4-1: Product: syz [ 886.995768][ T44] usb 4-1: Manufacturer: syz [ 886.996307][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 887.000498][ T44] usb 4-1: SerialNumber: syz [ 887.021550][ T44] usb 4-1: config 0 descriptor?? [ 887.055787][ T5945] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 887.094273][ T5929] usb 2-1: config 1 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 887.156701][ T5929] usb 2-1: config 1 interface 0 has no altsetting 0 [ 887.445070][ T5929] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 887.454724][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.464203][ T5929] usb 2-1: Product: syz [ 887.470228][ T5929] usb 2-1: Manufacturer: syz [ 887.474164][ T5945] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x3 has invalid maxpacket 10844, setting to 64 [ 887.476672][ T5929] usb 2-1: SerialNumber: syz [ 887.535872][ T5945] usb 3-1: config 1 interface 0 has no altsetting 0 [ 887.584688][ T5945] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 887.644065][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.685896][ T5945] usb 3-1: Product: syz [ 887.690127][ T5945] usb 3-1: Manufacturer: ΣΏ [ 887.744707][ T5945] usb 3-1: SerialNumber: syz [ 887.906144][T16888] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 888.166351][ T5945] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 888.234063][ T5945] usb 3-1: USB disconnect, device number 4 [ 889.019269][ T5945] usb 4-1: USB disconnect, device number 22 [ 889.693560][ T5929] usbhid 2-1:1.0: can't add hid device: -71 [ 889.736937][ T5929] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 889.846235][ T5929] usb 2-1: USB disconnect, device number 51 [ 890.107263][T16902] netlink: 'syz.2.2896': attribute type 12 has an invalid length. [ 890.135389][T16902] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2896'. [ 890.365916][ T5929] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 890.465908][ T5936] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 890.560696][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 890.676174][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.696090][ T5929] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 890.705204][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.721336][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.769490][ T5929] usb 2-1: config 0 descriptor?? [ 890.846114][ T5936] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 890.875917][ T5975] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 891.006112][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.045878][ T5975] usb 6-1: Using ep0 maxpacket: 16 [ 891.073227][ T5975] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 891.104847][ T5936] usb 5-1: config 0 descriptor?? [ 891.130355][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.349632][ T5975] usb 6-1: Product: syz [ 891.353900][ T5975] usb 6-1: Manufacturer: syz [ 891.400088][ T5975] usb 6-1: SerialNumber: syz [ 891.463354][ T5975] r8152-cfgselector 6-1: Unknown version 0x0000 [ 891.485865][ T5975] r8152-cfgselector 6-1: config 0 descriptor?? [ 891.824949][ T5936] usbhid 5-1:0.0: can't add hid device: -71 [ 891.884698][ T5936] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 891.966472][ T5936] usb 5-1: USB disconnect, device number 19 [ 892.143044][ T5929] usbhid 2-1:0.0: can't add hid device: -71 [ 892.170866][ T5929] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 892.272773][ T5929] usb 2-1: USB disconnect, device number 52 [ 892.278888][ T5975] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 892.416509][ T5975] usb 4-1: device descriptor read/64, error -71 [ 892.666762][ T5975] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 892.815822][ T5929] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 892.835950][ T5975] usb 4-1: device descriptor read/64, error -71 [ 892.966635][ T5975] usb usb4-port1: attempt power cycle [ 892.998794][ T5929] usb 2-1: device descriptor read/64, error -71 [ 893.252665][ T5929] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 893.330814][ T5975] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 893.361670][ T5975] usb 4-1: device descriptor read/8, error -71 [ 893.406019][ T5929] usb 2-1: device descriptor read/64, error -71 [ 893.516599][ T5929] usb usb2-port1: attempt power cycle [ 893.605786][ T5975] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 893.676701][ T5975] usb 4-1: device descriptor read/8, error -71 [ 893.794402][ T5975] usb usb4-port1: unable to enumerate USB device [ 893.895777][ T5929] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 893.938499][ T5929] usb 2-1: device descriptor read/8, error -71 [ 894.154635][T16307] r8152-cfgselector 6-1: USB disconnect, device number 38 [ 894.216351][ T5929] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 894.290649][ T5929] usb 2-1: device descriptor read/8, error -71 [ 894.419867][ T5929] usb usb2-port1: unable to enumerate USB device [ 896.235815][ T5945] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 896.321401][T16968] netlink: 'syz.4.2914': attribute type 4 has an invalid length. [ 896.435748][ T5945] usb 4-1: Using ep0 maxpacket: 8 [ 896.517565][ T5945] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 896.629520][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.673797][T16970] netlink: 'syz.4.2914': attribute type 4 has an invalid length. [ 896.925872][ T5945] usb 4-1: Product: syz [ 896.936105][ T5945] usb 4-1: Manufacturer: syz [ 896.953112][ T5945] usb 4-1: SerialNumber: syz [ 896.978008][ T5945] usb 4-1: config 0 descriptor?? [ 897.255316][ T5945] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 897.525966][T16307] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 897.678056][T16307] usb 3-1: config 4 has an invalid interface number: 9 but max is 0 [ 897.694253][T16307] usb 3-1: config 4 has no interface number 0 [ 897.731559][T16307] usb 3-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=d7.0c [ 897.758361][T16307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.814489][T16307] usb 3-1: Product: syz [ 897.822340][T16307] usb 3-1: Manufacturer: syz [ 897.829501][T16307] usb 3-1: SerialNumber: syz [ 897.870453][T16307] gspca_main: spca505-2.14.0 probing 0733:0430 [ 898.049806][T16961] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1113132006 (1113132006 ns) > initial count (497682314 ns). Using initial count to start timer. [ 898.232668][ T5945] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 898.274092][T16307] gspca_spca505: reg write: error -71 [ 898.283417][T16307] spca505 3-1:4.9: probe with driver spca505 failed with error -5 [ 898.292670][ T5945] usb 4-1: USB disconnect, device number 27 [ 898.420343][T16307] usb 3-1: USB disconnect, device number 5 [ 899.079752][T16992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2920'. [ 899.805950][T16307] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 899.827669][T17002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2922'. [ 899.986677][T16307] usb 3-1: Using ep0 maxpacket: 16 [ 900.019404][T16307] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 900.029798][T16307] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 900.118094][T16307] usb 3-1: Product: syz [ 900.122326][T16307] usb 3-1: Manufacturer: syz [ 900.185703][T16307] usb 3-1: SerialNumber: syz [ 900.276181][T16307] usb 3-1: config 0 descriptor?? [ 900.503095][T17000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2921'. [ 900.887270][ T5975] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 901.048390][ T5975] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 901.083789][ T5975] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 901.173113][ T5975] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 901.251731][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 901.292103][ T5975] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 901.332921][ T5975] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 901.342362][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.392611][ T5975] usb 4-1: Product: syz [ 901.416452][ T5975] usb 4-1: Manufacturer: syz [ 901.431226][ T5975] usb 4-1: SerialNumber: syz [ 901.493211][ T5975] usb 4-1: config 0 descriptor?? [ 901.537203][T17011] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 901.550313][ T5975] usb 4-1: ucan: probing device on interface #0 [ 901.688883][ T5975] usb 4-1: ucan: invalid endpoint configuration [ 901.738032][ T5975] usb 4-1: ucan: probe failed; try to update the device firmware [ 901.786694][ T5960] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 901.804760][ T5975] usb 4-1: USB disconnect, device number 28 [ 901.979731][ T5960] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 901.988201][ T5960] usb 5-1: config 8 has no interface number 0 [ 902.006869][ T5960] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 902.083509][ T5960] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0 [ 902.170645][ T5960] usb 5-1: config 8 interface 177 has no altsetting 0 [ 902.194571][ T5960] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 902.252918][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.305209][T17017] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 902.377333][T17026] dlm: non-version read from control device 36 [ 902.551658][ T5960] usb 5-1: string descriptor 0 read error: -71 [ 902.624933][ T5960] ir_toy 5-1:8.177: required endpoints not found [ 902.676457][ T5960] usb 5-1: USB disconnect, device number 20 [ 903.174087][ T5960] usb 3-1: USB disconnect, device number 6 [ 903.864380][ T5956] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 904.047292][ T5956] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 904.616299][ T5956] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 904.746483][ T5956] usb 6-1: can't read configurations, error -61 [ 904.905792][ T5956] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 905.075498][ T5956] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 905.091798][ T5956] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 905.105232][ T5956] usb 6-1: can't read configurations, error -61 [ 905.126238][ T5956] usb usb6-port1: attempt power cycle [ 905.362288][ T5929] IPVS: starting estimator thread 0... [ 905.468522][T17089] IPVS: using max 26 ests per chain, 62400 per kthread [ 905.485791][ T5956] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 905.517749][ T5956] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 905.527969][ T5956] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 905.539810][ T5956] usb 6-1: can't read configurations, error -61 [ 905.605788][ T5929] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 905.722332][ T5956] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 905.762015][ T5956] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 905.772023][ T5956] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 905.776314][ T5945] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 905.780818][ T5956] usb 6-1: can't read configurations, error -61 [ 905.794233][ T5956] usb usb6-port1: unable to enumerate USB device [ 905.803231][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.814812][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.826192][ T5929] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 905.835401][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.856567][ T5929] usb 5-1: config 0 descriptor?? [ 905.935864][ T5945] usb 3-1: Using ep0 maxpacket: 8 [ 905.946956][ T5945] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 905.965957][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.984470][ T5945] usb 3-1: Product: syz [ 905.997223][ T5945] usb 3-1: Manufacturer: syz [ 906.004461][ T5945] usb 3-1: SerialNumber: syz [ 906.023054][ T5945] usb 3-1: config 0 descriptor?? [ 906.035104][ T5945] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 906.117098][T17097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 906.255431][ T5945] gspca_vc032x: reg_r err -71 [ 906.269684][ T5945] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 906.279727][ T5929] hid-steam 0003:28DE:1142.0068: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 906.301885][ T5945] usb 3-1: USB disconnect, device number 7 [ 906.346011][ T5929] hid-steam 0003:28DE:1142.0068: Steam wireless receiver connected [ 906.512980][ T5929] hid-steam 0003:28DE:1142.0069: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 906.618178][ T5929] usb 5-1: USB disconnect, device number 21 [ 906.749477][ T5929] hid-steam 0003:28DE:1142.0068: Steam wireless receiver disconnected [ 906.896235][T17105] fido_id[17105]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 908.066328][T17128] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2958'. [ 908.956080][ T5866] Bluetooth: hci3: command 0x0406 tx timeout [ 908.956242][T17109] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 909.712726][T17109] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 909.720395][T17109] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 909.726945][T17109] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 909.733844][T17109] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 909.744254][T17109] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 909.754118][T17109] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 909.760474][T17109] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 909.768190][T17109] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 909.955116][T17142] input: syz0 as /devices/virtual/input/input52 [ 909.974102][T17142] input: failed to attach handler leds to device input52, error: -6 [ 910.077448][T16307] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 910.121396][T17149] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2965'. [ 910.132365][T17149] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2965'. [ 910.156809][T17149] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2965'. [ 910.245887][ T5945] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 910.257664][T16307] usb 5-1: config 0 has an invalid interface number: 84 but max is 0 [ 910.266298][T16307] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 910.274394][T16307] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 910.384971][T16307] usb 5-1: config 0 has no interface number 0 [ 910.398957][T16307] usb 5-1: config 0 has no interface number 1 [ 910.405147][T16307] usb 5-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 910.417833][ T5945] usb 3-1: Using ep0 maxpacket: 8 [ 910.431908][ T5945] usb 3-1: unable to get BOS descriptor or descriptor too short [ 910.444310][ T5945] usb 3-1: too many configurations: 144, using maximum allowed: 8 [ 910.465143][T16307] usb 5-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 910.536723][ T5945] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 910.544356][ T5945] usb 3-1: can't read configurations, error -61 [ 910.555170][T16307] usb 5-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 910.575864][T16307] usb 5-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 910.594466][T16307] usb 5-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 910.618960][T16307] usb 5-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 910.643321][T16307] usb 5-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 910.656486][T16307] usb 5-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 910.668283][T16307] usb 5-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 910.675881][ T5975] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 910.682194][T16307] usb 5-1: config 0 interface 66 has no altsetting 0 [ 910.703266][T16307] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 910.713062][T16307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.722306][ T5945] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 910.739713][T16307] usb 5-1: Product: syz [ 910.897586][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.910844][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.921726][T16307] usb 5-1: Manufacturer: syz [ 910.921754][T16307] usb 5-1: SerialNumber: syz [ 910.928581][T16307] usb 5-1: config 0 descriptor?? [ 910.937253][ T5945] usb 3-1: Using ep0 maxpacket: 8 [ 910.948038][ T5945] usb 3-1: unable to get BOS descriptor or descriptor too short [ 910.956255][ T5945] usb 3-1: too many configurations: 144, using maximum allowed: 8 [ 911.085906][ T5975] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 911.118838][ T5866] Bluetooth: hci0: command 0x0c1a tx timeout [ 911.119132][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.135080][ T5945] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 911.143240][ T5945] usb 3-1: can't read configurations, error -61 [ 911.152041][ T5945] usb usb3-port1: attempt power cycle [ 911.157989][T16307] usb 5-1: can't set config #0, error -71 [ 911.165890][T16307] usb 5-1: USB disconnect, device number 22 [ 911.257424][ T5975] usb 4-1: config 0 descriptor?? [ 911.468883][T17165] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 911.506738][ T5945] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 911.576782][ T5945] usb 3-1: Using ep0 maxpacket: 8 [ 911.604487][ T5945] usb 3-1: unable to get BOS descriptor or descriptor too short [ 911.615841][ T5945] usb 3-1: too many configurations: 144, using maximum allowed: 8 [ 911.660096][ T5945] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 911.669275][ T5945] usb 3-1: can't read configurations, error -61 [ 911.708396][ T5975] hid-steam 0003:28DE:1142.006A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 911.756104][ T5866] Bluetooth: hci5: command 0x0c1a tx timeout [ 911.762317][T13281] Bluetooth: hci1: command 0x0c1a tx timeout [ 911.768793][T13281] Bluetooth: hci2: command 0x0c1a tx timeout [ 911.795826][ T5975] hid-steam 0003:28DE:1142.006A: Steam wireless receiver connected [ 911.836127][ T5945] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 911.838177][ T5975] hid-steam 0003:28DE:1142.006B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 911.876707][ T5945] usb 3-1: Using ep0 maxpacket: 8 [ 911.898094][ T5945] usb 3-1: unable to get BOS descriptor or descriptor too short [ 911.914309][ T5975] usb 4-1: USB disconnect, device number 29 [ 911.921519][ T5945] usb 3-1: too many configurations: 144, using maximum allowed: 8 [ 911.923626][ T5945] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 911.960196][ T5945] usb 3-1: can't read configurations, error -61 [ 911.989065][ T5945] usb usb3-port1: unable to enumerate USB device [ 912.028587][ T5975] hid-steam 0003:28DE:1142.006A: Steam wireless receiver disconnected [ 912.085416][T17172] fido_id[17172]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 912.375966][T16307] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 912.548247][T16307] usb 2-1: device descriptor read/64, error -71 [ 912.791559][T16307] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 912.965777][T16307] usb 2-1: device descriptor read/64, error -71 [ 913.120259][T16307] usb usb2-port1: attempt power cycle [ 913.486109][T16307] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 913.538869][T16307] usb 2-1: device descriptor read/8, error -71 [ 913.806139][T16307] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 913.838232][T13281] Bluetooth: hci2: command 0x0c1a tx timeout [ 913.844426][ T5866] Bluetooth: hci5: command 0x0c1a tx timeout [ 913.851399][T16307] usb 2-1: device descriptor read/8, error -71 [ 913.966305][T16307] usb usb2-port1: unable to enumerate USB device [ 914.135883][ T5945] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 914.275910][ T5945] usb 5-1: device descriptor read/64, error -71 [ 914.322789][T16307] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 914.495942][T16307] usb 3-1: Using ep0 maxpacket: 16 [ 914.509494][T16307] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 914.519983][ T5945] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 914.527821][T16307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.540763][T16307] usb 3-1: Product: syz [ 914.550480][T16307] usb 3-1: Manufacturer: syz [ 914.563992][T16307] usb 3-1: SerialNumber: syz [ 914.690737][T16307] r8152-cfgselector 3-1: Unknown version 0x0000 [ 914.697358][T16307] r8152-cfgselector 3-1: config 0 descriptor?? [ 914.725850][ T5945] usb 5-1: device descriptor read/64, error -71 [ 914.836357][ T5945] usb usb5-port1: attempt power cycle [ 915.175976][ T5945] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 915.218973][ T5945] usb 5-1: device descriptor read/8, error -71 [ 915.475861][ T5945] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 915.577066][ T5945] usb 5-1: device descriptor read/8, error -71 [ 915.698694][ T5945] usb usb5-port1: unable to enumerate USB device [ 915.926173][ T5866] Bluetooth: hci5: command 0x0c1a tx timeout [ 915.932427][T13281] Bluetooth: hci2: command 0x0c1a tx timeout [ 916.176179][ T5945] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 916.351542][ T44] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 916.359534][ T5945] usb 6-1: Using ep0 maxpacket: 16 [ 916.368959][ T5945] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 916.387384][ T5945] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.434118][ T5945] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 916.469842][ T5945] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 916.487737][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.506493][ T5945] usb 6-1: Product: syz [ 916.517795][ T5945] usb 6-1: Manufacturer: syz [ 916.528204][ T5945] usb 6-1: SerialNumber: syz [ 917.565880][ T44] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 917.627077][ T5945] usb 6-1: 0:2 : does not exist [ 917.636432][ T5945] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 917.671150][ T5945] usb 6-1: USB disconnect, device number 43 [ 917.726261][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 917.748084][ T44] usb 2-1: config 0 has no interfaces? [ 917.757486][ T44] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 917.767351][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.775397][ T44] usb 2-1: Product: syz [ 917.787005][ T44] usb 2-1: Manufacturer: syz [ 917.800965][ T44] usb 2-1: SerialNumber: syz [ 917.816460][ T44] usb 2-1: config 0 descriptor?? [ 918.053438][ T5945] usb 2-1: USB disconnect, device number 62 [ 918.084920][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 918.161235][ T44] r8152-cfgselector 3-1: USB disconnect, device number 12 [ 918.705874][ T44] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 918.716260][ T5975] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 918.844752][ T44] usb 3-1: device descriptor read/64, error -71 [ 918.909668][ T5975] usb 4-1: config index 0 descriptor too short (expected 258, got 47) [ 918.920989][ T5975] usb 4-1: config 5 has too many interfaces: 148, using maximum allowed: 32 [ 918.941026][ T5975] usb 4-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config [ 918.961977][ T5975] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 148 [ 918.985193][ T5975] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 918.994947][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.004902][ T5975] usb 4-1: Product: syz [ 919.015209][ T5975] usb 4-1: Manufacturer: syz [ 919.023687][ T5975] usb 4-1: SerialNumber: syz [ 919.105826][ T44] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 919.255904][ T44] usb 3-1: device descriptor read/64, error -71 [ 919.367662][ T44] usb usb3-port1: attempt power cycle [ 919.716748][ T44] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 919.757847][ T44] usb 3-1: device descriptor read/8, error -71 [ 919.906694][ T5945] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 920.006065][ T44] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 920.027221][ T5975] usb 4-1: USB disconnect, device number 30 [ 920.036660][ T44] usb 3-1: device descriptor read/8, error -71 [ 920.057951][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 920.086547][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.116158][ T5945] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 920.146363][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.164343][ T44] usb usb3-port1: unable to enumerate USB device [ 920.190954][ T5945] usb 2-1: config 0 descriptor?? [ 920.744595][ T5945] bigben 0003:146B:0902.006C: unexpected rdesc, please submit for review [ 920.893949][ T5945] bigben 0003:146B:0902.006C: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 921.011684][ T5945] bigben 0003:146B:0902.006C: not enough fields in HID_OUTPUT_REPORT 0 [ 921.016086][ T5929] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 921.205781][ T5929] usb 6-1: Using ep0 maxpacket: 16 [ 921.205897][T16307] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 921.216973][ T5929] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 921.245859][ T5945] bigben 0003:146B:0902.006C: no output report found [ 921.258104][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.280532][ T5929] usb 6-1: Product: syz [ 921.297882][ T5929] usb 6-1: Manufacturer: syz [ 921.338596][ T5945] usb 2-1: USB disconnect, device number 63 [ 921.387041][ T5929] usb 6-1: SerialNumber: syz [ 921.455928][T16307] usb 4-1: Using ep0 maxpacket: 32 [ 921.490016][T16307] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.529659][T16307] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 921.563678][T16307] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 921.595064][T16307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.623668][ T5929] r8152-cfgselector 6-1: Unknown version 0x0000 [ 921.642193][T16307] usb 4-1: config 0 descriptor?? [ 921.654882][T16307] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 921.692925][ T5929] r8152-cfgselector 6-1: config 0 descriptor?? [ 921.946092][ T5945] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 922.107795][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.215770][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.236256][ T5945] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 922.256756][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.290388][ T5945] usb 2-1: config 0 descriptor?? [ 923.009209][ T5945] usbhid 2-1:0.0: can't add hid device: -71 [ 923.015463][ T5945] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 923.042439][ T5945] usb 2-1: USB disconnect, device number 64 [ 924.115967][ T5929] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 924.144029][ T44] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 924.290054][ T5945] usb 4-1: USB disconnect, device number 31 [ 924.307276][T16307] r8152-cfgselector 6-1: USB disconnect, device number 44 [ 924.328324][ T5929] usb 5-1: not running at top speed; connect to a high speed hub [ 924.379057][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 924.402771][ T5929] usb 5-1: config 0 has an invalid interface number: 80 but max is 3 [ 924.420221][ T44] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 924.445822][ T44] usb 2-1: config 0 has no interface number 0 [ 924.465827][ T5929] usb 5-1: config 0 has an invalid interface number: 47 but max is 3 [ 924.486186][ T44] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 924.515837][ T5929] usb 5-1: config 0 has an invalid interface number: 42 but max is 3 [ 924.532161][ T5929] usb 5-1: config 0 has an invalid interface number: 202 but max is 3 [ 924.554928][ T5929] usb 5-1: config 0 has no interface number 0 [ 924.561635][ T44] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 924.573609][ T5929] usb 5-1: config 0 has no interface number 1 [ 924.573639][ T5929] usb 5-1: config 0 has no interface number 2 [ 924.573659][ T5929] usb 5-1: config 0 has no interface number 3 [ 924.573751][ T5929] usb 5-1: config 0 interface 80 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 924.573779][ T5929] usb 5-1: config 0 interface 80 altsetting 4 has an endpoint descriptor with address 0x1A, changing to 0xA [ 924.573808][ T5929] usb 5-1: config 0 interface 80 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 924.573833][ T5929] usb 5-1: config 0 interface 80 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 924.573857][ T5929] usb 5-1: config 0 interface 80 altsetting 4 endpoint 0x4 has invalid maxpacket 1040, setting to 64 [ 924.573887][ T5929] usb 5-1: config 0 interface 80 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 924.573913][ T5929] usb 5-1: config 0 interface 80 altsetting 4 has a duplicate endpoint with address 0x8F, skipping [ 924.573939][ T5929] usb 5-1: config 0 interface 80 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 924.573965][ T5929] usb 5-1: config 0 interface 80 altsetting 4 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 924.573994][ T5929] usb 5-1: config 0 interface 80 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 924.574021][ T5929] usb 5-1: config 0 interface 80 altsetting 4 endpoint 0x8E has invalid maxpacket 16963, setting to 64 [ 924.574051][ T5929] usb 5-1: config 0 interface 80 altsetting 4 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 924.574094][ T5929] usb 5-1: config 0 interface 47 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 924.574120][ T5929] usb 5-1: config 0 interface 47 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 924.574143][ T5929] usb 5-1: config 0 interface 47 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 924.713021][ T44] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 924.884288][ T44] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 924.904775][ T44] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 924.915642][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.943035][ T44] usb 2-1: config 0 descriptor?? [ 925.054124][ T44] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 925.339387][ T5929] usb 5-1: config 0 interface 47 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 925.427802][ T5929] usb 5-1: config 0 interface 47 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 925.518246][ T5929] usb 5-1: config 0 interface 47 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 925.653252][ T5929] usb 5-1: config 0 interface 47 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 925.694209][ T5929] usb 5-1: config 0 interface 47 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 925.756502][ T5929] usb 5-1: config 0 interface 47 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 925.909788][ T5929] usb 5-1: config 0 interface 47 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 925.965846][ T5929] usb 5-1: config 0 interface 47 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 926.179717][ T5929] usb 5-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 926.201343][ T5929] usb 5-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 926.215689][ T5929] usb 5-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 926.238277][ T5929] usb 5-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 926.291679][ T5929] usb 5-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 926.322228][ T5929] usb 5-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 926.345280][ T5929] usb 5-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 926.431843][ T5929] usb 5-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 926.585748][ T5956] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 926.685539][ T5929] usb 5-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 926.699365][ T5945] usb 2-1: USB disconnect, device number 65 [ 926.744159][ T5945] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 926.840938][ T5866] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 926.841118][ T5956] usb 4-1: device descriptor read/64, error -71 [ 926.867507][T17341] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 926.917541][ T5929] usb 5-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 927.226328][ T5929] usb 5-1: config 0 interface 202 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 927.292608][ T5956] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 927.304150][ T5929] usb 5-1: config 0 interface 202 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 927.378847][ T5929] usb 5-1: config 0 interface 202 altsetting 7 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 927.406545][ T5929] usb 5-1: config 0 interface 80 has no altsetting 0 [ 927.414531][ T5929] usb 5-1: config 0 interface 47 has no altsetting 0 [ 927.421633][ T5929] usb 5-1: config 0 interface 42 has no altsetting 0 [ 927.455814][ T5956] usb 4-1: device descriptor read/64, error -71 [ 927.476296][ T5929] usb 5-1: config 0 interface 202 has no altsetting 0 [ 927.510311][ T5929] usb 5-1: string descriptor 0 read error: -71 [ 927.517583][ T5929] usb 5-1: New USB device found, idVendor=05ab, idProduct=0351, bcdDevice= 1.0c [ 927.527329][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.544531][ T5929] usb 5-1: config 0 descriptor?? [ 927.559300][ T5929] usb 5-1: can't set config #0, error -71 [ 927.566038][ T5956] usb usb4-port1: attempt power cycle [ 927.681396][T17349] binder: BINDER_SET_CONTEXT_MGR already set [ 927.696293][T17349] binder: 17348:17349 ioctl 4018620d 200000000040 returned -16 [ 927.757210][T17349] binder: 17348:17349 ioctl c0306201 200000000280 returned -11 [ 927.825017][ T5929] usb 5-1: USB disconnect, device number 27 [ 927.887781][T17351] fuse: Bad value for 'fd' [ 927.960204][T17353] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3024'. [ 927.985795][ T5956] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 928.028978][ T5956] usb 4-1: device descriptor read/8, error -71 [ 928.745323][ T5956] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 928.817632][ T5956] usb 4-1: device descriptor read/8, error -71 [ 928.936295][ T5956] usb usb4-port1: unable to enumerate USB device [ 928.943896][T17365] netlink: 432 bytes leftover after parsing attributes in process `syz.4.3027'. [ 929.081517][T16307] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 929.375832][T16307] usb 6-1: Using ep0 maxpacket: 16 [ 929.559579][T16307] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 929.607582][T16307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.656541][T16307] usb 6-1: Product: syz [ 929.756037][T16307] usb 6-1: Manufacturer: syz [ 929.903834][T16307] usb 6-1: SerialNumber: syz [ 929.934240][ T5929] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 930.118072][ T5929] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 930.170061][T16307] r8152-cfgselector 6-1: Unknown version 0x0000 [ 930.178013][T16307] r8152-cfgselector 6-1: config 0 descriptor?? [ 930.201653][ T5929] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 930.255916][ T5929] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 930.320317][ T5929] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 930.339861][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 930.487512][ T5929] usb 4-1: SerialNumber: syz [ 931.255386][T17382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.278056][T17382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.475885][T16307] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 932.589151][ T5929] rndis_host 4-1:253.0: RNDIS init failed, -71 [ 932.626533][ T5929] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -71 [ 932.733382][T16307] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 1023 [ 932.760656][ T5929] usb 4-1: USB disconnect, device number 36 [ 932.780634][T16307] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 932.821694][T16307] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 0 [ 932.882513][T16307] usb 3-1: config 0 interface 0 has no altsetting 0 [ 932.918701][T16307] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 932.962109][T16307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.022979][T16307] usb 3-1: Product: syz [ 933.030114][T16307] usb 3-1: Manufacturer: syz [ 933.056013][T16307] usb 3-1: SerialNumber: syz [ 933.116926][T16307] usb 3-1: config 0 descriptor?? [ 933.123575][T17390] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 933.368163][T17390] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3033'. [ 933.389762][ T5929] usb 3-1: USB disconnect, device number 17 [ 934.056355][T13281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 934.067457][T13281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 934.076596][T13281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 934.087428][T13281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 934.114789][T13281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 934.145798][T16307] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 934.225458][ T5945] r8152-cfgselector 6-1: USB disconnect, device number 45 [ 934.335920][T16307] usb 4-1: device descriptor read/64, error -71 [ 934.343123][T17412] fuse: Bad value for 'user_id' [ 934.371978][T17412] fuse: Bad value for 'user_id' [ 934.550782][T12058] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.576092][T16307] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 934.638051][ T5929] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 934.925808][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 934.934115][ T5929] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 934.956125][ T5929] usb 3-1: config 0 has no interface number 0 [ 934.998432][ T5929] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 935.004073][T16307] usb 4-1: device descriptor read/64, error -71 [ 935.030421][ T5929] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 935.042053][T12058] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.074692][ T5929] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 935.105730][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.139718][T16307] usb usb4-port1: attempt power cycle [ 935.146191][ T5956] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 935.157470][ T5929] usb 3-1: Product: syz [ 935.164980][ T5929] usb 3-1: Manufacturer: syz [ 935.168329][T12058] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.169700][ T5929] usb 3-1: SerialNumber: syz [ 935.202482][ T5929] usb 3-1: config 0 descriptor?? [ 935.216130][T17413] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 935.223831][T17413] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 935.250853][T17407] chnl_net:caif_netlink_parms(): no params data found [ 935.322979][ T5956] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 935.334411][ T5956] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 935.345145][ T5956] usb 2-1: config 135 has no interface number 0 [ 935.353521][T12058] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.365755][ T5956] usb 2-1: config 135 interface 230 has no altsetting 0 [ 935.380636][ T5956] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 935.394777][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.403398][ T5956] usb 2-1: Product: syz [ 935.407705][ T5956] usb 2-1: Manufacturer: syz [ 935.412336][ T5956] usb 2-1: SerialNumber: syz [ 935.467984][T17412] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 935.475294][T17412] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 935.543364][T16307] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 935.623918][T16307] usb 4-1: device descriptor read/8, error -71 [ 936.155819][ T5866] Bluetooth: hci4: command tx timeout [ 936.285911][T16307] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 936.376741][T16307] usb 4-1: device descriptor read/8, error -71 [ 936.411787][T17407] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.432703][T17407] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.453771][T17407] bridge_slave_0: entered allmulticast mode [ 936.467839][T17407] bridge_slave_0: entered promiscuous mode [ 936.490166][T17407] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.506527][T16307] usb usb4-port1: unable to enumerate USB device [ 936.531153][T17407] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.539026][T17407] bridge_slave_1: entered allmulticast mode [ 936.547219][T17407] bridge_slave_1: entered promiscuous mode [ 936.838618][T17407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.882517][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.889256][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.949357][T17407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.167515][T17407] team0: Port device team_slave_0 added [ 937.454134][ T5929] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 937.471165][ T5929] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 937.496699][ T5929] asix 3-1:0.251: probe with driver asix failed with error -71 [ 937.561145][ T5929] usb 3-1: USB disconnect, device number 18 [ 937.865193][ T5929] usb 2-1: USB disconnect, device number 66 [ 938.236099][ T5866] Bluetooth: hci4: command tx timeout [ 938.535978][ T5929] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 938.568908][T17465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.578287][T17465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.594176][T17463] netlink: 'syz.5.3054': attribute type 10 has an invalid length. [ 938.602538][T17465] netlink: 'syz.5.3054': attribute type 10 has an invalid length. [ 938.709480][ T5929] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 938.720382][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.766044][ T5945] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 938.885728][T16147] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 939.225841][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 939.231758][ T5929] usb 2-1: Product: syz [ 939.245941][ T5929] usb 2-1: Manufacturer: syz [ 939.251133][ T5929] usb 2-1: SerialNumber: syz [ 939.254309][ T5945] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 939.300839][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.345371][ T5945] usb 4-1: Product: syz [ 939.355508][ T5945] usb 4-1: Manufacturer: syz [ 939.361575][T16147] usb 6-1: Using ep0 maxpacket: 8 [ 939.539742][ T5945] usb 4-1: SerialNumber: syz [ 939.554316][T12058] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 939.576282][T12058] bond0 (unregistering): Released all slaves [ 939.612428][T16147] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 939.633588][ T5929] gspca_main: pac207-2.14.0 probing 093a:2476 [ 939.642220][ T5945] r8152-cfgselector 4-1: Unknown version 0x0000 [ 939.645972][T16147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.662069][T12058] bond1 (unregistering): Released all slaves [ 939.665915][ T5945] r8152-cfgselector 4-1: config 0 descriptor?? [ 939.671649][ T5929] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 939.683291][T16147] usb 6-1: Product: syz [ 939.692314][T16147] usb 6-1: Manufacturer: syz [ 939.699041][ T5929] usb 2-1: Found UVC 0.00 device syz (093a:2476) [ 939.705712][ T5929] usb 2-1: No valid video chain found. [ 939.714777][T16147] usb 6-1: SerialNumber: syz [ 939.736179][ T5929] usb 2-1: USB disconnect, device number 67 [ 939.789598][T16147] usb 6-1: config 0 descriptor?? [ 940.138545][T12058] bond2 (unregistering): (slave veth1): Releasing active interface [ 940.172047][T12058] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 940.210943][T12058] bond2 (unregistering): Released all slaves [ 940.323273][ T5866] Bluetooth: hci4: command tx timeout [ 940.901694][T16147] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -110 [ 940.934682][T16147] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 941.049740][T12058] bond3 (unregistering): Released all slaves [ 941.347498][T17481] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 941.427420][T17407] team0: Port device team_slave_1 added [ 941.714720][T17469] netlink: 'syz.1.3055': attribute type 1 has an invalid length. [ 941.723731][T17469] netlink: 'syz.1.3055': attribute type 1 has an invalid length. [ 941.732141][T17469] netlink: 'syz.1.3055': attribute type 1 has an invalid length. [ 941.757723][T17469] netlink: 'syz.1.3055': attribute type 1 has an invalid length. [ 941.768491][T17469] netlink: 'syz.1.3055': attribute type 1 has an invalid length. [ 941.800567][T17469] netlink: 'syz.1.3055': attribute type 1 has an invalid length. [ 941.808703][T17469] netlink: 'syz.1.3055': attribute type 1 has an invalid length. [ 941.847056][T17469] netlink: 'syz.1.3055': attribute type 1 has an invalid length. [ 941.857762][T12058] tipc: Disabling bearer [ 941.909438][T12058] tipc: Left network mode [ 942.082329][T17407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.139704][T17407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.263094][ T5929] usb 6-1: USB disconnect, device number 46 [ 942.286319][T17407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.396142][T13281] Bluetooth: hci4: command tx timeout [ 942.561756][T17407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.573735][T17407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.645879][T17407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.379987][T17407] hsr_slave_0: entered promiscuous mode [ 943.446369][T17407] hsr_slave_1: entered promiscuous mode [ 943.506620][T17407] debugfs: 'hsr0' already exists in 'hsr' [ 943.582627][T17407] Cannot create hsr debugfs directory [ 943.601368][T12058] ------------[ cut here ]------------ [ 943.607668][T12058] WARNING: CPU: 0 PID: 12058 at net/mac80211/key.c:1163 ieee80211_free_keys+0x536/0x650 [ 943.617551][T12058] Modules linked in: [ 943.621947][T12058] CPU: 0 UID: 0 PID: 12058 Comm: kworker/u8:17 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 943.634089][T12058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 943.644644][T12058] Workqueue: netns cleanup_net [ 943.649876][T12058] RIP: 0010:ieee80211_free_keys+0x536/0x650 [ 943.655898][T12058] Code: 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f9 3c c7 f6 90 0f 0b 90 e9 46 fc ff ff e8 eb 3c c7 f6 90 <0f> 0b 90 4c 8b 24 24 e9 7c fe ff ff e8 d9 3c c7 f6 e9 2f fe ff ff [ 943.675971][T12058] RSP: 0000:ffffc90004aff040 EFLAGS: 00010293 [ 943.682094][T12058] RAX: ffffffff8af86d55 RBX: dffffc0000000000 RCX: ffff88802bd2da00 [ 943.690708][T12058] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 943.699437][T12058] RBP: ffffc90004aff0f0 R08: ffffc90004afede7 R09: 1ffff9200095fdbc [ 943.707562][T12058] R10: dffffc0000000000 R11: fffff5200095fdbd R12: 0000000000000002 [ 943.715922][T12058] R13: ffff8880534569d0 R14: 1ffff1100a68ad3a R15: 0000000000000001 [ 943.723970][T12058] FS: 0000000000000000(0000) GS:ffff888125c28000(0000) knlGS:0000000000000000 [ 943.732989][T12058] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 943.739660][T12058] CR2: 00007fcb75946040 CR3: 000000007e27c000 CR4: 00000000003526f0 [ 943.747753][T12058] Call Trace: [ 943.751080][T12058] [ 943.754056][T12058] ? __pfx_ieee80211_free_keys+0x10/0x10 [ 943.760170][T12058] ? wiphy_work_cancel+0x1eb/0x3c0 [ 943.765358][T12058] ieee80211_do_stop+0xf47/0x1fb0 [ 943.771050][T12058] ? __lock_acquire+0xab9/0xd20 [ 943.776156][T12058] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 943.781641][T12058] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 943.787299][T12058] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 943.793960][T12058] ? lockdep_hardirqs_on+0x9c/0x150 [ 943.799935][T12058] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 943.806375][T12058] ? wiphy_work_cancel+0x1eb/0x3c0 [ 943.811545][T12058] ieee80211_stop+0x1b1/0x240 [ 943.816324][T12058] ? __pfx_ieee80211_stop+0x10/0x10 [ 943.821601][T12058] __dev_close_many+0x361/0x6f0 [ 943.826553][T12058] ? __pfx___dev_close_many+0x10/0x10 [ 943.831972][T12058] ? do_raw_spin_lock+0x121/0x290 [ 943.837373][T12058] netif_close_many+0x225/0x410 [ 943.842360][T12058] ? __pfx_netif_close_many+0x10/0x10 [ 943.847806][T12058] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 943.853783][T12058] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 943.860318][T12058] netif_close+0x158/0x210 [ 943.864785][T12058] ? __pfx_netif_close+0x10/0x10 [ 943.869932][T12058] ? __mutex_lock+0xd36/0x1360 [ 943.874748][T12058] dev_close+0x10a/0x220 [ 943.879081][T12058] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 943.885293][T12058] ieee80211_remove_interfaces+0x109/0x6e0 [ 943.891239][T12058] ? __pfx_synchronize_rcu+0x10/0x10 [ 943.897281][T12058] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 943.904033][T12058] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 943.910472][T12058] ? rcu_is_watching+0x15/0xb0 [ 943.915309][T12058] ieee80211_unregister_hw+0x5d/0x2c0 [ 943.921513][T12058] mac80211_hwsim_del_radio+0x275/0x460 [ 943.927176][T12058] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 943.933631][T12058] hwsim_exit_net+0x584/0x640 [ 943.938431][T12058] ? __pfx_hwsim_exit_net+0x10/0x10 [ 943.943701][T12058] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 943.949749][T12058] ops_undo_list+0x497/0x990 [ 943.954419][T12058] ? __pfx_ops_undo_list+0x10/0x10 [ 943.959668][T12058] ? do_raw_spin_unlock+0x122/0x240 [ 943.965016][T12058] cleanup_net+0x4c5/0x800 [ 943.969545][T12058] ? __pfx_cleanup_net+0x10/0x10 [ 943.974573][T12058] ? _raw_spin_unlock_irq+0x23/0x50 [ 943.979941][T12058] ? process_scheduled_works+0x9ef/0x17b0 [ 943.985746][T12058] ? process_scheduled_works+0x9ef/0x17b0 [ 943.991558][T12058] process_scheduled_works+0xade/0x17b0 [ 943.998659][T12058] ? __pfx_process_scheduled_works+0x10/0x10 [ 944.005510][T12058] worker_thread+0x8a0/0xda0 [ 944.010225][T12058] kthread+0x711/0x8a0 [ 944.014534][T12058] ? __pfx_worker_thread+0x10/0x10 [ 944.019810][T12058] ? __pfx_kthread+0x10/0x10 [ 944.024514][T12058] ? _raw_spin_unlock_irq+0x23/0x50 [ 944.029940][T12058] ? lockdep_hardirqs_on+0x9c/0x150 [ 944.035189][T12058] ? __pfx_kthread+0x10/0x10 [ 944.039926][T12058] ret_from_fork+0x3f9/0x770 [ 944.044664][T12058] ? __pfx_ret_from_fork+0x10/0x10 [ 944.050017][T12058] ? __switch_to_asm+0x39/0x70 [ 944.054975][T12058] ? __switch_to_asm+0x33/0x70 [ 944.059928][T12058] ? __pfx_kthread+0x10/0x10 [ 944.064570][T12058] ret_from_fork_asm+0x1a/0x30 [ 944.069510][T12058] [ 944.072583][T12058] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 944.080044][T12058] CPU: 0 UID: 0 PID: 12058 Comm: kworker/u8:17 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) [ 944.092143][T12058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 944.102224][T12058] Workqueue: netns cleanup_net [ 944.107076][T12058] Call Trace: [ 944.110377][T12058] [ 944.113325][T12058] dump_stack_lvl+0x99/0x250 [ 944.117934][T12058] ? __asan_memcpy+0x40/0x70 [ 944.122557][T12058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 944.127772][T12058] ? __pfx__printk+0x10/0x10 [ 944.132388][T12058] vpanic+0x281/0x750 [ 944.136645][T12058] ? __pfx__printk+0x10/0x10 [ 944.141357][T12058] ? __pfx_vpanic+0x10/0x10 [ 944.145892][T12058] ? is_bpf_text_address+0x26/0x2b0 [ 944.151139][T12058] panic+0xb9/0xc0 [ 944.154894][T12058] ? __pfx_panic+0x10/0x10 [ 944.159347][T12058] __warn+0x31b/0x4b0 [ 944.163350][T12058] ? ieee80211_free_keys+0x536/0x650 [ 944.168650][T12058] ? ieee80211_free_keys+0x536/0x650 [ 944.173949][T12058] report_bug+0x2be/0x4f0 [ 944.178290][T12058] ? ieee80211_free_keys+0x536/0x650 [ 944.183787][T12058] ? ieee80211_free_keys+0x536/0x650 [ 944.189110][T12058] ? ieee80211_free_keys+0x538/0x650 [ 944.194436][T12058] handle_bug+0x84/0x160 [ 944.198806][T12058] exc_invalid_op+0x1a/0x50 [ 944.203446][T12058] asm_exc_invalid_op+0x1a/0x20 [ 944.208405][T12058] RIP: 0010:ieee80211_free_keys+0x536/0x650 [ 944.214406][T12058] Code: 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f9 3c c7 f6 90 0f 0b 90 e9 46 fc ff ff e8 eb 3c c7 f6 90 <0f> 0b 90 4c 8b 24 24 e9 7c fe ff ff e8 d9 3c c7 f6 e9 2f fe ff ff [ 944.234466][T12058] RSP: 0000:ffffc90004aff040 EFLAGS: 00010293 [ 944.240552][T12058] RAX: ffffffff8af86d55 RBX: dffffc0000000000 RCX: ffff88802bd2da00 [ 944.248540][T12058] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 944.256523][T12058] RBP: ffffc90004aff0f0 R08: ffffc90004afede7 R09: 1ffff9200095fdbc [ 944.264522][T12058] R10: dffffc0000000000 R11: fffff5200095fdbd R12: 0000000000000002 [ 944.272520][T12058] R13: ffff8880534569d0 R14: 1ffff1100a68ad3a R15: 0000000000000001 [ 944.280715][T12058] ? ieee80211_free_keys+0x535/0x650 [ 944.286046][T12058] ? __pfx_ieee80211_free_keys+0x10/0x10 [ 944.292076][T12058] ? wiphy_work_cancel+0x1eb/0x3c0 [ 944.297227][T12058] ieee80211_do_stop+0xf47/0x1fb0 [ 944.302273][T12058] ? __lock_acquire+0xab9/0xd20 [ 944.307163][T12058] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 944.312558][T12058] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 944.318039][T12058] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 944.323953][T12058] ? lockdep_hardirqs_on+0x9c/0x150 [ 944.329252][T12058] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 944.335600][T12058] ? wiphy_work_cancel+0x1eb/0x3c0 [ 944.340735][T12058] ieee80211_stop+0x1b1/0x240 [ 944.345425][T12058] ? __pfx_ieee80211_stop+0x10/0x10 [ 944.350636][T12058] __dev_close_many+0x361/0x6f0 [ 944.355588][T12058] ? __pfx___dev_close_many+0x10/0x10 [ 944.361260][T12058] ? do_raw_spin_lock+0x121/0x290 [ 944.366679][T12058] netif_close_many+0x225/0x410 [ 944.371658][T12058] ? __pfx_netif_close_many+0x10/0x10 [ 944.377048][T12058] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 944.382992][T12058] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 944.389372][T12058] netif_close+0x158/0x210 [ 944.393803][T12058] ? __pfx_netif_close+0x10/0x10 [ 944.398772][T12058] ? __mutex_lock+0xd36/0x1360 [ 944.403579][T12058] dev_close+0x10a/0x220 [ 944.407872][T12058] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 944.414094][T12058] ieee80211_remove_interfaces+0x109/0x6e0 [ 944.419934][T12058] ? __pfx_synchronize_rcu+0x10/0x10 [ 944.425254][T12058] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 944.431202][T12058] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 944.437773][T12058] ? rcu_is_watching+0x15/0xb0 [ 944.442587][T12058] ieee80211_unregister_hw+0x5d/0x2c0 [ 944.448001][T12058] mac80211_hwsim_del_radio+0x275/0x460 [ 944.453620][T12058] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 944.459730][T12058] hwsim_exit_net+0x584/0x640 [ 944.464459][T12058] ? __pfx_hwsim_exit_net+0x10/0x10 [ 944.469680][T12058] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 944.475516][T12058] ops_undo_list+0x497/0x990 [ 944.480133][T12058] ? __pfx_ops_undo_list+0x10/0x10 [ 944.485469][T12058] ? do_raw_spin_unlock+0x122/0x240 [ 944.490686][T12058] cleanup_net+0x4c5/0x800 [ 944.495124][T12058] ? __pfx_cleanup_net+0x10/0x10 [ 944.500087][T12058] ? _raw_spin_unlock_irq+0x23/0x50 [ 944.505315][T12058] ? process_scheduled_works+0x9ef/0x17b0 [ 944.511057][T12058] ? process_scheduled_works+0x9ef/0x17b0 [ 944.516805][T12058] process_scheduled_works+0xade/0x17b0 [ 944.522410][T12058] ? __pfx_process_scheduled_works+0x10/0x10 [ 944.528424][T12058] worker_thread+0x8a0/0xda0 [ 944.533050][T12058] kthread+0x711/0x8a0 [ 944.537141][T12058] ? __pfx_worker_thread+0x10/0x10 [ 944.542266][T12058] ? __pfx_kthread+0x10/0x10 [ 944.546880][T12058] ? _raw_spin_unlock_irq+0x23/0x50 [ 944.552103][T12058] ? lockdep_hardirqs_on+0x9c/0x150 [ 944.557318][T12058] ? __pfx_kthread+0x10/0x10 [ 944.561943][T12058] ret_from_fork+0x3f9/0x770 [ 944.566651][T12058] ? __pfx_ret_from_fork+0x10/0x10 [ 944.571805][T12058] ? __switch_to_asm+0x39/0x70 [ 944.576614][T12058] ? __switch_to_asm+0x33/0x70 [ 944.581573][T12058] ? __pfx_kthread+0x10/0x10 [ 944.586196][T12058] ret_from_fork_asm+0x1a/0x30 [ 944.590987][T12058] [ 944.594551][T12058] Kernel Offset: disabled [ 944.598902][T12058] Rebooting in 86400 seconds..