last executing test programs: 1m27.633042205s ago: executing program 4 (id=1396): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x23, 0x9, 0x6}, {0x3, 0x1, 0x9, 0xef17e523}, {0x1000, 0xb, 0x3, 0x8000}]}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) syz_emit_ethernet(0x8a, &(0x7f0000000300)={@random="195df410dc24", @random="000600", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "aac4e0", 0x54, 0x2c, 0x0, @dev, @local, {[@routing={0x2b}, @routing={0x4, 0x0, 0x2, 0x6}], {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xff}}}}}}}}}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x1, r5}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) 1m25.935174242s ago: executing program 4 (id=1402): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001400)=' ', 0x1}], 0x1}}], 0x2, 0x10) 1m24.967935529s ago: executing program 4 (id=1405): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000780)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1}) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r3], 0x2c}, 0x1, 0x0, 0x0, 0x24008881}, 0x24045055) 1m23.769666166s ago: executing program 4 (id=1409): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x40) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0xaf2c, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, [0xa, 0x0, 0xfff, 0x3, 0xe9, 0x1, 0xfff, 0xf, 0x6, 0x1, 0x5, 0x100000000, 0x1, 0x0, 0x3]}, &(0x7f0000000100)=0x100) r6 = dup(r3) write$UHID_INPUT(r6, &(0x7f00000009c0)={0xf, {"a2e3ad214fc752f90b5e09094bf70e0dd038e7ff7fc6e5539b1b48078b089b3b0838721a0890e0878f0e1ac6e7049b3d6c959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d07420736cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e2c5070000179c6f30e065cd5b91cd0ae17d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3bb469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918070000003f0000000c558cdc0a3621c56cea8d20fa911afe40db6ebe8cac64289fd3da232f1b5dbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860421c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2f09000000000000007747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847354b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d483d4675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516ab68032f88c042ffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d95f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9d1a3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdfa1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442748af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500", 0x1009}}, 0x1006) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa59e0abe22112e7e5addee3ab6de7ecefaaaaaaaaaaaaaaaa2786dd603000bb00082b00fc020000000000000000000001000000fe8000000000000000de0b00000000aa00009a030000089078"], 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}, 0x1, 0x34000}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) bind$packet(r8, &(0x7f0000000000)={0x11, 0x3, r9, 0x1, 0x0, 0x6, @local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={r9, 0x1, 0x6, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', r9, 0x2f, 0x1, 0x89, 0x2, 0x41, @remote, @remote, 0x8000, 0x8, 0x0, 0x6}}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {0x2, 0x10}, {0xc}}, [{0x4}, {0xffffffffffffffbd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x94}, 0x40044) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040fc11611c6649301129e1e0304000007"], 0x7) 1m18.79638802s ago: executing program 4 (id=1424): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfffd}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x10) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) unshare(0x2a020400) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r6, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) r7 = openat$pfkey(0xffffff9c, &(0x7f0000000cc0), 0x20200, 0x0) read$FUSE(r7, &(0x7f0000001000)={0x2020}, 0x2020) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000", @ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1m16.484420184s ago: executing program 4 (id=1433): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4a, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0xd, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0xfe, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, &(0x7f0000000100)={0x40, 0xb, 0xe, {0xe, 0x24, "271d70fe7f15532cd1096f4d"}}, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4e5e4347, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r8 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc0f8565c, &(0x7f0000000140)={0x3fb, 0x4a4, 0x3, {0x9, @pix_mp={0x200, 0x6, 0x31364d4e, 0x1, 0x1, [{0x4813, 0x3}, {0x888, 0x2}, {0x6, 0x1}, {0x1, 0x7}, {0x5, 0x1}, {0xa2, 0x3}, {0x3, 0x5}, {0x9b}], 0x1, 0x2, 0x0, 0x0, 0x3}}, 0x4}) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) bind$can_j1939(r6, &(0x7f0000000200)={0x1d, r7, 0x2, {0x2, 0xff, 0x3}, 0x3}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x58, r10, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x70}, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7ff, 0x8000070}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x58}, 0x1, 0x0, 0x0, 0x20008081}, 0x24044884) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x3c, r10, 0x100, 0x715, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x38}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8804) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r13, @ANYBLOB="60c000000800000024001280110001006272696467655f736c617665000000000c000580080022"], 0x44}, 0x1, 0x0, 0x0, 0x95}, 0x4) 1m1.450385934s ago: executing program 32 (id=1433): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4a, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0xd, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0xfe, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, &(0x7f0000000100)={0x40, 0xb, 0xe, {0xe, 0x24, "271d70fe7f15532cd1096f4d"}}, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4e5e4347, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r8 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc0f8565c, &(0x7f0000000140)={0x3fb, 0x4a4, 0x3, {0x9, @pix_mp={0x200, 0x6, 0x31364d4e, 0x1, 0x1, [{0x4813, 0x3}, {0x888, 0x2}, {0x6, 0x1}, {0x1, 0x7}, {0x5, 0x1}, {0xa2, 0x3}, {0x3, 0x5}, {0x9b}], 0x1, 0x2, 0x0, 0x0, 0x3}}, 0x4}) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) bind$can_j1939(r6, &(0x7f0000000200)={0x1d, r7, 0x2, {0x2, 0xff, 0x3}, 0x3}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x58, r10, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x70}, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7ff, 0x8000070}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x58}, 0x1, 0x0, 0x0, 0x20008081}, 0x24044884) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x3c, r10, 0x100, 0x715, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x38}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8804) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r13, @ANYBLOB="60c000000800000024001280110001006272696467655f736c617665000000000c000580080022"], 0x44}, 0x1, 0x0, 0x0, 0x95}, 0x4) 8.468134424s ago: executing program 0 (id=1694): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={0x0, 0x0, r4}) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 6.664614481s ago: executing program 1 (id=1697): unshare(0x8040600) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x110c230000, 0x9, 0x2, @thr={0x0, 0x0}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r2, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time={0x0, 0x1}, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x40, 0x0, 0x0, @tick, {0xff}, {}, @raw32={[0x1]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0xfa, 0x9, 0xffff}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr={0x8, 0x3}}], 0x70) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/111, 0x6f) syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0x5, @sliced={0x3ff, [0x7, 0x4670, 0xa69b, 0x0, 0xb74, 0xa2, 0x7, 0x1, 0xb1a, 0x1, 0x5, 0xb3d, 0xc1, 0xb8d, 0x5, 0x1000, 0x5e83, 0xb3e, 0x80, 0x1fd, 0xb, 0xcba, 0x8, 0x9, 0x6, 0xf1, 0x0, 0x803, 0x9, 0x4, 0x5, 0x38c3, 0x6, 0x3, 0x6e, 0x1000, 0x1, 0x3, 0x9, 0x8000, 0x2, 0x55, 0x5ae, 0x1000, 0x4, 0x0, 0x5, 0x5], 0x10000}}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a0034a039010101010100000a004f005050505050500000"], 0x34}}, 0x0) 6.506943069s ago: executing program 2 (id=1698): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r2}, &(0x7f0000000100)=0x8) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80010000, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3100000000240007800400028008000140ac1414bb0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd8, r4, 0xa1c, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x69fa}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbc7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x984}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x79cefbba}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) 6.434850065s ago: executing program 3 (id=1699): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) (async) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) write$proc_mixer(r0, &(0x7f0000000080)=ANY=[], 0xb0) (async) write$proc_mixer(r0, &(0x7f0000000080)=ANY=[], 0xb0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80000, 0x0) dup3(r1, r0, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f0000000080)=@v2={0x2000000, [{0x1, 0x8}, {0xfffffff8, 0x4}]}, 0x14, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb200090581ef02"], 0x0) 6.363349154s ago: executing program 1 (id=1701): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r4, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r3, &(0x7f0000000180)='\x00', 0xfdfe}]) dup3(r0, r1, 0x6700000000000000) 6.161812013s ago: executing program 0 (id=1703): r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x3, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000700)={r4, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000005fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000100)={0x0, r0, 0x34, {0x1, 0x7f}, 0x8}, 0x1) 6.077457931s ago: executing program 1 (id=1704): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000300)=r2, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYBLOB="f80000002800"], 0xf8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b0200000000000061114c000000000085000000a40000009500000005007586285866cbd92f204f00000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x6, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x30) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r3, 0x5, 0x100000, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac06}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac05, 0xfac06, 0xfac06]}]]}, 0x40}}, 0x4000800) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) connect$inet(r5, &(0x7f0000000100)={0x2, 0x7fff, @private=0xa010102}, 0x10) r6 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x105f01, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r6, 0xc0046d00, &(0x7f00000000c0)=0xfffffffc) 5.939086234s ago: executing program 1 (id=1705): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1004042cbd7000fbdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440003001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x2c, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}, [{0x8, 0xb, 0x200}]}, 0x2c}}, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x1b, r6, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x224b5bee36ba75e4}}, 0x14) unshare(0x2c020400) syz_io_uring_setup(0x6a28, &(0x7f0000000240)={0x0, 0x93c9, 0x800, 0xfffffffd, 0x3b5, 0x0, r2}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) setns(0xffffffffffffffff, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 5.866166539s ago: executing program 0 (id=1706): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_getevents(r2, 0x23, 0x7, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x0) io_submit(r2, 0x1, &(0x7f0000002900)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x3511, r1, 0x0, 0x0, 0xff, 0x0, 0x0, r1}]) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1000, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) close(r3) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r7, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000140)={0x20002001}) ioctl$SNDCTL_DSP_POST(r7, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r7, 0x800c5012, &(0x7f0000001400)) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c00128011000100627269647827655f736c6176650000000044000580050f0900000000000500200001000000050008"], 0x7c}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(r9, 0x0, 0x0, 0x2001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) 5.390305973s ago: executing program 2 (id=1707): syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r1, 0x0, 0x3a99c56f) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000140)={0x80, 0x5, 0xfffffffe, 0x4, 0x400, 0x7ff}) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x7, 0x56) syz_emit_ethernet(0xfb, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x2, 0x6, 'b(\f', 0xc5, 0x6, 0xff, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, {[@routing={0x0, 0xe, 0x1, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @loopback, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1a}, @remote]}, @routing={0x2f, 0x0, 0x1, 0xf}], {{0x4e20, 0x4e21, r0, r3, 0x1, 0x0, 0x6, 0x40, 0x5, 0x0, 0x6, {[@eol]}}, {"72eb6c68804265f65d76d5e90127e3637977e207326a06c12d74201274d009ad74383a9c69567fd89941c7ef11"}}}}}}}, 0x0) 5.090165269s ago: executing program 2 (id=1708): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = io_uring_setup(0x3eac, &(0x7f0000000100)={0x0, 0x9bd3, 0x100, 0xffffffff, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/4097, 0x1001}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) fanotify_init(0x200, 0x8000) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000060000000030a010100000000000000000100000008000b400000000014000480080002400000000008000140000000000900010073797a300000000008000a40000000021c0000800c00024000000000000000000c0001400000000000000000140000001000010000000000000000000000000a"], 0xa8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) 4.761143564s ago: executing program 3 (id=1709): r0 = socket$can_raw(0x1d, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe4) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000300, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = add_key$fscrypt_v1(0x0, &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x1d) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xcf) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000080), 0x4) 4.7038969s ago: executing program 3 (id=1710): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)}], 0x1}}], 0x1, 0x10) 4.619751088s ago: executing program 0 (id=1711): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffffff, 0x0, 0x89901) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x40c0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f00000007c0)={"dd9a64b420b1c69f4e76bb0761597e60", 0x0, 0x0, {0x6, 0x80000000}, {0x0, 0x72c2}, 0x1, [0x1ff, 0x9d, 0x3, 0x10, 0x962, 0x4, 0x1000000000000000, 0x6, 0x5, 0x9, 0xf6a7, 0x9, 0x2, 0x4, 0x8000, 0xc]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000380)={{r5}, 0x0, 0x4, @unused=[0x832, 0x8, 0x5a, 0x7], @subvolid=0x9}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0xc0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46100) move_mount(r1, 0x0, r0, 0x0, 0x46) syz_usbip_server_init(0x1) 4.519853196s ago: executing program 5 (id=1712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x7c}}, 0x0) 4.418307002s ago: executing program 5 (id=1713): socket(0x29, 0x80805, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$inet(0xa, 0x3, 0x83) socket$nl_route(0x10, 0x3, 0x0) socket(0x840000000002, 0x3, 0xff) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1ff, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa0001, 0x0) socket$inet6(0xa, 0x3, 0x7) syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x143842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f00000000c0)={0x4102}, 0x18, 0x0) openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_io_uring_setup(0x673f, &(0x7f0000000380)={0x0, 0x418c, 0x1, 0x203, 0x28c}, 0x0, 0x0) io_uring_setup(0x3ca9, &(0x7f0000000300)={0x0, 0xc63b, 0x1000, 0xfffffffc, 0x40083, 0x0, r1}) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES64=r2, @ANYRES64=0x0, @ANYRESHEX=r2], 0x20) 3.725430807s ago: executing program 3 (id=1714): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r4, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r3, &(0x7f0000000180)='\x00', 0xfdfe}]) dup3(r0, r1, 0x6700000000000000) 3.568606859s ago: executing program 5 (id=1715): r0 = syz_io_uring_setup(0x870, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10000, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) r3 = openat$uhid(0xffffff9c, &(0x7f0000000180), 0x802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_CREATE2(r3, &(0x7f0000000780)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x57, 0x9, 0x0, 0x101, 0x1, 0x2eb, "13c08cf58f9353f23efebd339a7027e42d69b4ba9837d629d14d7745e9558fd766e2df6af5923a7ee0752d60c98bf8ba744a609a82fa558572b2983ae2dfb2b4e0e913d7ad0105b7e1b9a476d638457ef4d6ef311af3a1"}}, 0x16f) io_uring_enter(r0, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) statx(0xffffffffffffffff, &(0x7f0000004940)='\x00', 0x7800, 0x80, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r5}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "352bc764aef32890"}, 0x10}, 0x2, 0x0, 0x0, 0x4080}, 0x0) syz_usb_connect(0x6, 0x36a, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x56, 0x11, 0xae, 0x10, 0x2b73, 0x23, 0xc6f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x358, 0x3, 0x0, 0x5, 0x10, 0x4, [{{0x9, 0x4, 0xc2, 0x81, 0x7, 0xff, 0x77, 0xda, 0x5, [], [{{0x9, 0x5, 0xc, 0x3, 0x200, 0x3, 0xa5, 0x5d, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x7}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0xca, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0xfffe}]}}, {{0x9, 0x5, 0xa, 0x4, 0x0, 0x67, 0x4, 0x3, [@generic={0x1b, 0x5afe19c33e69f333, "0097bfff299c69f57d1b507bfc5e06abe1c2c89c5a48fc8541"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x37, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xc, 0x1}, @generic={0x16, 0x12, "43584bc27d8585bc9ec67b7788b00d5914f576ef"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0xe, 0x9, 0x4}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0xf, 0xff, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x3}]}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0x3a, 0x10, 0x4c}}]}}, {{0x9, 0x4, 0x70, 0x4, 0x7, 0x51, 0x25, 0x36, 0x80, [@generic={0x98, 0xd, "2adad2fc47ac99acc23d97807463b81e4e88ec2326911eabf5477a8a3b29f87eb3282ee329068ecb544ce5a236ef4defffca6dda018967b80695589ce6f2940890a149e236f7bb329d86c314b24f8a3d52e1e55778a3828d6c2b2a8490e972675c2acc41a92b3393a178c5ba7b4ec47af801ba7dc57b6056831d437fc90dc23acec2402b34a5f1b1729a0b70a5869e655c6fba234089"}, @uac_control={{0xa, 0x24, 0x1, 0x7}, [@feature_unit={0x9, 0x24, 0x6, 0x1, 0x2, 0x1, [0x0], 0x4}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x305, 0x5, 0x6, 0x2}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x3, 0x3, [0x7, 0x5, 0xe], 0x3f}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x5, 0x3, [0x3, 0x6, 0x3], 0x9}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x0, 0x5, "c4f9c0578ce5"}]}], [{{0x9, 0x5, 0x8, 0x10, 0x200, 0x9, 0x7, 0xfb, [@generic={0x36, 0xf, "e8974e3b55e4c7a5c412151efe11255a72ed68c4154fb06f6c6bf614f38bfb556fb668035dcb9a00e31c1d372da609e9e70e250d"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x80, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xd5b}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x61, 0x800}]}}, {{0x9, 0x5, 0x5, 0x623f9b7c14eca228, 0x400, 0x2, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x10, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0xf9, 0x8, 0xc3, [@generic={0x61, 0x6, "6cead7eaefa15ea682942465f7ad0ed12adf6f3612891ccecdef33363255179b3ab4c53954c6de6ec8b0de1b7d3e06d91f3456724fc5bc9cce3a1caffb119219b5fbbcd09fbbd0824ef6307fa9637ec94e37550ee1a6df58062c0ea0ad219f"}, @generic={0xa2, 0x0, "38198935c56afbb10ac25b795c5573f11cb75920ce8224b50ebda8effa84d010ba3fd9eb98cd0c9f8c636c55a9f7a89d13c9d9bd849ee5526c5ef47e758c6ca8cf7caf945252bbc368abd28479da00288d70176cc276df54d4b57e740e3cd70ef64591009ddfe69016b0d8e8aa2a79fb1fa362e0306b835d404a0321a50cc54f74f80755978a2c3cddfb094066a8368fbd5920805bb1a7ad776b33185840b08d"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0xff, 0x4, 0x0, [@generic={0x2a, 0x24, "0e9e377624598e806e57f36e8504b2d6839059a5f216908c04454de80d237e713a69c9fd53a21ea4"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x4}]}}, {{0x9, 0x5, 0x80, 0x3, 0x40, 0x42, 0x1, 0x2}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x6, 0x8c, 0x9}}]}}, {{0x9, 0x4, 0xf, 0x3, 0x0, 0xe4, 0xaa, 0x98, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x8}}]}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x5, 0x7, 0x8, 0x8, 0x2}, 0x19, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f19000114d1391a7cff6263c3ec969810864bf0d9100427a2be7c15cc705e7a87b6f909ba2dc0066ae4e747e9fa0b64105bdc21a936710e0565940d16"], 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2809}}]}) 3.159981392s ago: executing program 3 (id=1716): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000004c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='-', @ANYRESHEX, @ANYRESOCT=r3], 0x27) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7814, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r4, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2.687302476s ago: executing program 5 (id=1717): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) syz_emit_ethernet(0x8a, &(0x7f0000000300)={@random="195df410dc24", @random="000600", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "aac4e0", 0x54, 0x2c, 0x0, @dev, @local, {[@routing={0x2b}, @routing={0x4, 0x0, 0x2, 0x6}], {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xff}}}}}}}}}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x1, r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) 2.639349474s ago: executing program 1 (id=1718): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x23, 0x9, 0x6}, {0x3, 0x1, 0x9, 0xef17e523}, {0x1000, 0xb, 0x3, 0x8000}]}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) syz_emit_ethernet(0x8a, &(0x7f0000000300)={@random="195df410dc24", @random="000600", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "aac4e0", 0x54, 0x2c, 0x0, @dev, @local, {[@routing={0x2b}, @routing={0x4, 0x0, 0x2, 0x6}], {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xff}}}}}}}}}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x1, r4}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) 1.095712297s ago: executing program 2 (id=1719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3a1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x100) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x8d41) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_RELEASEINTERFACE(r10, 0x80045510, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) 1.04409989s ago: executing program 3 (id=1720): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf2505000000180001800d0001007564703a28a2634376"], 0x2c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffff, 0x0, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xfffffffc, 0x3}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r4, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x317, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x394}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x20000) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x14) io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x200, 0x400005, 0x2b0, 0x0, r3}) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@remote, @empty, @val={@val, {0x88ca}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @random="6db94870148a", @empty, @random="ee54656dc8ae", @local}}}}, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x1) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv2(r7, &(0x7f0000000880), 0x0, 0x7, 0x3, 0x1) read$FUSE(r7, &(0x7f0000002fc0)={0x2020}, 0x2020) 1.002028693s ago: executing program 0 (id=1721): r0 = socket$can_raw(0x1d, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe4) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000300, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = add_key$fscrypt_v1(0x0, &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x1d) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xcf) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000080), 0x4) 732.445719ms ago: executing program 0 (id=1722): socket$nl_netfilter(0x10, 0x3, 0xc) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000246cf10dd040280b6fc010203010902120001000000040904000000ff020100"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x80000}, 0x0) r2 = openat$autofs(0xffffff9c, &(0x7f0000001100), 0x80, 0x0) r3 = openat$sw_sync_info(0xffffff9c, &(0x7f00000012c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001300)={{0x1, 0x1, 0x18, r3, {0x80000000}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110031fcd1b08cf10"], 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000180)=0x4a) getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$vim2m(0x0, 0x3, 0x2) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="0c0400000000d70b8ac378e58f438d5400961485845e5f8d4c0c7d5122d3ff7c2b55b3ea300261d97ba151c83a8b5ef6c59df654a25975fbbb3871d693fb4d1ce8eb77"], 0xc}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001080), 0x8, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000001180)={{0x3, 0x0, 0x3, 0x0, 'syz0\x00'}, 0x3, 0x1, 0xffffff18, r7, 0x7, 0xf, 'syz0\x00', &(0x7f00000010c0)=['user\x00', '\x00', 'user\x00', 'user\x00', '\x00', '\x9a![\x00', '\x00'], 0x16}) 717.720877ms ago: executing program 2 (id=1723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x7c}}, 0x0) 544.239991ms ago: executing program 2 (id=1724): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000001092102240001040000241600000009250102c255af9b48f57f507372cfc6dbff0805810300"/58], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x0) shutdown(r4, 0x1) syz_usb_control_io(r3, &(0x7f0000000500)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="001005000000e2c62b3d"], 0x0, 0x0, 0x0, 0x0}, 0x0) 304.901669ms ago: executing program 5 (id=1725): socket(0x29, 0x80805, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$inet(0xa, 0x3, 0x83) socket$nl_route(0x10, 0x3, 0x0) socket(0x840000000002, 0x3, 0xff) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1ff, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa0001, 0x0) socket$inet6(0xa, 0x3, 0x7) syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x143842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f00000000c0)={0x4102}, 0x18, 0x0) openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_io_uring_setup(0x673f, &(0x7f0000000380)={0x0, 0x418c, 0x1, 0x203, 0x28c}, 0x0, 0x0) io_uring_setup(0x3ca9, &(0x7f0000000300)={0x0, 0xc63b, 0x1000, 0xfffffffc, 0x40083, 0x0, r1}) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES64=r2, @ANYRES64=0x0, @ANYRESHEX=r2], 0x20) 111.852172ms ago: executing program 1 (id=1726): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x107ac2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x2, 0xb49, 0x9, 0x6, 0x0, 0x69}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0xb001, 0x4, 0x3bc, 0x1c4, 0x1c4, 0x0, 0x2b0, 0x2b0, 0x2b0, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0x10c}, @unspec=@AUDIT={0x0, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xbc, 0xe4, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@arp={@broadcast, @empty, 0xffffffff, 0xff000000, 0x9, 0xb, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x200, 0x9, 0x2, 0x9289, 0x401, 0x218, 'veth1_vlan\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x0, 0x80}, 0xbc, 0xec}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0xffffffff}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x1bf) unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002000010300000009fddbdf25020000100500000100901700"], 0x1c}}, 0x44) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) openat$autofs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000240)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x2ddfdbfb, 0x1000000}, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044081}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000900)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x8, 0x0, 0xade, 0x88, 0x40000000, 0xdf}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="1b080000", 0x4, 0x4008005, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f00000001c0)=0x8) 0s ago: executing program 5 (id=1727): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(0xffffffffffffffff, 0x0, 0x1001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000cf00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1003}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r3, r4) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x2f, 0x0, "f4f5f6e10dde8e6ca6992064b9ceaa389cef541f8de8270585d6e8824a651d91fc9885abcd138faf403c1080d47b57efe3c0dd95724c4d95cee871c1871fd3654fc699277fac544dac8010de109c03fe"}, 0xd8) sendmmsg$inet(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff", 0x4f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) syz_usb_connect(0x2, 0x3f, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) kernel console output (not intermixed with test programs): x7d/0x100 [ 445.394793][T10868] should_fail_ex+0x414/0x560 [ 445.394812][T10868] should_failslab+0xa8/0x100 [ 445.394833][T10868] kmem_cache_alloc_noprof+0x73/0x3c0 [ 445.394851][T10868] ? __anon_vma_prepare+0xcb/0x4a0 [ 445.394876][T10868] __anon_vma_prepare+0xcb/0x4a0 [ 445.394903][T10868] ? __pte_alloc+0x11d/0x160 [ 445.394928][T10868] __handle_mm_fault+0x4b7d/0x5380 [ 445.394946][T10868] ? mt_find+0x15c/0x5f0 [ 445.394977][T10868] ? __pfx___handle_mm_fault+0x10/0x10 [ 445.395007][T10868] ? find_vma+0xe7/0x160 [ 445.395026][T10868] ? __pfx_find_vma+0x10/0x10 [ 445.395047][T10868] handle_mm_fault+0x3f6/0x8c0 [ 445.395073][T10868] do_user_addr_fault+0x764/0x1390 [ 445.395101][T10868] exc_page_fault+0x68/0x110 [ 445.395121][T10868] asm_exc_page_fault+0x26/0x30 [ 445.395135][T10868] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 445.395151][T10868] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 445.395163][T10868] RSP: 0018:ffffc9000b657d48 EFLAGS: 00050246 [ 445.395176][T10868] RAX: 0000000100000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 445.395186][T10868] RDX: 0000000000000000 RSI: ffffc9000b657da0 RDI: 0000000080000000 [ 445.395196][T10868] RBP: ffffc9000b657e10 R08: ffffc9000b657da7 R09: 1ffff920016cafb4 [ 445.395206][T10868] R10: dffffc0000000000 R11: fffff520016cafb5 R12: 0000000080000008 [ 445.395216][T10868] R13: 00007ffffffff000 R14: ffffc9000b657da0 R15: 0000000080000000 [ 445.395239][T10868] _copy_to_user+0x8a/0xb0 [ 445.395262][T10868] put_old_timespec32+0xbe/0x120 [ 445.395283][T10868] ? __pfx_put_old_timespec32+0x10/0x10 [ 445.395311][T10868] __ia32_sys_clock_getres_time32+0x201/0x270 [ 445.395336][T10868] ? __pfx___ia32_sys_clock_getres_time32+0x10/0x10 [ 445.395359][T10868] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 445.395379][T10868] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.395399][T10868] __do_fast_syscall_32+0xb4/0x110 [ 445.395420][T10868] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.395441][T10868] do_fast_syscall_32+0x34/0x80 [ 445.395461][T10868] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.395478][T10868] RIP: 0023:0xf7fc8539 [ 445.395490][T10868] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 445.395501][T10868] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 000000000000010a [ 445.395514][T10868] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000000 [ 445.395524][T10868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 445.395532][T10868] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.395540][T10868] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 445.395549][T10868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.395569][T10868] [ 445.878083][T10861] vhci_hcd: connection reset by peer [ 445.886076][ T120] usb 3-1: USB disconnect, device number 56 [ 445.906001][ T62] vhci_hcd: stop threads [ 445.933155][ T62] vhci_hcd: release socket [ 445.964318][ T62] vhci_hcd: disconnect device [ 446.532334][T10888] tipc: Started in network mode [ 446.546151][T10888] tipc: Node identity ac1414aa, cluster identity 4711 [ 446.563502][T10888] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 446.575500][T10888] tipc: Enabled bearer , priority 10 [ 446.588698][T10890] netlink: 'syz.2.1313': attribute type 2 has an invalid length. [ 446.597307][T10890] netlink: 'syz.2.1313': attribute type 4 has an invalid length. [ 446.605874][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1313'. [ 446.699867][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 446.838356][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 446.875337][T10896] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 446.978342][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 447.045112][T10897] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 447.128361][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 447.278226][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 447.428221][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 447.569978][ T120] tipc: Node number set to 2886997162 [ 447.718258][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 447.988225][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 448.175037][T10909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1320'. [ 448.313901][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 448.313915][ T30] audit: type=1326 audit(1747568183.805:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.2.1320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 448.378367][ T30] audit: type=1326 audit(1747568183.805:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.2.1320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 448.400493][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.441724][ T30] audit: type=1326 audit(1747568183.805:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.2.1320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 448.487341][ T30] audit: type=1326 audit(1747568183.805:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.2.1320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=80 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 448.518232][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 448.548451][ T5893] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 448.548915][ T30] audit: type=1326 audit(1747568183.805:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.2.1320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 448.578508][ T30] audit: type=1326 audit(1747568183.805:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.2.1320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 448.671386][T10920] FAULT_INJECTION: forcing a failure. [ 448.671386][T10920] name failslab, interval 1, probability 0, space 0, times 0 [ 448.718973][T10920] CPU: 0 UID: 0 PID: 10920 Comm: syz.2.1323 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 448.719005][T10920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 448.719022][T10920] Call Trace: [ 448.719031][T10920] [ 448.719040][T10920] dump_stack_lvl+0x189/0x250 [ 448.719078][T10920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.719102][T10920] ? __pfx__printk+0x10/0x10 [ 448.719123][T10920] ? __pfx___might_resched+0x10/0x10 [ 448.719143][T10920] should_fail_ex+0x414/0x560 [ 448.719165][T10920] should_failslab+0xa8/0x100 [ 448.719190][T10920] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 448.719213][T10920] ? __alloc_skb+0x112/0x2d0 [ 448.719238][T10920] __alloc_skb+0x112/0x2d0 [ 448.719261][T10920] netlink_sendmsg+0x5c6/0xb30 [ 448.719291][T10920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.719313][T10920] ? __import_iovec+0x5d4/0x7f0 [ 448.719335][T10920] ? aa_sock_msg_perm+0x94/0x160 [ 448.719355][T10920] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 448.719374][T10920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.719395][T10920] __sock_sendmsg+0x219/0x270 [ 448.719414][T10920] ____sys_sendmsg+0x505/0x830 [ 448.719442][T10920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.719478][T10920] ___sys_sendmsg+0x21f/0x2a0 [ 448.719502][T10920] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.719568][T10920] ? __fget_files+0x2a/0x420 [ 448.719591][T10920] ? __fget_files+0x3a0/0x420 [ 448.719621][T10920] __sys_sendmsg+0x164/0x220 [ 448.719645][T10920] ? __pfx___sys_sendmsg+0x10/0x10 [ 448.719679][T10920] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 448.719702][T10920] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.719725][T10920] __do_fast_syscall_32+0xb4/0x110 [ 448.719748][T10920] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.719771][T10920] do_fast_syscall_32+0x34/0x80 [ 448.719793][T10920] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 448.719813][T10920] RIP: 0023:0xf7f93539 [ 448.719826][T10920] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 448.719840][T10920] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 448.719858][T10920] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 448.719869][T10920] RDX: 0000000020004814 RSI: 0000000000000000 RDI: 0000000000000000 [ 448.719879][T10920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.719888][T10920] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 448.719897][T10920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 448.719919][T10920] [ 448.720182][T10921] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 448.984271][T10921] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 448.991887][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.018918][ T30] audit: type=1326 audit(1747568184.495:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10910 comm="syz.3.1321" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc8539 code=0x0 [ 449.045846][T10921] vhci_hcd vhci_hcd.0: Device attached [ 449.053470][ T5893] usb 5-1: unable to get BOS descriptor or descriptor too short [ 449.062214][ T5893] usb 5-1: not running at top speed; connect to a high speed hub [ 449.086849][ T5893] usb 5-1: config 129 has an invalid interface number: 63 but max is 0 [ 449.105036][ T5893] usb 5-1: config 129 contains an unexpected descriptor of type 0x2, skipping [ 449.114774][ T5893] usb 5-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 449.126675][ T5893] usb 5-1: config 129 has no interface number 0 [ 449.133404][ T5893] usb 5-1: config 129 interface 63 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 449.174792][ T5893] usb 5-1: config 129 interface 63 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 449.192594][ T5893] usb 5-1: config 129 interface 63 altsetting 7 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 449.260971][ T5893] usb 5-1: config 129 interface 63 has no altsetting 0 [ 449.277615][ T5893] usb 5-1: New USB device found, idVendor=0403, idProduct=fe38, bcdDevice=39.46 [ 449.289513][ T9] usb 35-1: new low-speed USB device number 9 using vhci_hcd [ 449.299543][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.310849][ T5893] usb 5-1: Product: syz [ 449.315481][ T5893] usb 5-1: Manufacturer: syz [ 449.330624][ T5893] usb 5-1: SerialNumber: syz [ 449.558252][ T5886] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 449.566394][T10904] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1318'. [ 449.576122][T10904] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1318'. [ 449.594826][T10904] tipc: MTU too low for tipc bearer [ 449.683717][ T5893] ftdi_sio 5-1:129.63: FTDI USB Serial Device converter detected [ 449.715298][ T5893] ftdi_sio ttyUSB0: unknown device type: 0x3946 [ 449.749296][ T5893] usb 5-1: USB disconnect, device number 65 [ 449.771278][ T5893] ftdi_sio 5-1:129.63: device disconnected [ 449.813808][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 449.828065][ T5886] usb 3-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=11.bf [ 449.876812][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.894579][ T5886] usb 3-1: Product: syz [ 449.899952][ T5886] usb 3-1: Manufacturer: syz [ 449.904738][ T5886] usb 3-1: SerialNumber: syz [ 449.932940][ T5886] usb 3-1: config 0 descriptor?? [ 449.944334][ T5886] usb 3-1: MBOX3: Invalid descriptor size=18. [ 449.973860][T10934] fuse: Bad value for 'fd' [ 450.161694][T10925] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 450.168461][T10925] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 450.177273][T10925] vhci_hcd vhci_hcd.0: Device attached [ 450.963260][T10937] vhci_hcd: connection reset by peer [ 450.988589][ T5886] usb 3-1: USB disconnect, device number 57 [ 450.997113][ T62] vhci_hcd: stop threads [ 451.016063][ T62] vhci_hcd: release socket [ 451.031420][ T62] vhci_hcd: disconnect device [ 451.108385][ T24] vhci_hcd: vhci_device speed not set [ 451.648206][ C1] net_ratelimit: 2 callbacks suppressed [ 451.648226][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 452.022223][T10922] vhci_hcd: connection reset by peer [ 452.058814][ T53] vhci_hcd: stop threads [ 452.088385][ T53] vhci_hcd: release socket [ 452.113532][ T53] vhci_hcd: disconnect device [ 452.277131][T10963] vivid-001: ================= START STATUS ================= [ 452.293664][T10963] vivid-001: RDS Tx I/O Mode: Controls [ 452.302434][T10963] vivid-001: RDS Program ID: 32904 [ 452.307788][T10963] vivid-001: RDS Program Type: 3 [ 452.318015][T10966] random: crng reseeded on system resumption [ 452.363289][T10963] vivid-001: RDS PS Name: VIVID-TX [ 452.398787][T10963] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 452.440928][T10969] xt_ecn: cannot match TCP bits for non-tcp packets [ 452.462576][T10963] vivid-001: RDS Stereo: true [ 452.467638][T10963] vivid-001: RDS Artificial Head: false [ 452.474829][T10963] vivid-001: RDS Compressed: false [ 452.482547][T10963] vivid-001: RDS Dynamic PTY: false [ 452.490536][T10963] vivid-001: RDS Traffic Announcement: false [ 452.496936][T10963] vivid-001: RDS Traffic Program: true [ 452.505278][T10963] vivid-001: RDS Music: true [ 452.511523][T10963] vivid-001: ================== END STATUS ================== [ 452.688211][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 452.714352][T10976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1340'. [ 452.977860][T10986] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 453.059979][ T5852] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 453.218393][ T5852] usb 5-1: Using ep0 maxpacket: 32 [ 453.245722][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 453.285018][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.308696][ T5852] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 453.339093][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.369148][ T5852] usb 5-1: config 0 descriptor?? [ 453.638654][ T5893] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 453.728343][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 453.800554][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 453.839864][ T5852] usbhid 5-1:0.0: can't add hid device: -71 [ 453.854223][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.870159][ T5852] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 453.885488][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 453.941413][ T5852] usb 5-1: USB disconnect, device number 66 [ 453.999930][ T5893] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 454.011542][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.022939][ T5893] usb 2-1: Product: syz [ 454.030821][ T5893] usb 2-1: Manufacturer: syz [ 454.040174][ T5893] usb 2-1: SerialNumber: syz [ 454.091392][ T5893] usb 2-1: config 0 descriptor?? [ 454.103526][ T5893] appledisplay 2-1:0.0: Could not find int-in endpoint [ 454.131902][ T5893] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 454.339836][T10991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.371671][T10991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.438682][ T9] vhci_hcd: vhci_device speed not set [ 454.502892][ T5893] usb 2-1: USB disconnect, device number 44 [ 454.725128][ T24] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 454.781421][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 454.900784][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.923533][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 454.936339][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 454.953238][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 454.965027][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 454.981411][ T24] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 455.010415][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 455.019759][ T24] usb 1-1: Product: syz [ 455.023980][ T24] usb 1-1: Manufacturer: syz [ 455.029465][ T24] usb 1-1: SerialNumber: syz [ 455.040985][ T24] usb 1-1: config 0 descriptor?? [ 455.178760][ T5893] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 455.276001][ T24] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 455.288266][ T24] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 455.458366][ T5852] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 455.477683][ T24] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 455.479120][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 455.511935][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.531686][ T24] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 455.558256][ T24] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 455.571559][ T5893] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 455.635822][ T5893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 455.648211][ T5893] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 455.673391][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.678833][ T24] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 455.698571][ T5852] usb 4-1: config 0 has no interfaces? [ 455.710824][ T5893] usb 5-1: config 0 descriptor?? [ 455.723534][ T5893] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 455.764212][ T5852] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 455.801309][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.818200][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 455.818277][ T5852] usb 4-1: Product: syz [ 455.879438][ T5852] usb 4-1: Manufacturer: syz [ 455.884123][ T5852] usb 4-1: SerialNumber: syz [ 455.889747][T11018] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1354'. [ 455.929878][T11018] openvswitch: netlink: Message has 3 unknown bytes. [ 455.953646][T11018] openvswitch: netlink: Actions may not be safe on all matching packets [ 455.995787][ T5852] usb 4-1: config 0 descriptor?? [ 456.498976][ T24] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 456.509063][T10997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.547724][ T24] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 456.568832][T10997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.848224][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 456.897775][ T5886] usb 1-1: USB disconnect, device number 45 [ 457.439184][T11024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.543475][T11024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.888201][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 458.078606][ T5886] usb 5-1: USB disconnect, device number 67 [ 458.718545][ T5852] usb 4-1: USB disconnect, device number 52 [ 458.928226][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 459.146843][T11046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.165624][ T5886] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 459.234276][ T5886] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 459.371880][T11046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.413118][ T62] wlan1: authenticated [ 459.426774][T11051] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 459.440235][ T62] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 459.501056][ T5852] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 459.641528][ T62] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 459.670822][ T5852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.708239][ T5852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.759758][ T5852] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 459.783607][ T3476] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 459.814414][ T5852] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 459.865571][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.925407][ T5852] usb 1-1: config 0 descriptor?? [ 459.936339][ T8172] wlan1: association with 08:02:11:00:00:00 timed out [ 459.978483][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 460.643075][T11048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.673128][T11048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.748369][ T5886] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 460.799751][ T5852] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 460.862042][ T5852] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 460.957104][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 460.982151][T11048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.005312][T11048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.018306][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 461.027830][ T5886] usb 4-1: config 0 has no interfaces? [ 461.136948][ T5886] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 461.166211][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.200479][ T5886] usb 4-1: Product: syz [ 461.204712][ T5886] usb 4-1: Manufacturer: syz [ 461.243459][ T5886] usb 4-1: SerialNumber: syz [ 461.286527][ T5886] usb 4-1: config 0 descriptor?? [ 461.374488][ T5893] usb 1-1: USB disconnect, device number 46 [ 461.519682][T11077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.710317][T11077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.753887][T11065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.765831][T11065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.058199][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 462.904006][T11092] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1372'. [ 462.940035][T11092] openvswitch: netlink: Message has 3 unknown bytes. [ 462.947355][ T5886] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 462.979202][T11092] openvswitch: netlink: Actions may not be safe on all matching packets [ 463.088212][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 463.118347][ T5886] usb 1-1: device descriptor read/64, error -71 [ 463.126223][T11095] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 463.382409][ T5886] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 463.503566][ T5893] usb 4-1: USB disconnect, device number 53 [ 463.550406][ T5886] usb 1-1: device descriptor read/64, error -71 [ 463.698787][ T5886] usb usb1-port1: attempt power cycle [ 464.128206][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 464.224609][ T5886] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 464.249521][ T5886] usb 1-1: device descriptor read/8, error -71 [ 464.491983][ T5886] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 464.538986][ T5886] usb 1-1: device descriptor read/8, error -71 [ 464.648556][ T5886] usb usb1-port1: unable to enumerate USB device [ 465.168232][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 466.083525][T11128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.218203][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 466.233208][T11127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.248205][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 468.288217][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 468.676978][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 468.867722][ T24] usb 1-1: config 0 has no interfaces? [ 468.902780][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 468.939522][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.985419][ T24] usb 1-1: Product: syz [ 468.998632][ T24] usb 1-1: Manufacturer: syz [ 469.003297][ T24] usb 1-1: SerialNumber: syz [ 469.037818][ T24] usb 1-1: config 0 descriptor?? [ 469.328215][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 469.350632][T11159] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 469.357463][T11159] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 469.365367][T11159] vhci_hcd vhci_hcd.0: Device attached [ 469.550703][ T30] audit: type=1326 audit(1747568205.045:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 469.601330][ T5852] usb 1-1: USB disconnect, device number 51 [ 469.659131][ T30] audit: type=1326 audit(1747568205.065:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 469.678297][ T5893] usb 37-1: new low-speed USB device number 13 using vhci_hcd [ 469.786027][ T30] audit: type=1326 audit(1747568205.075:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 469.918409][ T30] audit: type=1326 audit(1747568205.075:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 469.981893][ T30] audit: type=1326 audit(1747568205.075:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=16 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 470.126447][ T30] audit: type=1326 audit(1747568205.075:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 470.166222][ T30] audit: type=1326 audit(1747568205.075:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 470.195958][ T30] audit: type=1326 audit(1747568205.075:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 470.247636][ T30] audit: type=1326 audit(1747568205.075:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 470.284094][ T30] audit: type=1326 audit(1747568205.075:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.0.1385" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 470.368221][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 470.443174][T11174] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 471.403866][T11195] loop6: detected capacity change from 0 to 524287999 [ 471.418198][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 472.058421][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 472.209071][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 472.233731][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.252685][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 472.271330][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 472.281809][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.292548][ T9] usb 1-1: Product: syz [ 472.296942][ T9] usb 1-1: Manufacturer: syz [ 472.302306][ T9] usb 1-1: SerialNumber: syz [ 472.309946][ T9] usb 1-1: config 0 descriptor?? [ 472.342739][T11160] vhci_hcd: connection reset by peer [ 472.363604][ T36] vhci_hcd: stop threads [ 472.375143][ T36] vhci_hcd: release socket [ 472.381040][ T9] appledisplay 1-1:0.0: Could not find int-in endpoint [ 472.390149][ T36] vhci_hcd: disconnect device [ 472.409810][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 472.448202][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 472.488343][ T5852] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 472.529361][T11201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.540307][T11201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.553157][T10388] usb 1-1: USB disconnect, device number 52 [ 472.640864][ T5852] usb 2-1: unable to get BOS descriptor or descriptor too short [ 472.650349][ T5852] usb 2-1: config 81 has an invalid interface number: 93 but max is 0 [ 472.659154][ T5852] usb 2-1: config 81 has no interface number 0 [ 472.665465][ T5852] usb 2-1: config 81 interface 93 has no altsetting 0 [ 472.674643][ T5852] usb 2-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice=dd.a4 [ 472.683896][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.692659][ T5852] usb 2-1: Product: syz [ 472.696965][ T5852] usb 2-1: Manufacturer: syz [ 472.701745][ T5852] usb 2-1: SerialNumber: syz [ 472.708226][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 472.848294][ T9] usb 3-1: device descriptor read/64, error -71 [ 472.931117][ T5852] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:81.93/input/input22 [ 472.945135][ T5187] bcm5974 2-1:81.93: could not read from device [ 472.961883][ T5187] bcm5974 2-1:81.93: could not read from device [ 472.964191][ T5852] usb 2-1: USB disconnect, device number 45 [ 472.977712][ T5187] bcm5974 2-1:81.93: could not read from device [ 472.987067][ T5187] bcm5974 2-1:81.93: could not read from device [ 473.109157][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 473.258295][ T9] usb 3-1: device descriptor read/64, error -71 [ 473.368902][ T9] usb usb3-port1: attempt power cycle [ 473.378330][ T5884] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 473.488219][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 473.538511][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 473.550447][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.568241][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 473.601576][ T5884] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 473.611451][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.619781][ T5884] usb 1-1: Product: syz [ 473.624193][ T5884] usb 1-1: Manufacturer: syz [ 473.629237][ T5884] usb 1-1: SerialNumber: syz [ 473.636989][ T5884] usb 1-1: config 0 descriptor?? [ 473.645416][ T5884] appledisplay 1-1:0.0: Could not find int-in endpoint [ 473.654360][ T5884] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 473.718410][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 473.759260][ T9] usb 3-1: device descriptor read/8, error -71 [ 473.877510][T11212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.886470][T11212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.903127][ T24] usb 1-1: USB disconnect, device number 53 [ 474.008312][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 474.028962][ T9] usb 3-1: device descriptor read/8, error -71 [ 474.139035][ T9] usb usb3-port1: unable to enumerate USB device [ 474.528215][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 474.821496][ T5841] Bluetooth: hci1: unexpected event for opcode 0x64c6 [ 474.858540][ T5893] vhci_hcd: vhci_device speed not set [ 474.920856][T11233] hsr0: entered promiscuous mode [ 475.185173][T11239] FAULT_INJECTION: forcing a failure. [ 475.185173][T11239] name failslab, interval 1, probability 0, space 0, times 0 [ 475.288296][T11239] CPU: 1 UID: 0 PID: 11239 Comm: syz.1.1412 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 475.288328][T11239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 475.288340][T11239] Call Trace: [ 475.288348][T11239] [ 475.288356][T11239] dump_stack_lvl+0x189/0x250 [ 475.288396][T11239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.288426][T11239] ? __pfx__printk+0x10/0x10 [ 475.288453][T11239] ? __pfx___might_resched+0x10/0x10 [ 475.288473][T11239] ? fs_reclaim_acquire+0x7d/0x100 [ 475.288510][T11239] should_fail_ex+0x414/0x560 [ 475.288538][T11239] should_failslab+0xa8/0x100 [ 475.288568][T11239] __kmalloc_noprof+0xcb/0x4f0 [ 475.288594][T11239] ? kfree+0x4d/0x440 [ 475.288615][T11239] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 475.288646][T11239] tomoyo_realpath_from_path+0xe3/0x5d0 [ 475.288689][T11239] tomoyo_check_open_permission+0x1c1/0x3b0 [ 475.288713][T11239] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 475.288735][T11239] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 475.288755][T11239] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 475.288836][T11239] ? tomoyo_file_open+0x166/0x220 [ 475.288870][T11239] security_file_open+0xb1/0x270 [ 475.288891][T11239] do_dentry_open+0x35e/0x1970 [ 475.288923][T11239] ? devcgroup_check_permission+0x86d/0x980 [ 475.288964][T11239] vfs_open+0x3b/0x340 [ 475.288992][T11239] ? path_openat+0x2ecd/0x3830 [ 475.289016][T11239] path_openat+0x2ee5/0x3830 [ 475.289036][T11239] ? arch_stack_walk+0xfc/0x150 [ 475.289100][T11239] ? __pfx_path_openat+0x10/0x10 [ 475.289118][T11239] ? do_fast_syscall_32+0x34/0x80 [ 475.289146][T11239] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 475.289193][T11239] do_filp_open+0x1fa/0x410 [ 475.289217][T11239] ? __pfx_do_filp_open+0x10/0x10 [ 475.289264][T11239] ? _raw_spin_unlock+0x28/0x50 [ 475.289286][T11239] ? alloc_fd+0x64c/0x6c0 [ 475.289324][T11239] do_sys_openat2+0x121/0x1c0 [ 475.289344][T11239] ? __pfx_do_sys_openat2+0x10/0x10 [ 475.289368][T11239] ? ksys_write+0x1f0/0x250 [ 475.289400][T11239] __ia32_compat_sys_openat+0x131/0x160 [ 475.289428][T11239] __do_fast_syscall_32+0xb4/0x110 [ 475.289476][T11239] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.289506][T11239] do_fast_syscall_32+0x34/0x80 [ 475.289533][T11239] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 475.289557][T11239] RIP: 0023:0xf7f25539 [ 475.289575][T11239] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 475.289592][T11239] RSP: 002b:00000000f5046100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 475.289622][T11239] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5046150 [ 475.289637][T11239] RDX: 0000000000145002 RSI: 0000000000000000 RDI: 00000000f73b2ff4 [ 475.289650][T11239] RBP: 0000000000145002 R08: 0000000000000000 R09: 0000000000000000 [ 475.289662][T11239] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 475.289673][T11239] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.289701][T11239] [ 475.289711][T11239] ERROR: Out of memory at tomoyo_realpath_from_path. [ 475.569223][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 476.161976][T11246] FAULT_INJECTION: forcing a failure. [ 476.161976][T11246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.218827][T11246] CPU: 0 UID: 0 PID: 11246 Comm: syz.2.1414 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 476.218859][T11246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 476.218869][T11246] Call Trace: [ 476.218874][T11246] [ 476.218881][T11246] dump_stack_lvl+0x189/0x250 [ 476.218909][T11246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.218930][T11246] ? __pfx__printk+0x10/0x10 [ 476.218954][T11246] should_fail_ex+0x414/0x560 [ 476.218973][T11246] _copy_to_user+0x31/0xb0 [ 476.218997][T11246] simple_read_from_buffer+0xe1/0x170 [ 476.219019][T11246] proc_fail_nth_read+0x1df/0x250 [ 476.219042][T11246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 476.219066][T11246] ? rw_verify_area+0x258/0x650 [ 476.219081][T11246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 476.219103][T11246] vfs_read+0x1fd/0x980 [ 476.219124][T11246] ? __pfx___mutex_lock+0x10/0x10 [ 476.219144][T11246] ? __pfx_vfs_read+0x10/0x10 [ 476.219162][T11246] ? __fget_files+0x2a/0x420 [ 476.219184][T11246] ? __fget_files+0x3a0/0x420 [ 476.219202][T11246] ? __fget_files+0x2a/0x420 [ 476.219242][T11246] ksys_read+0x145/0x250 [ 476.219261][T11246] ? __pfx_ksys_read+0x10/0x10 [ 476.219279][T11246] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 476.219300][T11246] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.219333][T11246] __do_fast_syscall_32+0xb4/0x110 [ 476.219354][T11246] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.219388][T11246] do_fast_syscall_32+0x34/0x80 [ 476.219416][T11246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 476.219443][T11246] RIP: 0023:0xf7f93539 [ 476.219459][T11246] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 476.219472][T11246] RSP: 002b:00000000f50b6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 476.219492][T11246] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50b6620 [ 476.219502][T11246] RDX: 000000000000000f RSI: 00000000f7422ff4 RDI: 0000000000000000 [ 476.219514][T11246] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 476.219522][T11246] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 476.219535][T11246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 476.219556][T11246] [ 476.455257][ C0] vkms_vblank_simulate: vblank timer overrun [ 476.608266][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 476.618275][ T5893] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 476.778599][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 476.786885][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.968532][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.108526][ T5893] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 477.348263][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.391438][ T5893] usb 4-1: Product: syz [ 477.415376][ T5893] usb 4-1: Manufacturer: syz [ 477.451531][ T5893] usb 4-1: SerialNumber: syz [ 477.481213][ T5893] usb 4-1: config 0 descriptor?? [ 477.507777][ T5893] appledisplay 4-1:0.0: Could not find int-in endpoint [ 477.526791][ T5893] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 477.541986][T11264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1420'. [ 477.582075][T11264] input: syz1 as /devices/virtual/input/input23 [ 477.648474][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 477.769475][T11245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.825100][T11245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.878423][T11268] syz.2.1419 (11268): drop_caches: 2 [ 477.955184][T11268] syz.2.1419 (11268): drop_caches: 2 [ 477.963749][T11227] hsr0: left promiscuous mode [ 477.995074][ T120] usb 4-1: USB disconnect, device number 54 [ 478.688286][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 479.114690][T11276] fuse: Bad value for 'fd' [ 479.588461][ T5893] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 479.728204][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 479.735198][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 479.735222][ T30] audit: type=1326 audit(1747568215.225:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.1.1426" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f25539 code=0x0 [ 479.795538][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.807638][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.846013][T11288] loop6: detected capacity change from 0 to 524287999 [ 479.879049][ T5893] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 480.014784][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.156844][ T5893] usb 5-1: config 0 descriptor?? [ 480.241276][T11293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.277934][ T120] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 480.291627][ T120] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 480.408993][T11293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.676614][T11300] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1424'. [ 480.732870][T11300] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1424'. [ 480.768233][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 480.807929][ T5893] sony 0003:054C:024B.000E: unknown main item tag 0x0 [ 480.843002][ T5893] sony 0003:054C:024B.000E: unknown main item tag 0x0 [ 480.850124][ T5893] sony 0003:054C:024B.000E: unexpected long global item [ 480.870136][ T5893] sony 0003:054C:024B.000E: parse failed [ 480.884007][ T5893] sony 0003:054C:024B.000E: probe with driver sony failed with error -22 [ 480.910959][ T62] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 481.028551][ T62] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 481.148873][ T3497] wlan1: authentication with 08:02:11:00:00:00 timed out [ 481.520137][ T120] usb 5-1: USB disconnect, device number 68 [ 481.808209][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 482.128284][ T120] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 482.288796][ T120] usb 5-1: Using ep0 maxpacket: 32 [ 482.301180][ T120] usb 5-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.316984][ T120] usb 5-1: config 0 interface 0 has no altsetting 0 [ 482.326112][ T120] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 482.336113][ T120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.361558][ T120] usb 5-1: config 0 descriptor?? [ 482.578223][ T5893] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 482.728746][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 482.751286][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.795464][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 482.796154][ T120] petalynx 0003:18B1:0037.000F: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.4-1/input0 [ 482.848188][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 482.849874][ T5893] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 482.892000][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.901285][ T5893] usb 3-1: Product: syz [ 482.905662][ T5893] usb 3-1: Manufacturer: syz [ 482.910485][ T5893] usb 3-1: SerialNumber: syz [ 482.926257][ T5893] usb 3-1: config 0 descriptor?? [ 482.937731][ T5893] appledisplay 3-1:0.0: Could not find int-in endpoint [ 482.966982][ T5893] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 483.006108][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'. [ 483.183867][T11319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.192861][T11319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.242222][ T120] usb 3-1: USB disconnect, device number 62 [ 483.888238][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 484.669441][T11353] fuse: Bad value for 'fd' [ 484.928218][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 485.665009][T11359] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 485.968210][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 487.008237][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 487.128297][ T120] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 487.309147][ T120] usb 3-1: Using ep0 maxpacket: 16 [ 487.324337][ T120] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.361795][ T120] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 487.380892][ T120] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 487.390744][ T120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.399667][ T120] usb 3-1: Product: syz [ 487.403916][ T120] usb 3-1: Manufacturer: syz [ 487.413871][ T120] usb 3-1: SerialNumber: syz [ 487.472085][ T120] usb 3-1: config 0 descriptor?? [ 487.510613][ T120] appledisplay 3-1:0.0: Could not find int-in endpoint [ 487.559355][ T120] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 487.708906][T11369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.718837][T11369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.791444][ T120] usb 3-1: USB disconnect, device number 63 [ 487.878336][ T5884] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 488.048195][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 488.188192][ T5893] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 488.215257][ T5884] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 488.235608][ T5884] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 488.248198][ T5884] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 488.311525][ T5884] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 488.320968][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.329397][ T5884] usb 2-1: Product: syz [ 488.333751][ T5884] usb 2-1: Manufacturer: syz [ 488.338772][ T5884] usb 2-1: SerialNumber: syz [ 488.349580][T11375] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 488.386624][ T5884] hub 2-1:1.0: bad descriptor, ignoring hub [ 488.453395][ T5893] usb 1-1: config 0 has no interfaces? [ 488.477397][ T5893] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 488.500298][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.513713][ T5884] hub 2-1:1.0: probe with driver hub failed with error -5 [ 488.521076][ T5893] usb 1-1: Product: syz [ 488.525598][ T5893] usb 1-1: Manufacturer: syz [ 488.531298][ T5893] usb 1-1: SerialNumber: syz [ 488.540635][ T5893] usb 1-1: config 0 descriptor?? [ 488.600769][ T5884] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 488.840063][T11375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.866687][T11375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.088203][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 489.411365][ T5884] usb 2-1: USB disconnect, device number 46 [ 489.473374][ T5884] usblp0: removed [ 489.934765][T11406] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 489.941457][T11406] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 489.953517][T11406] vhci_hcd vhci_hcd.0: Device attached [ 489.988293][ T30] audit: type=1804 audit(1747568225.465:539): pid=11409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1456" name="/newroot/292/bus" dev="tmpfs" ino=1538 res=1 errno=0 [ 490.128201][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 490.198293][ T120] usb 35-1: new low-speed USB device number 10 using vhci_hcd [ 491.168204][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 491.372161][ T5884] usb 1-1: USB disconnect, device number 54 [ 491.518475][ T5893] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 491.668307][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 491.685514][ T5893] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 491.706630][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.729094][ T5893] usb 4-1: Product: syz [ 491.742663][ T5893] usb 4-1: Manufacturer: syz [ 491.752367][ T5893] usb 4-1: SerialNumber: syz [ 491.791232][ T5893] usb 4-1: config 0 descriptor?? [ 491.803037][ T5893] gspca_main: se401-2.14.0 probing 047d:5003 [ 492.208227][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 492.398294][ T5884] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 492.449685][ T5893] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 492.477843][ T5893] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 492.501890][ T5893] usb 4-1: USB disconnect, device number 55 [ 492.558583][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 492.590586][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.605467][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 492.650516][ T5884] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 492.663456][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.678380][ T5884] usb 3-1: Product: syz [ 492.682782][ T5884] usb 3-1: Manufacturer: syz [ 492.687709][ T5884] usb 3-1: SerialNumber: syz [ 492.704389][ T5884] usb 3-1: config 0 descriptor?? [ 492.716225][ T5884] appledisplay 3-1:0.0: Could not find int-in endpoint [ 492.724461][ T5884] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 492.878283][ T5852] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 492.897708][T11407] vhci_hcd: connection reset by peer [ 492.906156][ T36] vhci_hcd: stop threads [ 492.913311][ T36] vhci_hcd: release socket [ 492.920671][ T36] vhci_hcd: disconnect device [ 492.945608][T11430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.954958][T11430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.011608][ T5884] usb 3-1: USB disconnect, device number 64 [ 493.048231][ T5852] usb 1-1: Using ep0 maxpacket: 16 [ 493.070791][ T5852] usb 1-1: config index 0 descriptor too short (expected 1828, got 36) [ 493.079467][ T5852] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 493.088003][ T5852] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 493.098841][ T5852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 493.108762][ T5852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 493.120221][ T5852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 493.148857][ T5852] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 493.158235][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.167868][ T5852] usb 1-1: Product: syz [ 493.172329][ T5852] usb 1-1: Manufacturer: syz [ 493.177229][ T5852] usb 1-1: SerialNumber: syz [ 493.193574][ T5852] usb 1-1: config 0 descriptor?? [ 493.209978][ T5852] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 493.226519][ T5852] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 493.248200][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 493.338807][ T5852] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 493.372253][ T5852] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 493.380681][ T5852] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 493.388743][ T5852] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 493.396415][ T5852] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 493.404565][ T5852] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 493.415605][ T5852] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 493.434941][ T5852] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 493.444865][ T5852] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 493.453550][ T5852] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 493.463403][ T5852] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 493.476001][ T5852] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 494.288264][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 494.431660][ T5852] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 494.620565][ T5852] usb 3-1: Using ep0 maxpacket: 16 [ 494.629334][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 494.704451][ T5852] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 494.715879][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.728231][ T5852] usb 3-1: Product: syz [ 494.732547][ T5852] usb 3-1: Manufacturer: syz [ 494.737488][ T5852] usb 3-1: SerialNumber: syz [ 494.759585][ T5852] usb 3-1: config 0 descriptor?? [ 494.779753][ T5852] hub 3-1:0.0: bad descriptor, ignoring hub [ 494.789596][ T5852] hub 3-1:0.0: probe with driver hub failed with error -5 [ 494.814678][ T5852] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input24 [ 495.318985][ T120] vhci_hcd: vhci_device speed not set [ 495.328322][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 495.377886][ T5884] usb 1-1: USB disconnect, device number 55 [ 495.395226][ T5884] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 495.463453][ T5884] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 495.484024][ T5884] keyspan 1-1:0.0: device disconnected [ 495.578351][ T5852] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 495.738774][ T5852] usb 4-1: Using ep0 maxpacket: 32 [ 495.746014][ T5852] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 495.756687][ T5852] usb 4-1: config 0 has no interface number 0 [ 495.765561][ T5852] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 495.777849][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.799072][ T5852] usb 4-1: Product: syz [ 495.803321][ T5852] usb 4-1: Manufacturer: syz [ 495.807962][ T5852] usb 4-1: SerialNumber: syz [ 495.929425][ T5852] usb 4-1: config 0 descriptor?? [ 495.975262][T11478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1479'. [ 496.156410][ T5852] f81534a_ctrl 4-1:0.88: failed to set register 0x116: -5 [ 496.170803][ T5852] f81534a_ctrl 4-1:0.88: failed to enable ports: -5 [ 496.178896][ T5852] f81534a_ctrl 4-1:0.88: probe with driver f81534a_ctrl failed with error -5 [ 496.262282][ T5852] usb 4-1: USB disconnect, device number 56 [ 496.368186][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 497.408327][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 498.448191][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 498.580733][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 498.598561][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 498.608274][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 498.622482][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 498.632710][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 498.708701][ T5852] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 498.880533][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'. [ 498.894469][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.907753][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.930454][ T5852] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 498.954129][ T5852] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 498.974358][ T5187] usb 3-1: reset high-speed USB device number 65 using dummy_hcd [ 498.996828][ T5187] usb 3-1: device reset changed ep0 maxpacket size! [ 499.008949][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.021496][ T5852] usb 4-1: config 0 descriptor?? [ 499.039308][T10388] usb 3-1: USB disconnect, device number 65 [ 499.255823][T11519] syz_tun: entered allmulticast mode [ 499.265023][T11509] chnl_net:caif_netlink_parms(): no params data found [ 499.272664][T10388] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 499.327389][T11519] dvmrp1: entered allmulticast mode [ 499.441047][T11503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.459463][T11503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.467622][T10388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.481918][T10388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.498793][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 499.508335][ T5852] usbhid 4-1:0.0: can't add hid device: -71 [ 499.514707][ T5852] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 499.522927][T10388] usb 3-1: New USB device found, idVendor=046d, idProduct=c134, bcdDevice= 0.00 [ 499.547176][T10388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.559479][ T5852] usb 4-1: USB disconnect, device number 57 [ 499.589174][T10388] usb 3-1: config 0 descriptor?? [ 499.631278][T11518] syz_tun: left allmulticast mode [ 499.637947][T11509] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.663601][T11509] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.688591][T11509] bridge_slave_0: entered allmulticast mode [ 499.708489][T11509] bridge_slave_0: entered promiscuous mode [ 499.746708][T11509] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.756907][T11509] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.764913][T11509] bridge_slave_1: entered allmulticast mode [ 499.780154][T11509] bridge_slave_1: entered promiscuous mode [ 500.013626][ T5886] usb 3-1: USB disconnect, device number 66 [ 500.032527][T11509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.093021][T11509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.536622][T11509] team0: Port device team_slave_0 added [ 500.543169][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 500.751579][ T5841] Bluetooth: hci5: command tx timeout [ 500.800821][T11509] team0: Port device team_slave_1 added [ 501.462675][T11509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.470066][T11509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.496150][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.513161][T11509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.534606][T11509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.542225][T11509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.568492][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.568606][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 501.592608][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.600877][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.611204][T11509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.792275][T11509] hsr_slave_0: entered promiscuous mode [ 501.841065][T11509] hsr_slave_1: entered promiscuous mode [ 501.847720][T11509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 501.888559][T11509] Cannot create hsr debugfs directory [ 502.422982][T11568] netlink: 'syz.0.1506': attribute type 15 has an invalid length. [ 502.608584][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 502.708711][ T120] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 502.818339][ T5841] Bluetooth: hci5: command tx timeout [ 503.138259][ T120] usb 1-1: Invalid ep0 maxpacket: 16 [ 503.315046][T11509] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 503.321950][ T120] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 503.338460][T11509] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 503.356890][T11509] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 503.380321][T11509] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 503.478205][ T120] usb 1-1: Invalid ep0 maxpacket: 16 [ 503.525370][T10388] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 503.528774][ T120] usb usb1-port1: attempt power cycle [ 503.576891][T11509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.617551][T11509] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.648353][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 503.663566][ T8172] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.670810][ T8172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.715165][ T8172] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.722603][ T8172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.744352][T10388] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 503.759950][T10388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 503.776946][T10388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 503.791250][T10388] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 503.832322][T10388] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 503.875225][T10388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.889058][ T120] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 503.909553][T10388] usb 4-1: config 0 descriptor?? [ 503.918989][ T120] usb 1-1: Invalid ep0 maxpacket: 16 [ 503.929357][T11578] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 504.043399][T11509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.050780][ T120] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 504.106012][ T120] usb 1-1: Invalid ep0 maxpacket: 16 [ 504.111833][ T120] usb usb1-port1: unable to enumerate USB device [ 504.203402][T11509] veth0_vlan: entered promiscuous mode [ 504.233198][T11509] veth1_vlan: entered promiscuous mode [ 504.277454][T11509] veth0_macvtap: entered promiscuous mode [ 504.290378][T11509] veth1_macvtap: entered promiscuous mode [ 504.328065][T11509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.367580][T10388] plantronics 0003:047F:FFFF.0010: reserved main item tag 0xd [ 504.386769][T11509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.420217][T10388] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 504.423335][T11509] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.458023][T10388] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 504.504919][T11509] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.532896][T11509] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.543363][T11509] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.688617][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 504.754815][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.768077][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.785067][T10388] usb 4-1: USB disconnect, device number 58 [ 504.858594][ T5841] Bluetooth: hci5: command tx timeout [ 504.864435][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.877622][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.693388][T11600] syzkaller1: entered promiscuous mode [ 505.704363][T11600] syzkaller1: entered allmulticast mode [ 505.728576][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 505.748674][T11602] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(17) [ 505.755718][T11602] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 505.769571][T11602] vhci_hcd vhci_hcd.0: Device attached [ 505.785117][T11598] lo: entered promiscuous mode [ 505.791363][T11598] tunl0: entered promiscuous mode [ 505.797927][T11598] gre0: entered promiscuous mode [ 505.815132][T11600] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(19) [ 505.821921][T11600] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 505.834072][T11598] gretap0: entered promiscuous mode [ 505.859360][T11602] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 505.866525][T11598] erspan0: entered promiscuous mode [ 505.889899][T11598] ip_vti0: entered promiscuous mode [ 505.925889][T11598] ip6_vti0: entered promiscuous mode [ 505.934293][T11600] vhci_hcd vhci_hcd.0: Device attached [ 505.940015][T11608] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(24) [ 505.946758][T11608] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 505.979026][ T120] vhci_hcd: vhci_device speed not set [ 505.985054][ T24] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 506.009393][T11608] vhci_hcd vhci_hcd.0: Device attached [ 506.058364][ T120] usb 35-1: new full-speed USB device number 11 using vhci_hcd [ 506.094823][T11600] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(28) [ 506.101624][T11600] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 506.171940][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.185137][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.209191][T11600] vhci_hcd vhci_hcd.0: Device attached [ 506.226469][ T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 506.237963][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 506.239265][T11602] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(21) [ 506.252620][T11602] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 506.262609][T11600] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 506.287531][T11608] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 506.288879][ T24] usb 1-1: SerialNumber: syz [ 506.334699][T11598] ip6tnl0: entered promiscuous mode [ 506.375207][T11622] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 506.381275][T11602] vhci_hcd vhci_hcd.0: Device attached [ 506.392370][T11598] ip6gre0: entered promiscuous mode [ 506.438850][T11598] syz_tun: entered promiscuous mode [ 506.445128][T11598] ip6gretap0: entered promiscuous mode [ 506.459317][T11598] vcan0: entered promiscuous mode [ 506.474369][T11598] bond0: entered promiscuous mode [ 506.488394][T11598] bond_slave_0: entered promiscuous mode [ 506.506763][T11598] bond_slave_1: entered promiscuous mode [ 506.521216][T11598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.538943][T11600] vhci_hcd vhci_hcd.0: port 0 already used [ 506.552992][T11598] team0: entered promiscuous mode [ 506.768410][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 507.144872][ T5841] Bluetooth: hci5: command tx timeout [ 507.164498][T11598] team_slave_0: entered promiscuous mode [ 507.197374][T11609] vhci_hcd: connection closed [ 507.198478][T11617] vhci_hcd: connection closed [ 507.203358][T11603] vhci_hcd: connection reset by peer [ 507.213664][ T62] vhci_hcd: stop threads [ 507.218179][ T62] vhci_hcd: release socket [ 507.223075][T11615] vhci_hcd: connection closed [ 507.223850][T11605] vhci_hcd: connection closed [ 507.239250][T11598] team_slave_1: entered promiscuous mode [ 507.269639][ T62] vhci_hcd: disconnect device [ 507.295554][ T62] vhci_hcd: stop threads [ 507.305149][ T62] vhci_hcd: release socket [ 507.520543][T11598] dummy0: entered promiscuous mode [ 507.527256][ T62] vhci_hcd: disconnect device [ 507.648563][T11598] nlmon0: entered promiscuous mode [ 507.764190][ T62] vhci_hcd: stop threads [ 507.768627][ T62] vhci_hcd: release socket [ 507.785866][T11598] caif0: entered promiscuous mode [ 507.791715][ T62] vhci_hcd: disconnect device [ 507.808212][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 507.810087][ T62] vhci_hcd: stop threads [ 507.835672][T11598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 507.878499][ T62] vhci_hcd: release socket [ 507.895605][ T62] vhci_hcd: disconnect device [ 507.913706][ T62] vhci_hcd: stop threads [ 507.925267][ T62] vhci_hcd: release socket [ 507.948973][ T62] vhci_hcd: disconnect device [ 508.426010][T11635] delete_channel: no stack [ 508.597314][ T24] usb 1-1: 0:2 : does not exist [ 508.627576][ T24] usb 1-1: unit 5 not found! [ 508.684665][ T24] usb 1-1: USB disconnect, device number 60 [ 508.778530][ T5886] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 508.848297][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 509.097288][ T5886] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 509.116011][ T5886] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 509.125501][ T7765] udevd[7765]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.126972][ T5886] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 509.152879][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.210985][T11635] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 509.330390][ T5886] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 509.888381][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 510.284640][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1531'. [ 510.382179][T11669] bond_slave_0: entered promiscuous mode [ 510.388513][T11669] bond_slave_1: entered promiscuous mode [ 510.469295][T10388] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 510.527782][T11669] macvlan2: entered promiscuous mode [ 510.549104][T11669] bond0: entered promiscuous mode [ 510.578229][ T5886] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 510.610073][T11669] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 510.658398][T10388] usb 6-1: Using ep0 maxpacket: 16 [ 510.667494][T10388] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.679261][T10388] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 510.693269][T10388] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 510.706056][T10388] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.752444][T10388] usb 6-1: Product: syz [ 510.755745][ T5886] usb 1-1: unable to get BOS descriptor or descriptor too short [ 510.766365][T10388] usb 6-1: Manufacturer: syz [ 510.776607][ T5886] usb 1-1: not running at top speed; connect to a high speed hub [ 510.781640][T10388] usb 6-1: SerialNumber: syz [ 510.796321][ T5886] usb 1-1: config 8 has an invalid interface number: 29 but max is 0 [ 510.808238][ T5886] usb 1-1: config 8 has no interface number 0 [ 510.835435][ T5886] usb 1-1: config 8 interface 29 altsetting 9 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 510.904653][ T5886] usb 1-1: config 8 interface 29 has no altsetting 0 [ 510.928250][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 510.985854][ T5886] usb 1-1: New USB device found, idVendor=054c, idProduct=0010, bcdDevice= 2.6a [ 511.020262][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.038849][ T5886] usb 1-1: Product: Ђ [ 511.045675][ T5886] usb 1-1: SerialNumber: й [ 511.075203][T10388] usb 6-1: 0:2 : does not exist [ 511.091910][T10388] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 511.138424][T10388] usb 6-1: USB disconnect, device number 2 [ 511.158349][ T120] vhci_hcd: vhci_device speed not set [ 511.213200][ T7765] udevd[7765]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 511.302387][ T5886] usb-storage 1-1:8.29: USB Mass Storage device detected [ 511.325351][ T5886] usb-storage 1-1:8.29: Quirks match for vid 054c pid 0010: 281 [ 511.350516][ T5886] usb-storage 1-1:8.29: This device (054c,0010,026a S 06 P f6) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-rc6-syzkaller-00346-g5723cc3450bc) [ 511.350516][ T5886] Please send a copy of this message to and [ 511.465712][ T5886] usb 1-1: USB disconnect, device number 61 [ 511.968301][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 512.065675][T10388] usb 3-1: USB disconnect, device number 67 [ 512.489549][ T5888] usb usb36-port1: attempt power cycle [ 512.506758][T11694] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1539'. [ 512.554348][T11694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1539'. [ 512.596629][T11694] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1539'. [ 512.631986][T11694] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1539'. [ 512.668298][ T5887] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 512.840738][ T5887] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 512.858913][ T5887] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 512.875151][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.894644][ T5887] usb 1-1: Product: 䍐ꂡ漜갣뾁鋫㘫㈏ᚁ飬鯕ᚥ惘⛀ꛂ桎苢鰩㶵ꧽϤ딅댂䃄Ѣ퀟Ⓛ⤻Ⱌ⮛绣楡ン诃稂쐌騍㡕䈬♡Ჭᬛ躛儈姅㟘鰭茙镭焑꼖ਕ땻ﳊ瞋瑠엟椻쮱岗㊓ℽ咽ꇡ⁽㮦넑㓏辅褚딝䁩ᨂ敠䀮ؐ〘ﶚ䐛뭣㩩킀䭮 [ 512.939794][ T5887] usb 1-1: Manufacturer: 迆楝鑦憊뭨ꏚ巬쎞㞃ᬑ蓍勌揍묞㚢摜猧炬ꏭ鼰ﰯ雜晅⚈索㓳ퟟ꺠⠕㾬섓䤴⃟霅饤㉵䁣뎭믄箆⯿鷵婿㈰₰謬㹎ṻ䠢䓮៻벃踲懛啔뛖淍ꪒ蹦ࠟ뺓 [ 512.996397][ T5887] usb 1-1: SerialNumber: 錊덚圭ၟ뵍ꋦ쫠；㋨䍾ੴ枉㪢쬘청㺠廅ֿ陀ꦡľ袺⸼옭ꦄ⎻閄梠踅폧鹮산딆泟Ȼ뽣㑯쉸ඡ⬺ꙙ垄坐쨰磢힂鋔閬䂓碓誏箍㫺㉥㯚曱ꀖ䢿긧붇Ѫ묘弁㘊ﵩ绎䐁䔤켮ꯒ쪏ຜᤎ꒳ᾮ栗詼뛭ኖ촙札ꡠ퀛む⾬杻ⵉས㐦炕鱖使ꬋ࿬ةಹ끴枌䣫퇪㉝㰪ힲ [ 513.030312][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 513.059568][ T5888] usb usb36-port1: unable to enumerate USB device [ 513.076132][T11692] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 514.048195][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 514.055929][ T120] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 514.208284][ T120] usb 4-1: Using ep0 maxpacket: 16 [ 514.217440][ T120] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 514.233844][ T120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 514.252660][ T120] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 514.263065][ T120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.272918][ T120] usb 4-1: Product: syz [ 514.279389][ T120] usb 4-1: Manufacturer: syz [ 514.284094][ T120] usb 4-1: SerialNumber: syz [ 514.298366][ T120] usb 4-1: config 0 descriptor?? [ 514.309326][ T120] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 514.319281][ T120] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 514.710999][T11715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.088277][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 515.651101][ T120] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 515.657846][ T120] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 515.684063][ T120] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 515.715036][ T120] em28xx 4-1:0.0: No AC97 audio processor [ 515.826435][T11715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.848399][ T5887] cdc_ncm 1-1:1.0: bind() failure [ 515.928538][ T5887] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 515.958333][ T5887] cdc_ncm 1-1:1.1: bind() failure [ 515.987086][ T5884] usb 4-1: USB disconnect, device number 59 [ 516.055031][T11734] UHID_CREATE from different security context by process 1567 (syz.0.1549), this is not allowed. [ 516.113503][ T5884] em28xx 4-1:0.0: Disconnecting em28xx [ 516.115366][ T5887] usb 1-1: USB disconnect, device number 62 [ 516.128303][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 516.142459][ T5884] em28xx 4-1:0.0: Freeing device [ 516.685449][T11748] netlink: 'syz.0.1555': attribute type 2 has an invalid length. [ 516.697611][T11748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1555'. [ 517.168183][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 517.761655][ T5887] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 517.941068][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.961665][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.002446][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 518.048422][ T5887] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 518.057554][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.089903][ T5887] usb 6-1: config 0 descriptor?? [ 518.209001][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 518.519441][T11789] ALSA: seq fatal error: cannot create timer (-19) [ 518.546002][ T5887] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 518.596688][ T5887] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 518.749489][ T120] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 518.829154][T10388] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 518.918261][ T120] usb 2-1: Using ep0 maxpacket: 16 [ 518.925086][ T120] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 518.936192][ T120] usb 2-1: config 0 has no interface number 0 [ 518.942435][ T120] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 518.952630][ T120] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 518.968541][ T120] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 518.977702][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.986169][ T120] usb 2-1: Product: syz [ 518.990690][ T120] usb 2-1: Manufacturer: syz [ 518.995302][ T120] usb 2-1: SerialNumber: syz [ 518.998487][T10388] usb 3-1: Using ep0 maxpacket: 16 [ 519.006401][ T120] usb 2-1: config 0 descriptor?? [ 519.012144][T10388] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.018604][ T5888] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 519.023145][T11793] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 519.040572][T10388] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 519.048899][T11793] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 519.054866][ T5893] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 519.073040][T10388] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 519.084985][T10388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.094934][T10388] usb 3-1: Product: syz [ 519.099250][T10388] usb 3-1: Manufacturer: syz [ 519.103924][T10388] usb 3-1: SerialNumber: syz [ 519.112353][T10388] usb 3-1: config 0 descriptor?? [ 519.122410][T10388] appledisplay 3-1:0.0: Could not find int-in endpoint [ 519.130612][T10388] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 519.179606][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 519.186483][ T5888] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 519.197182][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.213695][ T5888] usb 4-1: config 0 descriptor?? [ 519.234796][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.247201][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.248387][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 519.263854][ T5893] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 519.278286][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.295784][T11785] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 519.303673][T11785] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 519.313607][ T5893] usb 1-1: config 0 descriptor?? [ 519.405055][T11795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.415106][T11795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.431896][ T5888] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 519.446969][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 519.458212][ T5888] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 519.465713][ T5888] usb 4-1: media controller created [ 519.510972][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 519.538316][ T5887] usb 3-1: USB disconnect, device number 68 [ 519.645543][ T5888] az6027: usb out operation failed. (-71) [ 519.657893][ T5888] az6027: usb out operation failed. (-71) [ 519.664961][ T5888] stb0899_attach: Driver disabled by Kconfig [ 519.671533][ T5888] az6027: no front-end attached [ 519.671533][ T5888] [ 519.679314][ T5888] az6027: usb out operation failed. (-71) [ 519.686113][ T5888] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 519.703975][ T5888] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 519.724431][ T120] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 519.738719][ T120] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 519.751249][ T5888] dvb-usb: schedule remote query interval to 400 msecs. [ 519.772702][ T5888] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 519.786205][ T120] asix 2-1:0.251: probe with driver asix failed with error -61 [ 519.805695][ T5888] usb 4-1: USB disconnect, device number 60 [ 519.891586][ T5888] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 520.021305][ T120] usb 2-1: USB disconnect, device number 47 [ 520.288501][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 520.445327][ T5887] usb 6-1: USB disconnect, device number 3 [ 520.621863][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1573'. [ 520.641600][T11815] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1573'. [ 521.028369][ T5887] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 521.098272][ T120] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 521.112855][T11826] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 521.196133][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 521.204947][ T5887] usb 2-1: config 0 has an invalid interface number: 129 but max is 0 [ 521.218046][ T5887] usb 2-1: config 0 has no interface number 0 [ 521.227260][ T5887] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=11.ab [ 521.241325][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.257934][ T5887] usb 2-1: Product: syz [ 521.278468][ T120] usb 4-1: Using ep0 maxpacket: 32 [ 521.288904][ T5887] usb 2-1: Manufacturer: syz [ 521.293678][ T5887] usb 2-1: SerialNumber: syz [ 521.311947][ T120] usb 4-1: unable to get BOS descriptor or descriptor too short [ 521.328182][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 521.340646][ T5887] usb 2-1: config 0 descriptor?? [ 521.347927][ T120] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.368276][ T120] usb 4-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 521.383053][ T120] usb 4-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 521.426202][ T120] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 521.449692][ T120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.457761][ T120] usb 4-1: Product: syz [ 521.468638][ T120] usb 4-1: Manufacturer: syz [ 521.473306][ T120] usb 4-1: SerialNumber: syz [ 521.582638][ T5893] usbhid 1-1:0.0: can't add hid device: -71 [ 521.603616][ T5887] usb 2-1: USB disconnect, device number 48 [ 521.604426][ T5893] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 521.657766][ T5893] usb 1-1: USB disconnect, device number 63 [ 521.708852][T11838] pimreg: entered allmulticast mode [ 521.856387][T11840] bridge0: port 1(netdevsim0) entered blocking state [ 521.863359][T11840] bridge0: port 1(netdevsim0) entered forwarding state [ 521.934220][T11840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.969724][T11840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.005905][T11840] fuse: Bad value for 'fd' [ 522.033833][T11839] trusted_key: encrypted_key: insufficient parameters specified [ 522.368248][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 522.970009][ T120] usb 4-1: 2:0 : UAC_AS_GENERAL descriptor not found [ 523.040753][ T120] usb 4-1: USB disconnect, device number 61 [ 523.100546][ T7765] udevd[7765]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.408296][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 523.698291][ T5893] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 523.734463][ T30] audit: type=1326 audit(1747568259.225:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11871 comm="syz.3.1595" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x0 [ 523.848922][ T5893] usb 2-1: device descriptor read/64, error -71 [ 523.882331][T11881] Invalid logical block size (4608) [ 524.058233][ T5852] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 524.108238][ T5893] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 524.250616][ T5852] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 524.264576][ T5852] usb 1-1: config 0 has no interface number 0 [ 524.271408][ T5893] usb 2-1: device descriptor read/64, error -71 [ 524.286679][ T5852] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 524.297817][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.324315][ T5852] usb 1-1: Product: syz [ 524.331798][ T5852] usb 1-1: Manufacturer: syz [ 524.336466][ T5852] usb 1-1: SerialNumber: syz [ 524.367367][ T5852] usb 1-1: config 0 descriptor?? [ 524.378613][ T5893] usb usb2-port1: attempt power cycle [ 524.396163][ T5852] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 524.448207][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 524.448495][T10388] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 524.746268][T10388] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.773831][T10388] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.795090][ T5852] gspca_spca1528: reg_w err -71 [ 524.800178][ T5893] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 524.809916][T10388] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 524.821154][T10388] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.832745][ T5852] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 524.853920][ T5893] usb 2-1: device descriptor read/8, error -71 [ 524.871701][ T5852] usb 1-1: USB disconnect, device number 64 [ 524.891375][T10388] usb 6-1: config 0 descriptor?? [ 525.118922][ T5893] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 525.165486][ T5893] usb 2-1: device descriptor read/8, error -71 [ 525.288946][ T5893] usb usb2-port1: unable to enumerate USB device [ 525.298252][ T5887] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 525.448284][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 525.455568][ T5887] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.467476][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0 [ 525.474597][ T5887] usb 3-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 525.484206][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.492419][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 525.510586][ T5887] usb 3-1: config 0 descriptor?? [ 525.725560][T11903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.734781][T11903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.791701][ T5887] usbhid 3-1:0.0: can't add hid device: -71 [ 525.813374][ T5887] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 525.845030][ T5887] usb 3-1: USB disconnect, device number 69 [ 526.382066][ T5887] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 526.401474][ T5887] hid-generic 0000:0000:0000.0012: hidraw1: HID v0.00 Device [syz1] on syz0 [ 526.528265][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 526.626497][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1610'. [ 526.646530][T11918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1610'. [ 526.907128][T11921] FAULT_INJECTION: forcing a failure. [ 526.907128][T11921] name failslab, interval 1, probability 0, space 0, times 0 [ 526.924863][ T5887] usb 5-1: reset high-speed USB device number 69 using dummy_hcd [ 526.973260][T11921] CPU: 1 UID: 0 PID: 11921 Comm: syz.3.1611 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 526.973298][T11921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 526.973313][T11921] Call Trace: [ 526.973322][T11921] [ 526.973333][T11921] dump_stack_lvl+0x189/0x250 [ 526.973375][T11921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 526.973405][T11921] ? __pfx__printk+0x10/0x10 [ 526.973432][T11921] ? __pfx___might_resched+0x10/0x10 [ 526.973452][T11921] ? fs_reclaim_acquire+0x7d/0x100 [ 526.973490][T11921] should_fail_ex+0x414/0x560 [ 526.973518][T11921] should_failslab+0xa8/0x100 [ 526.973548][T11921] kmem_cache_alloc_noprof+0x73/0x3c0 [ 526.973573][T11921] ? alloc_empty_file+0x55/0x1d0 [ 526.973610][T11921] alloc_empty_file+0x55/0x1d0 [ 526.973643][T11921] path_openat+0x107/0x3830 [ 526.973663][T11921] ? arch_stack_walk+0xfc/0x150 [ 526.973702][T11921] ? stack_trace_save+0x9c/0xe0 [ 526.973728][T11921] ? stack_depot_save_flags+0x40/0x910 [ 526.973761][T11921] ? kasan_save_track+0x4f/0x80 [ 526.973784][T11921] ? __kasan_slab_alloc+0x6c/0x80 [ 526.973806][T11921] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 526.973831][T11921] ? getname_flags+0xb8/0x540 [ 526.973859][T11921] ? __pfx_path_openat+0x10/0x10 [ 526.973879][T11921] ? do_fast_syscall_32+0x34/0x80 [ 526.973907][T11921] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 526.973955][T11921] do_filp_open+0x1fa/0x410 [ 526.973980][T11921] ? __pfx_do_filp_open+0x10/0x10 [ 526.974026][T11921] ? _raw_spin_unlock+0x28/0x50 [ 526.974048][T11921] ? alloc_fd+0x64c/0x6c0 [ 526.974087][T11921] do_sys_openat2+0x121/0x1c0 [ 526.974110][T11921] ? __pfx_do_sys_openat2+0x10/0x10 [ 526.974135][T11921] ? ksys_write+0x1f0/0x250 [ 526.974169][T11921] __ia32_compat_sys_openat+0x131/0x160 [ 526.974197][T11921] __do_fast_syscall_32+0xb4/0x110 [ 526.974227][T11921] ? lockdep_hardirqs_on+0x9c/0x150 [ 526.974266][T11921] do_fast_syscall_32+0x34/0x80 [ 526.974295][T11921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 526.974321][T11921] RIP: 0023:0xf7fc8539 [ 526.974339][T11921] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 526.974358][T11921] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 526.974381][T11921] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 526.974396][T11921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 526.974409][T11921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 526.974421][T11921] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 526.974434][T11921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 526.974465][T11921] [ 527.461075][T10388] usbhid 6-1:0.0: can't add hid device: -71 [ 527.471202][T10388] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 527.548528][T10388] usb 6-1: USB disconnect, device number 4 [ 527.568453][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 528.392140][T11937] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 528.398723][T11937] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 528.414642][T11937] vhci_hcd vhci_hcd.0: Device attached [ 528.608205][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 528.778346][T10388] usb 37-1: new low-speed USB device number 14 using vhci_hcd [ 529.648184][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 530.028370][ T5884] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 530.263059][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 530.360604][ T5884] usb 2-1: config 0 has an invalid interface number: 232 but max is 0 [ 530.370920][ T5884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.392733][ T5884] usb 2-1: config 0 has no interface number 0 [ 530.402338][ T5884] usb 2-1: config 0 interface 232 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 530.434015][ T5884] usb 2-1: config 0 interface 232 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 530.472380][ T5884] usb 2-1: config 0 interface 232 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 530.533238][ T5884] usb 2-1: config 0 interface 232 has no altsetting 0 [ 530.594967][ T5884] usb 2-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice= 3.fc [ 530.631274][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.688179][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 530.692310][ T5884] usb 2-1: Product: syz [ 530.700448][ T5884] usb 2-1: Manufacturer: syz [ 530.705530][ T5884] usb 2-1: SerialNumber: syz [ 530.770951][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1625'. [ 530.780606][ T5884] usb 2-1: config 0 descriptor?? [ 531.063740][T11938] vhci_hcd: connection reset by peer [ 531.071849][ T5884] s2255 2-1:0.232: Could not find bulk-in endpoint [ 531.082995][ T5884] Sensoray 2255 driver load failed: 0xfffffff4 [ 531.090428][ T5884] s2255 2-1:0.232: probe with driver s2255 failed with error -12 [ 531.115828][ T3497] vhci_hcd: stop threads [ 531.124030][ T3497] vhci_hcd: release socket [ 531.136945][ T3497] vhci_hcd: disconnect device [ 531.738215][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 531.842211][ T5884] usb 2-1: USB disconnect, device number 53 [ 532.098747][ T5887] usb 5-1: device descriptor read/64, error -110 [ 532.498736][ T5887] usb 5-1: reset high-speed USB device number 69 using dummy_hcd [ 532.639475][ T5887] usb 5-1: device descriptor read/64, error -32 [ 532.768175][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 532.985158][ T5887] usb 5-1: reset high-speed USB device number 69 using dummy_hcd [ 533.054910][ T5887] usb 5-1: device descriptor read/8, error -32 [ 533.388349][ T5887] usb 5-1: reset high-speed USB device number 69 using dummy_hcd [ 533.603795][ T5887] usb 5-1: device descriptor read/8, error -32 [ 533.763772][ T5887] raw-gadget.0 gadget.4: failed to queue suspend event [ 533.808800][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 533.818666][ T5888] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 533.836851][ T5886] usb 5-1: USB disconnect, device number 69 [ 533.878372][T10388] vhci_hcd: vhci_device speed not set [ 533.881090][ T5886] raw-gadget.0 gadget.4: failed to queue reset event [ 533.988585][ T5886] raw-gadget.0 gadget.4: failed to queue resume event [ 534.027816][ T5888] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 534.076905][ T5888] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 534.100941][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.129220][ T5886] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 534.157042][ T5888] usb 3-1: Product: 䍐ꂡ漜갣뾁鋫㘫㈏ᚁ飬鯕ᚥ惘⛀ꛂ桎苢鰩㶵ꧽϤ딅댂䃄Ѣ퀟Ⓛ⤻Ⱌ⮛绣楡ン诃稂쐌騍㡕䈬♡Ჭᬛ躛儈姅㟘鰭茙镭焑꼖ਕ땻ﳊ瞋瑠엟椻쮱岗㊓ℽ咽ꇡ⁽㮦넑㓏辅褚딝䁩ᨂ敠䀮ؐ〘ﶚ䐛뭣㩩킀䭮 [ 534.183920][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.209423][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 534.216887][ T5886] raw-gadget.0 gadget.4: failed to queue reset event [ 534.247265][ T5888] usb 3-1: Manufacturer: 迆楝鑦憊뭨ꏚ巬쎞㞃ᬑ蓍勌揍묞㚢摜猧炬ꏭ鼰ﰯ雜晅⚈索㓳ퟟ꺠⠕㾬섓䤴⃟霅饤㉵䁣뎭믄箆⯿鷵婿㈰₰謬㹎ṻ䠢䓮៻벃踲懛啔뛖淍ꪒ蹦ࠟ뺓 [ 534.270459][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.299633][ T5888] usb 3-1: SerialNumber: 錊덚圭ၟ뵍ꋦ쫠；㋨䍾ੴ枉㪢쬘청㺠廅ֿ陀ꦡľ袺⸼옭ꦄ⎻閄梠踅폧鹮산딆泟Ȼ뽣㑯쉸ඡ⬺ꙙ垄坐쨰磢힂鋔閬䂓碓誏箍㫺㉥㯚曱ꀖ䢿긧붇Ѫ묘弁㘊ﵩ绎䐁䔤켮ꯒ쪏ຜᤎ꒳ᾮ栗詼뛭ኖ촙札ꡠ퀛む⾬杻ⵉས㐦炕鱖使ꬋ࿬ةಹ끴枌䣫퇪㉝㰪ힲ [ 534.308442][ T5886] raw-gadget.0 gadget.4: failed to queue resume event [ 534.348980][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.369973][T12003] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 534.578222][ T5886] usb 5-1: device descriptor read/64, error -32 [ 534.732270][ T5886] raw-gadget.0 gadget.4: failed to queue suspend event [ 534.748717][ T5886] raw-gadget.0 gadget.4: failed to queue reset event [ 534.820449][ T5886] raw-gadget.0 gadget.4: failed to queue resume event [ 534.848859][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 535.180547][T12025] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 535.187147][T12025] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 535.212602][T12025] vhci_hcd vhci_hcd.0: Device attached [ 535.248519][ T5886] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 535.256807][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 535.266246][ T5886] raw-gadget.0 gadget.4: failed to queue reset event [ 535.347022][ T5886] raw-gadget.0 gadget.4: failed to queue resume event [ 535.428351][ T5884] usb 39-1: new low-speed USB device number 14 using vhci_hcd [ 535.648254][ T5886] usb 5-1: device descriptor read/64, error -32 [ 535.778634][ T5886] raw-gadget.0 gadget.4: failed to queue suspend event [ 535.819206][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1639'. [ 535.841460][ T5886] usb usb5-port1: attempt power cycle [ 535.858418][ T5886] raw-gadget.0 gadget.4: failed to queue disconnect event [ 535.888204][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 535.911955][ T5886] raw-gadget.0 gadget.4: failed to queue reset event [ 536.098951][ T5886] raw-gadget.0 gadget.4: failed to queue resume event [ 536.106532][ T5886] raw-gadget.0 gadget.4: failed to queue reset event [ 536.327838][ T5886] raw-gadget.0 gadget.4: failed to queue resume event [ 536.335148][ T5888] cdc_ncm 3-1:1.0: bind() failure [ 536.353556][ T5888] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 536.384423][ T5888] cdc_ncm 3-1:1.1: bind() failure [ 536.422919][ T5886] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 536.522973][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 536.530708][ T5888] usb 3-1: USB disconnect, device number 70 [ 536.547474][ T5886] usb 5-1: device descriptor read/8, error -32 [ 536.698995][ T5886] raw-gadget.0 gadget.4: failed to queue suspend event [ 536.725880][ T5886] raw-gadget.0 gadget.4: failed to queue reset event [ 536.838293][ T5886] raw-gadget.0 gadget.4: failed to queue resume event [ 536.918287][ T5886] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 536.928198][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 537.013464][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 537.021247][ T5886] usb 5-1: device descriptor read/8, error -32 [ 537.130647][ T5886] raw-gadget.0 gadget.4: failed to queue suspend event [ 537.137816][ T5886] usb usb5-port1: unable to enumerate USB device [ 537.327213][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1642'. [ 537.525351][T12045] team0 (unregistering): Port device team_slave_0 removed [ 537.805770][T12045] team0 (unregistering): Port device team_slave_1 removed [ 537.978181][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 538.072294][T12027] vhci_hcd: connection reset by peer [ 538.083515][ T53] vhci_hcd: stop threads [ 538.087847][ T53] vhci_hcd: release socket [ 538.116159][ T53] vhci_hcd: disconnect device [ 539.008193][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 539.168235][ T5852] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 539.335047][ T5852] usb 1-1: config 0 has no interfaces? [ 539.370186][ T5852] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 539.382847][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.392034][ T5852] usb 1-1: Product: syz [ 539.396937][ T5852] usb 1-1: Manufacturer: syz [ 539.409072][ T5852] usb 1-1: SerialNumber: syz [ 539.428344][ T5852] usb 1-1: config 0 descriptor?? [ 539.495342][ T5888] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 539.668875][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 539.716724][ T5888] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.747589][T12085] tap0: tun_chr_ioctl cmd 1074025677 [ 539.773553][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 539.778856][T12085] tap0: linktype set to 804 [ 539.818789][ T5888] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 539.818825][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.818861][ T5888] usb 6-1: Product: syz [ 539.818878][ T5888] usb 6-1: Manufacturer: syz [ 539.818895][ T5888] usb 6-1: SerialNumber: syz [ 539.821935][ T5888] usb 6-1: config 0 descriptor?? [ 539.838774][ T5888] appledisplay 6-1:0.0: Could not find int-in endpoint [ 539.936943][ T5888] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 540.039786][T12074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.048260][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 540.050935][T12074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.195474][ T5886] usb 6-1: USB disconnect, device number 5 [ 540.483614][T12098] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 540.490477][T12098] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 540.546082][T12098] vhci_hcd vhci_hcd.0: Device attached [ 540.609423][ T5884] vhci_hcd: vhci_device speed not set [ 540.778338][ T5852] usb 35-1: new low-speed USB device number 12 using vhci_hcd [ 541.088265][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 541.150724][T12109] can: request_module (can-proto-5) failed. [ 541.725503][ T5884] usb 1-1: USB disconnect, device number 65 [ 541.838339][ T5886] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 542.018288][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 542.020991][ T5884] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 542.060559][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.105771][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.120945][ T5884] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 542.128234][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 542.175549][ T5886] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 542.236939][ T5886] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 542.285891][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.335004][ T5886] usb 6-1: config 0 descriptor?? [ 542.887374][T12151] input: syz0 as /devices/virtual/input/input28 [ 542.920622][T12151] input: failed to attach handler leds to device input28, error: -6 [ 543.168164][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 543.880847][ T5886] usbhid 6-1:0.0: can't add hid device: -71 [ 543.887072][ T5886] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 543.982501][ T5886] usb 6-1: USB disconnect, device number 6 [ 544.025450][T12099] vhci_hcd: connection reset by peer [ 544.043447][ T12] vhci_hcd: stop threads [ 544.065752][ T12] vhci_hcd: release socket [ 544.086065][ T12] vhci_hcd: disconnect device [ 544.191445][T12155] trusted_key: syz.2.1669 sent an empty control message without MSG_MORE. [ 544.208179][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 544.267907][ T5884] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 544.510354][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 544.527465][ T5884] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 544.604711][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.762197][ T5884] usb 4-1: config 0 descriptor?? [ 545.035490][T12175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1675'. [ 545.195052][T12157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.205829][T12157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.219608][ T5884] kye 0003:0458:4018.0014: unbalanced delimiter at end of report description [ 545.229154][ T5884] kye 0003:0458:4018.0014: parse failed [ 545.236808][ T5884] kye 0003:0458:4018.0014: probe with driver kye failed with error -22 [ 545.248209][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 545.590322][ T5887] usb 4-1: USB disconnect, device number 62 [ 545.918339][ T5852] vhci_hcd: vhci_device speed not set [ 546.064690][ T5888] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 546.240933][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 546.261225][ T5888] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 546.281512][T12199] input: syz0 as /devices/virtual/input/input29 [ 546.288166][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 546.305523][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.364391][ T5888] usb 6-1: config 0 descriptor?? [ 546.505081][ T5888] as10x_usb: device has been detected [ 546.512849][ T5888] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 546.625004][ T5888] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 546.649392][ T5888] as10x_usb: error during firmware upload part1 [ 546.656958][ T5888] Registered device nBox DVB-T Dongle [ 546.703952][ T5888] usb 6-1: USB disconnect, device number 7 [ 546.766413][ T5888] Unregistered device nBox DVB-T Dongle [ 546.774824][ T5888] as10x_usb: device has been disconnected [ 546.993135][T12183] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 547.001878][T12183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1674'. [ 547.011895][T12183] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 547.165708][T12210] FAULT_INJECTION: forcing a failure. [ 547.165708][T12210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.181052][T12210] CPU: 1 UID: 0 PID: 12210 Comm: syz.3.1682 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 547.181084][T12210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 547.181099][T12210] Call Trace: [ 547.181108][T12210] [ 547.181118][T12210] dump_stack_lvl+0x189/0x250 [ 547.181150][T12210] ? __lock_acquire+0xaac/0xd20 [ 547.181177][T12210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 547.181201][T12210] ? __pfx__printk+0x10/0x10 [ 547.181217][T12210] ? __might_fault+0xb0/0x130 [ 547.181248][T12210] should_fail_ex+0x414/0x560 [ 547.181270][T12210] _copy_from_user+0x2d/0xb0 [ 547.181295][T12210] __sys_connect+0x123/0x440 [ 547.181316][T12210] ? __fget_files+0x3a0/0x420 [ 547.181339][T12210] ? __pfx___sys_connect+0x10/0x10 [ 547.181377][T12210] __ia32_sys_connect+0x7a/0x90 [ 547.181399][T12210] __do_fast_syscall_32+0xb4/0x110 [ 547.181424][T12210] ? lockdep_hardirqs_on+0x9c/0x150 [ 547.181448][T12210] do_fast_syscall_32+0x34/0x80 [ 547.181471][T12210] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 547.181492][T12210] RIP: 0023:0xf7fc8539 [ 547.181506][T12210] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 547.181521][T12210] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 547.181540][T12210] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 547.181552][T12210] RDX: 0000000000000016 RSI: 0000000000000000 RDI: 0000000000000000 [ 547.181562][T12210] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 547.181572][T12210] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 547.181582][T12210] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 547.181605][T12210] [ 547.369531][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 547.489074][T12181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.117795][T12221] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 548.124664][T12221] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 548.190641][T12221] vhci_hcd vhci_hcd.0: Device attached [ 548.366762][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1687'. [ 548.428937][ T5888] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 548.448294][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 548.539764][ T30] audit: type=1326 audit(1747568284.025:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12233 comm="syz.0.1690" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f93539 code=0x0 [ 548.569429][ T5884] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 548.620895][ T30] audit: type=1326 audit(1747568284.085:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12233 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 548.698379][ T30] audit: type=1326 audit(1747568284.085:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12233 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=220 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 548.787115][ T5884] usb 4-1: device descriptor read/64, error -71 [ 548.827962][ T30] audit: type=1326 audit(1747568284.085:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12233 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 548.964656][ T30] audit: type=1326 audit(1747568284.085:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12233 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 549.108233][ T5884] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 549.133701][ T30] audit: type=1326 audit(1747568284.085:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12233 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 549.193610][ T30] audit: type=1326 audit(1747568284.085:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12233 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 549.283168][ T5884] usb 4-1: device descriptor read/64, error -71 [ 549.296728][T12254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1693'. [ 549.329487][ T30] audit: type=1326 audit(1747568284.085:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12233 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 549.488322][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 549.620568][ T5884] usb usb4-port1: attempt power cycle [ 549.808259][ T30] audit: type=1326 audit(1747568284.095:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12233 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 549.851233][ T30] audit: type=1326 audit(1747568284.095:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12233 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 549.998282][ T5886] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 550.008367][ T5884] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 550.032715][ T5884] usb 4-1: device descriptor read/8, error -71 [ 550.232212][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 550.246846][ T5886] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 550.276766][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.288354][ T5884] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 550.528452][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 551.064300][T12222] vhci_hcd: connection reset by peer [ 551.075045][ T8172] vhci_hcd: stop threads [ 551.080907][ T8172] vhci_hcd: release socket [ 551.089494][ T5886] usb 1-1: config 0 descriptor?? [ 551.105987][ T8172] vhci_hcd: disconnect device [ 551.105992][ T5884] usb 4-1: device descriptor read/8, error -71 [ 551.172317][ T5886] as10x_usb: device has been detected [ 551.191652][ T5886] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 551.208567][ T5884] usb usb4-port1: unable to enumerate USB device [ 551.234737][ T5886] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 551.294593][ T5886] as10x_usb: error during firmware upload part1 [ 551.306390][ T5886] Registered device nBox DVB-T Dongle [ 551.379946][ T5886] usb 1-1: USB disconnect, device number 66 [ 551.548343][ T5886] Unregistered device nBox DVB-T Dongle [ 551.553631][ T5886] as10x_usb: device has been disconnected [ 551.568204][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 551.803991][T12269] ALSA: mixer_oss: invalid OSS volume '' [ 551.824269][T12269] ALSA: mixer_oss: invalid OSS volume '' [ 551.843629][T12273] sctp: [Deprecated]: syz.2.1698 (pid 12273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 551.843629][T12273] Use struct sctp_sack_info instead [ 551.883256][T12276] fuse: Unknown parameter 'grou00000000000000000000' [ 552.058218][ T5893] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 552.108706][T12292] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1704'. [ 552.117827][T12292] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1704'. [ 552.228699][ T5884] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 552.248211][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 552.255521][ T5893] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 552.278198][ T5893] usb 4-1: config 0 has no interface number 0 [ 552.284439][ T5893] usb 4-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.325179][ T5893] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 552.364640][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.388216][ T5893] usb 4-1: Product: syz [ 552.392502][ T5893] usb 4-1: Manufacturer: syz [ 552.397146][ T5893] usb 4-1: SerialNumber: syz [ 552.401958][ T5884] usb 6-1: Using ep0 maxpacket: 8 [ 552.412550][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1705'. [ 552.453359][ T5884] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 552.462359][T12297] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1706'. [ 552.464133][ T5893] usb 4-1: config 0 descriptor?? [ 552.476759][ T5884] usb 6-1: config 8 has no interface number 0 [ 552.514596][ T5884] usb 6-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 552.532348][ T5884] usb 6-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 552.565686][ T5884] usb 6-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 552.587491][ T5893] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 552.608359][ T5884] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 552.608577][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 552.617840][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.647397][ T5884] usb 6-1: Product: syz [ 552.651900][ T5884] usb 6-1: Manufacturer: syz [ 552.657543][ T5884] usb 6-1: SerialNumber: syz [ 552.736776][ T36] usb 4-1: Failed to submit usb control message: -71 [ 552.737041][ T5893] usb 4-1: USB disconnect, device number 67 [ 552.788491][ T36] usb 4-1: unable to send the bmi data to the device: -71 [ 552.812511][ T36] usb 4-1: unable to get target info from device [ 552.831649][ T36] usb 4-1: could not get target info (-71) [ 552.930160][ T36] usb 4-1: could not probe fw (-71) [ 552.980395][ T5884] vmk80xx 6-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 553.028589][ T5884] vmk80xx 6-1:8.188: probe with driver vmk80xx failed with error -22 [ 553.080582][ T5884] usb 6-1: USB disconnect, device number 8 [ 553.561080][ T5888] vhci_hcd: vhci_device speed not set [ 553.648190][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 554.246704][T12322] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 554.253380][T12322] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 554.294364][T12322] vhci_hcd vhci_hcd.0: Device attached [ 554.481410][T12329] fuse: Unknown parameter 'grou00000000000000000000' [ 554.568184][ T5893] usb 33-1: new low-speed USB device number 15 using vhci_hcd [ 554.688185][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 555.728196][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 556.775457][T12326] vhci_hcd: connection reset by peer [ 556.778184][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 556.791263][ T8172] vhci_hcd: stop threads [ 556.795574][ T8172] vhci_hcd: release socket [ 556.820713][ T8172] vhci_hcd: disconnect device [ 557.708358][ T5852] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 557.808197][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 557.858354][ T5852] usb 4-1: Using ep0 maxpacket: 32 [ 557.870481][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.921669][ T5852] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 557.938421][ T5888] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 558.058234][ T5884] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 558.078802][ T5852] usb 4-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 558.148346][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 558.159655][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.195282][ T5852] usb 4-1: config 0 descriptor?? [ 558.240343][ T5884] usb 3-1: Invalid ep0 maxpacket: 9 [ 558.392400][ T5884] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 558.618302][ T5884] usb 3-1: Invalid ep0 maxpacket: 9 [ 558.624166][ T5884] usb usb3-port1: attempt power cycle [ 558.778310][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 558.858155][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 558.928235][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 558.942851][ T9] usb 2-1: config 128 has an invalid interface number: 51 but max is 0 [ 558.952564][ T9] usb 2-1: config 128 has no interface number 0 [ 558.971539][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 558.981155][ T5884] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 558.990862][ T9] usb 2-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 559.000344][ T9] usb 2-1: Product: syz [ 559.005701][ T9] usb 2-1: Manufacturer: syz [ 559.014525][ T5884] usb 3-1: Invalid ep0 maxpacket: 9 [ 559.022617][ T9] usb 2-1: SerialNumber: syz [ 559.066278][ T9] quatech2 2-1:128.51: Quatech 2nd gen USB to Serial Driver converter detected [ 559.158381][ T5884] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 559.189315][ T5884] usb 3-1: Invalid ep0 maxpacket: 9 [ 559.197368][ T5884] usb usb3-port1: unable to enumerate USB device [ 559.718505][ T5893] vhci_hcd: vhci_device speed not set [ 559.878523][ C0] [ 559.881028][ C0] ============================= [ 559.885908][ C0] [ BUG: Invalid wait context ] [ 559.888179][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 559.890805][ C0] 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 Not tainted [ 559.890821][ C0] ----------------------------- [ 559.909965][ C0] swapper/0/0 is trying to lock: [ 559.915031][ C0] ffffc9001b1aa410 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x1fb/0x9a0 [ 559.924567][ C0] other info that might help us debug this: [ 559.930500][ C0] context-{2:2} [ 559.934068][ C0] 1 lock held by swapper/0/0: [ 559.938765][ C0] #0: ffffc9001b1aa958 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1c3/0x9a0 [ 559.948745][ C0] stack backtrace: [ 559.952609][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 559.952634][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 559.952648][ C0] Call Trace: [ 559.952660][ C0] [ 559.952667][ C0] dump_stack_lvl+0x189/0x250 [ 559.952695][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.952716][ C0] ? __pfx__printk+0x10/0x10 [ 559.952739][ C0] ? print_lock_name+0xde/0x100 [ 559.952772][ C0] __lock_acquire+0xbcf/0xd20 [ 559.952802][ C0] ? kvm_xen_set_evtchn_fast+0x1fb/0x9a0 [ 559.952822][ C0] lock_acquire+0x120/0x360 [ 559.952841][ C0] ? kvm_xen_set_evtchn_fast+0x1fb/0x9a0 [ 559.952857][ C0] ? __lock_acquire+0xaac/0xd20 [ 559.952888][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 559.952912][ C0] ? kvm_xen_set_evtchn_fast+0x1fb/0x9a0 [ 559.952933][ C0] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 559.952957][ C0] ? xa_load+0x1ea/0x210 [ 559.952980][ C0] kvm_xen_set_evtchn_fast+0x1fb/0x9a0 [ 559.952995][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 559.953013][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 559.953038][ C0] ? kvm_xen_set_evtchn_fast+0x1c3/0x9a0 [ 559.953061][ C0] xen_timer_callback+0x109/0x220 [ 559.953084][ C0] ? __pfx_xen_timer_callback+0x10/0x10 [ 559.953106][ C0] __hrtimer_run_queues+0x4dd/0xc60 [ 559.953137][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 559.953159][ C0] ? read_tsc+0x9/0x20 [ 559.953183][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 559.953225][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 559.953255][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 559.953275][ C0] [ 559.953280][ C0] [ 559.953286][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 559.953301][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 559.953324][ C0] Code: c3 d4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 8f 11 00 f3 0f 1e fa fb f4 98 d4 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 559.953343][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 559.953362][ C0] RAX: 7559ef32ccd6e500 RBX: ffffffff81977108 RCX: 7559ef32ccd6e500 [ 559.953377][ C0] RDX: 0000000000000001 RSI: ffffffff8d74e0ce RDI: ffffffff8bc1f3c0 [ 559.953391][ C0] RBP: ffffffff8dc07ec0 R08: ffff8880b8832b5b R09: 1ffff1101710656b [ 559.953407][ C0] R10: dffffc0000000000 R11: ffffed101710656c R12: ffffffff8f7f3370 [ 559.953419][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a48 [ 559.953431][ C0] ? do_idle+0x1e8/0x510 [ 559.953448][ C0] default_idle+0x13/0x20 [ 559.953472][ C0] default_idle_call+0x74/0xb0 [ 559.953501][ C0] do_idle+0x1e8/0x510 [ 559.953522][ C0] ? __pfx_do_idle+0x10/0x10 [ 559.953547][ C0] cpu_startup_entry+0x44/0x60 [ 559.953572][ C0] rest_init+0x2de/0x300 [ 559.953584][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 559.953602][ C0] start_kernel+0x470/0x4f0 [ 559.953630][ C0] x86_64_start_reservations+0x2a/0x30 [ 559.953652][ C0] x86_64_start_kernel+0x66/0x70 [ 559.953672][ C0] common_startup_64+0x13e/0x147 [ 559.953710][ C0] [ 559.953755][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.263977][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.370094][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.426828][ T5852] usbhid 4-1:0.0: can't add hid device: -71 [ 560.433002][ T5852] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 560.443708][ T5852] usb 4-1: USB disconnect, device number 68 [ 560.613273][ T5888] usb 1-1: unable to get BOS descriptor or descriptor too short [ 560.621666][ T5888] usb 1-1: no configurations [ 560.626494][ T5888] usb 1-1: can't read configurations, error -22 [ 560.928210][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 561.852493][ T9] usb 2-1: qt2_attach - failed to power on unit: -71 [ 561.861488][ T9] quatech2 2-1:128.51: probe with driver quatech2 failed with error -71 [ 561.876700][ T9] usb 2-1: USB disconnect, device number 54 [ 561.968166][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 563.008778][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 563.020373][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.026827][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.048190][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 565.088195][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 566.128185][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 567.168168][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 568.208188][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 569.248208][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available