last executing test programs: 15.002431297s ago: executing program 4 (id=1117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8000a0ffffffff}, 0x0) 14.913058849s ago: executing program 4 (id=1119): socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="200a07000000070000000000b5187e4d16002a0c041fd42ad6e05fe85ce7844a496800"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x40, 0x2dfd, 0x54a, 0x2400, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0xd, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x19, 0x4, &(0x7f0000000440)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000070000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000017000000bca30000000000002403000040feffff6b0af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000061140800000000001d430000000000007a0a00fe0000001f6114100000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4fffe2158dfb8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb3fa3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5973acc706db6b861b8c10a7cbd0b723906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff6194732827a58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f1000000006eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f3a6da2819d2f9e77c7c64affa555ec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f37382000000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23577949a50f2d0455cf799b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115553f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5f07918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa61071799e1acb3928143be1c1023a375e528285544d0064b91f00f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aa3f999ce700ffe794e27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd637c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a2271d96c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b0200780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca78fa04d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f00000000000000005bae7859839f856e7a397913eec7977f6231c5f11849b3deabc60c5ccf240d16924eb760a969813be02a229c674045b88915518a17b683268f10358e1c0b20cfc2bd105e5e1db7fed951b8faf126267bb38b8d356f63d3433d3dee643503a8ba4968adf6673f720c474ecf324d989235f1b52aacfe52e4519af87b7e1594728d6d6fff1248e72d5b1b1b692b2b732f0f2ac0714079fd7bf97bf2b5687d1db91daa5210d09ebe66d00ff4f35143be01585e629d408f2d00a0a290db76adc5f57e160b2c188bb1ecc4e7d2948788e4f9c1bcaf91dac53a2f525f7385d5d82728b5217908748f4c22b6d79700"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_control_io(r2, 0x0, &(0x7f0000001e40)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="001403000000b844a7cfa9c0495fa671593362af1620b643a06690495387f73dfc846788496b9a5c53c1ba2f3b4e3295c91930b164898b1b4962a2b6878d1cfd2add553c780884cab28864e3faf6235a7ea62d211cc7cfc4e4a836d3329b215e0efff7295930d50d4a5bf7b7f2928e74f1c7dcf5af04986e665674e3c579f17469892f0e99d01a740ece5bc58a30053726ff4656b6eb5f10e5311bb8d7a0c54d7308342506bc527ed38484e85336a05efe2327f8527395997725ac2727facc21f94dff011dcff243de629d0b12d242bb274fdae8159b03ef953dfe0ae97d010fbc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) 10.418035426s ago: executing program 4 (id=1135): r0 = socket$kcm(0x2, 0x1, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x4, 0x10, 0x1, 0xfffffffffffffb89}, &(0x7f0000000100)=0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000004340)=ANY=[@ANYBLOB="66696c746572000001000000000000000000000000000000000000000000000007000014a570c96590b4af"], &(0x7f0000004480)=0x2f) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000003c0)={r2, 0xbc, "836c86f1035ba93560fdfc6fe25a326e1301aada5e3678d912db3dd6a8de4b0b6741eb1a57770197f51115953c7b7615e4a2ef6a2328e22e60b4353ff344303c60a310481d23a1df7251e5d53f6bba6c5d761931ef407e952431a6ba4bbadd43c8a92fc13773a3fe5957700b6ca4cd8d0c897280e0b825d6bc742a142b906ab6a9e676beb9b5877f6765b510dd1ac0739e8f2688289797ea6761cb7a418e38693efabcd7d820dfea7a6ace14e42c961d6ff2588dad22a0523cabe706"}, &(0x7f0000000300)=0xc4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xa1a) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x8721, 0x8000, 0x1ee, 0xfffffff7, {{0x36, 0x4, 0x0, 0x2, 0xd8, 0x65, 0x0, 0x2, 0x29, 0x0, @private=0xa010102, @broadcast, {[@timestamp={0x44, 0xc, 0x7f, 0x0, 0x1, [0xcb, 0x8]}, @generic={0x83, 0x3, "a8"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x75, 0x3, 0x1, [{@local, 0x7}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x1}, {@broadcast, 0xa7}, {@local, 0x1}, {@private=0xa010102, 0xfffffff7}]}, @lsrr={0x83, 0x1f, 0x62, [@broadcast, @broadcast, @loopback, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x27, 0xd5, [@loopback, @multicast1, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @empty, @private=0xa010100, @multicast1, @rand_addr=0x64010101]}, @timestamp={0x44, 0x10, 0x7, 0x0, 0xb, [0x5, 0x6, 0xffffffe1]}, @timestamp_addr={0x44, 0x24, 0x5b, 0x1, 0xc, [{@rand_addr=0x64010100}, {@multicast2, 0x80}, {@multicast1}, {@multicast1, 0xc}]}]}}}}}) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000580)={@broadcast, @remote, r6}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000001900), 0x802, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4858, &(0x7f00000007c0)={0x0, 0xc4bd, 0x8000, 0x3, 0x160}, &(0x7f00000005c0), &(0x7f0000000840)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x40, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f0000000f00)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f00000004c0)="4e47e592566bb132be2a9509930cc472545200755aeb04ee3828732c6e1d34406748f7051b775f899d045a005e7d1f93e4fc4c040d8f51e7ea8bb3a9496ba1a9d76d6b459c", 0x45}]}, 0x8010) 9.409891725s ago: executing program 2 (id=1137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 9.248364771s ago: executing program 2 (id=1138): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x84) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x4e22, 0x0, 0xa}, {0x0, 0x400403, 0x0, 0x0, 0x0, 0x400000000002, 0x0, 0x9}, {0x800, 0x0, 0x0, 0x10000000000}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d0, 0x2b}, 0x2, @in=@multicast1, 0x3500, 0x1, 0x2, 0x0, 0x1, 0x9}}, 0xe8) 9.044618663s ago: executing program 4 (id=1139): socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x24}, 0x9, 0x1, 0xff, 0x2, 0x9, 0x80}, 0xfffffffffffffda3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x40, 0x2dfd, 0x54a, 0x2400, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0xd, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x19, 0x4, &(0x7f0000000440)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000009c3cc1446f73cb0b00008db8a2169bd6d72ab73c676389e7a520b79d99d90a494769c97077ee8632929ee265a40a03efa861ec575493a9a29ec3c2a1040975615e93d6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 8.903107659s ago: executing program 2 (id=1140): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) dup(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 8.021648927s ago: executing program 0 (id=1147): creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x2, 0x0, {0x0, 0x4000000, 0x0, 0x100, 0x0, 0x0, 0x8000000, 0x8000, 0x200, 0x8000, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) write$tcp_congestion(r3, 0x0, 0x0) dup2(r3, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x4008031, 0xffffffffffffffff, 0x1000) 7.188370954s ago: executing program 3 (id=1149): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}]]}, 0x24}}, 0x0) 7.003482352s ago: executing program 0 (id=1151): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x400, 0x3, 0x7e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r1}, 0x18) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) sendmsg$kcm(r8, &(0x7f0000000380)={&(0x7f0000000200)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000580)="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", 0x1000}], 0x1}, 0x4008000) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r9, 0x4018aee2, &(0x7f0000000400)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f00000003c0)={0x8, 0x5}}) 6.450472958s ago: executing program 2 (id=1153): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000087c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005edba97116e223fb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r1, 0x0, 0x0) 6.242116906s ago: executing program 3 (id=1154): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x4}, 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x111, 0x9}}, 0x20) r3 = dup(r2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={r5}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x69) close(0xffffffffffffffff) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4804) sendfile(r3, r3, 0x0, 0xffffffff) 5.262875464s ago: executing program 4 (id=1155): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1822000000000000b32000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x13bb711e) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'wlan0\x00', 0x400}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c000240000000000000ffff0b00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0x0, 0x88, 0x0, &(0x7f00000005c0)=""/136, 0x80, 0x0, 0xdd, 0x54, &(0x7f0000000780)="002080e6e9c40351bb4181ad4ced9a291f4473b05242b339406975e25229a82b0baa7b30a9616257bb6734a62937a9dc0405a995018aacf9080fed4d5f567e7cdd512c34ecb04c5e25f95f813f8a38f5874c806b8628de3a031e19dd02bd4ee68fcc3980143988b5c0f7033c8471ef449f0c09d0a113e4da62b316cc16211df0bd240fa2ac48ec67a5b94f8ccd5b36e891f33807819bd732f5d2097c79418ea7e105e90dcd4d34ac1eb477debacff50be612e25d5c43a779ef311f2673c85621eb46cf09743aa7b5694f03e2a37f6890d6d1e959b6c02ca7e3eb5b2b16", &(0x7f0000000680)="1e59f28bcb06755e6f57d93a920e0cc986d15589a4e353b81c3e3f97bca85a3c6ca6daecfc8b6ef87389c94ae178dfa518305f07154b0c1834d1230394b50ec710cc7d42ef0e30e3e5ae839304cd804818cb154f", 0x7, 0x0, 0x1}, 0x50) r5 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r5, 0x20, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}}, 0x50000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.028590351s ago: executing program 2 (id=1156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xb0000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) open(0x0, 0x145142, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') lseek(r6, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 4.597222423s ago: executing program 1 (id=1157): r0 = socket(0x1e, 0x5, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setrlimit(0x3, &(0x7f0000000100)={0x5}) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) recvmmsg(r0, &(0x7f0000001d80), 0x0, 0x40002002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b400000000000000891106000000000016000000000000009500ed30c3ab0000dd68a6649634db1a1122ed407bc0d8d14c13e3334b697338a4cb49c0db31970bef0ed4cc787a311dac000000004304b276ffadb0"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.937208745s ago: executing program 3 (id=1158): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0), 0x4) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 3.659515242s ago: executing program 2 (id=1159): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0xc, @string={0xc, 0x3, "063efe32358daf52ebbc"}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8ce}}, 0x0, 0x0, 0x0}, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x62800) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r6, 0x0) write$UHID_INPUT(r5, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r7, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1}) 3.607007093s ago: executing program 4 (id=1160): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0xc, @string={0xc, 0x3, "063efe32358daf52ebbc"}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8ce}}, 0x0, 0x0, 0x0}, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x62800) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r6, 0x0) write$UHID_INPUT(r5, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r7, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1}) 3.490940474s ago: executing program 0 (id=1161): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005", @ANYBLOB="ebffffffffffffff280012800b"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.12848161s ago: executing program 0 (id=1162): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504000000000000", @ANYBLOB="ebffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.126360832s ago: executing program 1 (id=1163): open(0x0, 0x54400, 0x124) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001440)={'ipvlan0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7}}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r2, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0x4c08, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f00000001c0)={0x2, 'veth1\x00', {0x20000}, 0x7}) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c00fa0d16000100000000b9000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000200200100"/20], 0x2c}}, 0x0) accept4(r9, 0x0, 0x0, 0x0) r11 = accept$alg(r9, 0x0, 0x0) r12 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r12, 0x1, 0x0, &(0x7f00000000c0)='ceph\x00', 0x0) recvmmsg(r11, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) 2.948949229s ago: executing program 0 (id=1164): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) ptrace$pokeuser(0x6, r3, 0x2, 0x8001) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sed\x00', 0x0, 0x60000000, 0xc}, {@empty, 0x4e21, 0x12002, 0xf, 0xe1b2, 0x10001}}, 0x44) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000000)=0x1) ppoll(&(0x7f0000000180)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x50, 0x1, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x13, 0x9, 0x3}}}}}]}}]}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(r8, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x273) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a45323, &(0x7f00000001c0)={{0x8, 0xc}, 'port0\x00', 0x47, 0x1, 0x80, 0xf3, 0x4, 0x6, 0x7, 0x0, 0x4, 0x5}) preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 2.932880951s ago: executing program 3 (id=1165): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x4}, 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x111, 0x9}}, 0x20) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup(r3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={r6}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r8, &(0x7f0000000040)=ANY=[], 0x69) close(r8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000), &(0x7f00000001c0)=0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4804) sendfile(r4, r4, 0x0, 0xffffffff) 2.893185094s ago: executing program 1 (id=1166): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000087c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005edba97116e223fb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r2, 0x0, 0x0) 1.980715142s ago: executing program 1 (id=1167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 1.234858465s ago: executing program 3 (id=1168): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000fddbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="14002d800a00000001010101011f882a0348"], 0x30}}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x200000000000000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000580)={@broadcast, @broadcast, 0x0}, &(0x7f00000005c0)=0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB='\b\x00\x00', @ANYRES32=r6, @ANYBLOB="08002abd7000fcdbdf250200000040000180140002006e723000000000000000000000000000140002006d6163766c616e3000000000000000001400020076657468315f6d6163767461700000000c00018008000300030000006800018008000100", @ANYRES32=0x0, @ANYBLOB="14000200000000000000000000000000000000001400", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=r0, @ANYRESOCT=r2, @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYRES64, @ANYRES32=r9, @ANYRESOCT=r3], 0x1b0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="555b14a8098ce3641e13682055381a159f176292381d65097c7f74ee583a8691c98fbcfaedda6e98e24be2e8615530b42fcca08a38826ff478814af0bfaca5f17286105701dd624bf3ae573dc90c97a9e0f304fd66601e017a529fd0741f2f9a53e3c05915a838ef7d6b08354ee76d763bd933bd5ad3", 0x76}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000c32000/0x3000)=nil) syz_init_net_socket$x25(0x9, 0x5, 0x0) 1.09108083s ago: executing program 1 (id=1169): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000300)="39fe60d36aef4f7a7a1c3d0f164abb9c4c500e9ab5ffbfe723972c570d9958af91ea8f87556224edb90e2c80e2eee9d06b2debe5a51ebfa42f5599ca7dfdfde632bbfb3ed78be7a7467522193b8d8900a4ab81d4", 0x54}, {&(0x7f00000004c0)="bd91b3c39406088f409066a5d963af690d41f265188745cb97c2d39d8e435b084d215c8a5ffb0d56", 0x28}, {&(0x7f00000005c0)="b60a", 0x2}], 0x4}, 0x4000000) 880.707302ms ago: executing program 1 (id=1170): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1822000000000000b32000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x13bb711e) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'wlan0\x00', 0x400}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c000240000000000000ffff0b00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0x0, 0x88, 0x0, &(0x7f00000005c0)=""/136, 0x80, 0x0, 0xdd, 0x54, &(0x7f0000000780)="002080e6e9c40351bb4181ad4ced9a291f4473b05242b339406975e25229a82b0baa7b30a9616257bb6734a62937a9dc0405a995018aacf9080fed4d5f567e7cdd512c34ecb04c5e25f95f813f8a38f5874c806b8628de3a031e19dd02bd4ee68fcc3980143988b5c0f7033c8471ef449f0c09d0a113e4da62b316cc16211df0bd240fa2ac48ec67a5b94f8ccd5b36e891f33807819bd732f5d2097c79418ea7e105e90dcd4d34ac1eb477debacff50be612e25d5c43a779ef311f2673c85621eb46cf09743aa7b5694f03e2a37f6890d6d1e959b6c02ca7e3eb5b2b16", &(0x7f0000000680)="1e59f28bcb06755e6f57d93a920e0cc986d15589a4e353b81c3e3f97bca85a3c6ca6daecfc8b6ef87389c94ae178dfa518305f07154b0c1834d1230394b50ec710cc7d42ef0e30e3e5ae839304cd804818cb154f", 0x7, 0x0, 0x1}, 0x50) r5 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r5, 0x20, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}}, 0x50000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.36529ms ago: executing program 0 (id=1171): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) kexec_load(0x3, 0x0, 0x0, 0x1) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048104}, 0x4000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r1, 0x5605) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xc0, 0x11cfa, 0x0, 0x8000008, 0x2, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x3, 0x6, 0x6, 0xff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES32=r0, @ANYRES16=r3, @ANYRESOCT=r5, @ANYRESHEX=r1, @ANYRESDEC=0x0], 0x18}}, 0x8004) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x40) 0s ago: executing program 3 (id=1172): syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @random="7dedf1b4b3d8", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e80400", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @empty}}}}}}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x75fa, 0xe475, 0x0, 0x0, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$UHID_DESTROY(r0, &(0x7f00000001c0), 0x4) ioctl$HIDIOCSFEATURE(r7, 0xc0404806, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, 0x0, 0x240) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b01"], 0x0) kernel console output (not intermixed with test programs): 8354][ T5864] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 261.246413][ T5863] usb 4-1: USB disconnect, device number 33 [ 261.674722][ T1205] usb 5-1: USB disconnect, device number 34 [ 261.682096][ T1205] cypress_m8 5-1:0.0: device disconnected [ 261.723703][ T5864] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 261.732504][ T5864] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.743526][ T5864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.767771][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0 [ 261.821234][ T5864] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.863729][ T5864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.902373][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0 [ 261.910134][ T5864] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.927075][ T5864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.950412][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0 [ 261.959546][ T5864] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.978863][ T5864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.033654][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0 [ 262.041979][ T5864] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.077158][ T5864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.102895][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0 [ 262.118146][ T5864] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.118960][ T5863] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 262.129887][ T8516] tipc: Enabling of bearer rejected, already enabled [ 262.185673][ T5864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.205720][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0 [ 262.221369][ T5864] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.230602][ T5864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.285818][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0 [ 262.542954][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.545977][ T9] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 262.561536][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.611257][ T5864] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.620235][ T5863] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 262.630344][ T1205] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 262.640636][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.661960][ T5863] usb 4-1: config 0 descriptor?? [ 262.680466][ T5864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.700672][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0 [ 262.712134][ T5864] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 262.721505][ T5864] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 262.740319][ T5864] usb 1-1: Product: syz [ 262.763614][ T5864] usb 1-1: Manufacturer: syz [ 262.773281][ T5864] usb 1-1: SerialNumber: syz [ 262.781351][ T5864] usb 1-1: config 0 descriptor?? [ 262.794469][ T5864] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 262.842933][ T1205] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.851132][ T1205] usb 2-1: config 0 has no interface number 0 [ 262.857288][ T1205] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 262.895310][ T1205] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 262.985761][ T1205] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 263.048484][ T1205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.068703][ T1205] usb 2-1: config 0 descriptor?? [ 263.078691][ T8516] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 263.099007][ T1205] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 263.171440][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 263.171699][ T5870] usb 1-1: USB disconnect, device number 33 [ 263.197403][ T5870] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 263.720035][ T8527] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 263.983885][ T5863] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0027/input/input29 [ 264.092662][ T5863] uclogic 0003:256C:006D.0027: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 264.481079][ T8535] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.499241][ T5863] usb 4-1: USB disconnect, device number 34 [ 264.959268][ T8541] libceph: resolve 'c' (ret=-3): failed [ 265.056253][ T8542] misc userio: The device must be registered before sending interrupts [ 265.488609][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 265.634068][ T1205] usb 2-1: USB disconnect, device number 30 [ 266.135621][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 266.161648][ T9] usb 3-1: can't read configurations, error -71 [ 266.500521][ T5863] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 266.612202][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'. [ 267.130457][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 267.180390][ T5863] usb 5-1: Using ep0 maxpacket: 16 [ 267.187070][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.198391][ T5863] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 267.219772][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.319368][ T30] audit: type=1326 audit(1746200611.586:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.1.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b7f8e969 code=0x7fc00000 [ 267.416438][ T5863] usb 5-1: config 0 descriptor?? [ 267.650012][ T8573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.692'. [ 267.695585][ T8549] netlink: 'syz.4.685': attribute type 16 has an invalid length. [ 267.703487][ T8549] netlink: 'syz.4.685': attribute type 17 has an invalid length. [ 267.834598][ T8549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.842520][ T8549] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.854342][ T8549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.330399][ T1205] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 268.345374][ T5863] usbhid 5-1:0.0: can't add hid device: -71 [ 268.359285][ T5863] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 268.387049][ T5863] usb 5-1: USB disconnect, device number 35 [ 268.496352][ T1205] usb 4-1: Using ep0 maxpacket: 16 [ 268.501294][ T24] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 268.515036][ T1205] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 268.534907][ T1205] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 268.550414][ T1205] usb 4-1: Product: syz [ 268.560452][ T1205] usb 4-1: Manufacturer: syz [ 268.570361][ T1205] usb 4-1: SerialNumber: syz [ 268.578026][ T1205] usb 4-1: config 0 descriptor?? [ 268.635430][ T24] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 268.704078][ T30] audit: type=1400 audit(1746200612.976:338): avc: denied { create } for pid=8588 comm="syz.0.697" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 268.747288][ T8587] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 268.806007][ T30] audit: type=1400 audit(1746200613.066:339): avc: denied { search } for pid=5166 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.901644][ T1205] usb 4-1: USB disconnect, device number 35 [ 269.143614][ T8599] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 269.420442][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 269.530460][ T5870] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 269.558177][ T30] audit: type=1400 audit(1746200613.816:340): avc: denied { unlink } for pid=5815 comm="syz-executor" name="file0" dev="tmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 269.715474][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 269.752194][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 270.157878][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 270.167372][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.175735][ T24] usb 3-1: Product: syz [ 270.180130][ T24] usb 3-1: Manufacturer: syz [ 270.184922][ T24] usb 3-1: SerialNumber: syz [ 270.198411][ T24] usb 3-1: config 0 descriptor?? [ 270.255275][ T5870] usb 5-1: unable to get BOS descriptor or descriptor too short [ 270.266648][ T5870] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 270.275571][ T5870] usb 5-1: can't read configurations, error -71 [ 270.393574][ T1205] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 270.552077][ T1205] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.597812][ T1205] usb 1-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 270.619347][ T1205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.714243][ T1205] usb 1-1: Product: syz [ 271.284833][ T1205] usb 1-1: Manufacturer: syz [ 271.297055][ T1205] usb 1-1: SerialNumber: syz [ 271.349008][ T1205] usb 1-1: config 0 descriptor?? [ 271.370092][ T1205] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 271.502773][ T1205] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 271.509140][ T1205] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 271.673166][ T1205] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 271.686862][ T24] usb 3-1: USB disconnect, device number 31 [ 271.689756][ T1205] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 271.845717][ T5805] udevd[5805]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.171974][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 272.196863][ T5870] kernel read not supported for file /dsp (pid: 5870 comm: kworker/1:4) [ 272.330348][ T1205] usb 1-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 272.343206][ T1205] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 272.357792][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 272.371862][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.400393][ T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 272.429023][ T1205] usb 1-1: USB disconnect, device number 34 [ 272.437540][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.457357][ T24] usb 3-1: config 0 descriptor?? [ 272.751612][ T8626] netlink: 'syz.2.708': attribute type 16 has an invalid length. [ 272.781306][ T8626] netlink: 'syz.2.708': attribute type 17 has an invalid length. [ 272.821191][ T8626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.855833][ T8626] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.889641][ T8641] libceph: resolve 'c' (ret=-3): failed [ 272.907481][ T8641] misc userio: The device must be registered before sending interrupts [ 273.255859][ T8626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.276169][ T8642] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 273.550800][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 273.556813][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 273.567191][ T24] usb 3-1: USB disconnect, device number 32 [ 275.509949][ T8669] tipc: Enabling of bearer rejected, already enabled [ 276.050396][ T9] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 276.242070][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 276.267191][ T9] usb 5-1: config 0 has no interface number 0 [ 276.300140][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 276.384418][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 276.440360][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 276.492552][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.531464][ T9] usb 5-1: config 0 descriptor?? [ 276.562618][ T8669] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 276.588513][ T9] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 276.723727][ T8683] binder: 8682:8683 ioctl 4018620d 0 returned -22 [ 276.915675][ T8688] libceph: resolve 'c' (ret=-3): failed [ 276.926283][ T8688] misc userio: The device must be registered before sending interrupts [ 276.935229][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 277.470563][ T9] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 277.665670][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.694577][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.710597][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 277.718251][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 277.740602][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 277.756849][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 277.784116][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 277.794588][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.804479][ T24] usb 3-1: Product: syz [ 277.808682][ T24] usb 3-1: Manufacturer: syz [ 277.814571][ T24] usb 3-1: SerialNumber: syz [ 277.841690][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 277.862250][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 277.869894][ T9] usb 2-1: can't read configurations, error -71 [ 280.121612][ T1205] usb 5-1: USB disconnect, device number 38 [ 280.490865][ T9] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 280.615273][ T24] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 280.628569][ T24] usb 3-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 280.723523][ T8715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.144452][ T24] usb 3-1: USB disconnect, device number 33 [ 281.166903][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.183900][ T9] usb 2-1: config 0 has no interface number 0 [ 281.200325][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 281.210438][ T5805] udevd[5805]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.227314][ T5870] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 281.258669][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 281.385048][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 281.400517][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 281.400691][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.411206][ T5870] usb 1-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 281.426994][ T9] usb 2-1: config 0 descriptor?? [ 281.441979][ T8704] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 281.461972][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.477178][ T5870] usb 1-1: Product: syz [ 281.488821][ T9] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 281.501013][ T5870] usb 1-1: Manufacturer: syz [ 281.519918][ T5870] usb 1-1: SerialNumber: syz [ 281.527419][ T5870] usb 1-1: config 0 descriptor?? [ 281.536803][ T5870] cypress_m8 1-1:0.0: HID->COM RS232 Adapter converter detected [ 281.555804][ T5870] cyphidcom ttyUSB0: required endpoint is missing [ 281.715463][ T9] usb 2-1: USB disconnect, device number 32 [ 281.840861][ T8729] syzkaller1: entered promiscuous mode [ 281.846398][ T8729] syzkaller1: entered allmulticast mode [ 281.930051][ T8730] libceph: resolve 'c' (ret=-3): failed [ 281.938397][ T8730] misc userio: The device must be registered before sending interrupts [ 283.489487][ T5870] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 283.698473][ T9] usb 1-1: USB disconnect, device number 35 [ 284.140437][ T5870] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 284.164312][ T9] cypress_m8 1-1:0.0: device disconnected [ 284.170238][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.179289][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.456098][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 284.477074][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.488374][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.500608][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 284.510989][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.529289][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.581971][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 284.608645][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.618356][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.629764][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 284.637924][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.650477][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.663840][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 284.671348][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.683151][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.694305][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 284.711425][ T1205] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 284.719549][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.756753][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.788023][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 284.797555][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 284.806712][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 284.818524][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 284.829159][ T5870] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 284.840904][ T30] audit: type=1400 audit(1746200629.106:341): avc: denied { write } for pid=5166 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.862559][ T5870] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 284.863021][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.870923][ T5870] usb 5-1: Product: syz [ 284.870939][ T5870] usb 5-1: Manufacturer: syz [ 284.870952][ T5870] usb 5-1: SerialNumber: syz [ 284.872457][ T30] audit: type=1400 audit(1746200629.106:342): avc: denied { remove_name } for pid=5166 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.907534][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.920222][ T5870] usb 5-1: config 0 descriptor?? [ 284.936849][ T30] audit: type=1400 audit(1746200629.106:343): avc: denied { add_name } for pid=5166 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.970920][ T5870] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 284.978419][ T1205] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 284.997185][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.012466][ T9] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 285.033503][ T1205] usb 3-1: config 0 descriptor?? [ 285.171625][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.179673][ T9] usb 4-1: config 0 has no interface number 0 [ 285.185969][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 285.200153][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 285.213828][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 285.222963][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.236502][ T9] usb 4-1: config 0 descriptor?? [ 285.242473][ T8768] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 285.256363][ T9] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 285.336411][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 285.336800][ T9] usb 5-1: USB disconnect, device number 39 [ 285.349437][ T8780] yurex 5-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 285.359553][ T9] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 285.461375][ T5864] usb 4-1: USB disconnect, device number 36 [ 285.468379][ T1205] pyra 0003:1E7D:2CF6.0029: unknown main item tag 0x0 [ 285.493244][ T1205] pyra 0003:1E7D:2CF6.0029: item fetching failed at offset 6/7 [ 285.502589][ T1205] pyra 0003:1E7D:2CF6.0029: parse failed [ 285.508316][ T1205] pyra 0003:1E7D:2CF6.0029: probe with driver pyra failed with error -22 [ 287.410413][ T5864] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 287.418092][ T9] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 287.495576][ T5870] usb 3-1: USB disconnect, device number 34 [ 287.803480][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.860323][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.893194][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.905692][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 287.922896][ T5864] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 287.932105][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 287.950548][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.958558][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.086652][ T5864] usb 4-1: config 0 descriptor?? [ 288.135190][ T9] usb 1-1: config 0 descriptor?? [ 288.653512][ T5864] pyra 0003:1E7D:2CF6.002A: unknown main item tag 0x0 [ 288.686552][ T5864] pyra 0003:1E7D:2CF6.002A: item fetching failed at offset 6/7 [ 288.707884][ T5864] pyra 0003:1E7D:2CF6.002A: parse failed [ 288.719412][ T5864] pyra 0003:1E7D:2CF6.002A: probe with driver pyra failed with error -22 [ 289.270528][ T5870] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 289.302587][ T8833] syzkaller1: entered promiscuous mode [ 289.308242][ T8833] syzkaller1: entered allmulticast mode [ 289.422012][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.435650][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.446166][ T5870] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 289.455552][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.468082][ T5870] usb 2-1: config 0 descriptor?? [ 290.258712][ T5864] usb 4-1: USB disconnect, device number 37 [ 290.316369][ T9] usb 1-1: USB disconnect, device number 36 [ 290.335055][ T8842] binfmt_misc: register: failed to install interpreter file ./file0 [ 291.240431][ T5864] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 291.247498][ T5870] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.002B/input/input32 [ 291.521777][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.553374][ T5870] uclogic 0003:256C:006D.002B: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 291.624240][ T8860] libceph: resolve 'c' (ret=-3): failed [ 291.749586][ T8862] misc userio: The device must be registered before sending interrupts [ 291.959181][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.969837][ T5864] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 291.978905][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.022957][ T8827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.103102][ T5864] usb 5-1: config 0 descriptor?? [ 292.185855][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 292.222846][ T5870] usb 2-1: USB disconnect, device number 33 [ 292.612679][ T5864] pyra 0003:1E7D:2CF6.002C: unknown main item tag 0x0 [ 292.718176][ T5864] pyra 0003:1E7D:2CF6.002C: item fetching failed at offset 6/7 [ 292.738565][ T5864] pyra 0003:1E7D:2CF6.002C: parse failed [ 292.754054][ T5864] pyra 0003:1E7D:2CF6.002C: probe with driver pyra failed with error -22 [ 292.940633][ T5870] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 293.147776][ T8884] binder: 8883:8884 ioctl 4018620d 0 returned -22 [ 293.340714][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 293.361870][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.372847][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.382618][ T5870] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 293.394275][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.407431][ T5870] usb 2-1: config 0 descriptor?? [ 293.480457][ T5864] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 293.490323][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 293.496660][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.510157][ T24] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 293.519498][ T24] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 293.527790][ T24] usb 3-1: Product: syz [ 293.531998][ T24] usb 3-1: Manufacturer: syz [ 293.536606][ T24] usb 3-1: SerialNumber: syz [ 293.543576][ T24] usb 3-1: config 0 descriptor?? [ 293.549900][ T24] hub 3-1:0.0: bad descriptor, ignoring hub [ 293.555853][ T24] hub 3-1:0.0: probe with driver hub failed with error -5 [ 293.560360][ T1205] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 293.654960][ T8885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.663671][ T8885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.733463][ T1205] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.745542][ T1205] usb 4-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 293.757296][ T1205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.765981][ T1205] usb 4-1: Product: syz [ 293.770196][ T1205] usb 4-1: Manufacturer: syz [ 293.776487][ T1205] usb 4-1: SerialNumber: syz [ 293.786023][ T1205] usb 4-1: config 0 descriptor?? [ 293.796195][ T1205] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 293.817495][ T5870] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 293.825501][ T5870] pyra 0003:1E7D:2CF6.002D: item fetching failed at offset 6/7 [ 293.834276][ T5870] pyra 0003:1E7D:2CF6.002D: parse failed [ 293.839997][ T5870] pyra 0003:1E7D:2CF6.002D: probe with driver pyra failed with error -22 [ 293.840518][ T1205] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 293.855547][ T1205] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 293.970386][ T1205] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 293.976875][ T1205] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 294.040478][ T1205] usb 4-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 294.093055][ T1205] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 294.139069][ T24] usb 3-1: reset high-speed USB device number 35 using dummy_hcd [ 294.425489][ T1205] usb 5-1: USB disconnect, device number 40 [ 294.511936][ T24] kernel read not supported for file /dsp (pid: 24 comm: kworker/1:0) [ 294.556026][ T24] usb 4-1: USB disconnect, device number 38 [ 294.640702][ T9] usb 3-1: USB disconnect, device number 35 [ 294.830379][ T1205] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 295.000428][ T1205] usb 5-1: Using ep0 maxpacket: 16 [ 295.009537][ T1205] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 295.018924][ T1205] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 295.027212][ T1205] usb 5-1: Product: syz [ 295.031565][ T1205] usb 5-1: Manufacturer: syz [ 295.036177][ T1205] usb 5-1: SerialNumber: syz [ 295.043421][ T1205] usb 5-1: config 0 descriptor?? [ 295.281322][ T1205] usb 5-1: USB disconnect, device number 41 [ 295.720354][ T24] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 295.769221][ T1205] usb 2-1: USB disconnect, device number 34 [ 295.909728][ T8908] netlink: 'syz.1.790': attribute type 1 has an invalid length. [ 295.924540][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 295.933386][ T24] usb 4-1: config 0 has no interface number 0 [ 295.948217][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 296.023429][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 296.085984][ T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 296.108380][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.158605][ T24] usb 4-1: config 0 descriptor?? [ 296.178502][ T5864] usb 1-1: unable to get BOS descriptor or descriptor too short [ 296.199205][ T8901] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 296.231720][ T5864] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 296.253183][ T5864] usb 1-1: can't read configurations, error -71 [ 296.273962][ T8913] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.792'. [ 296.345501][ T24] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 296.760373][ T5864] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 296.835373][ T8922] tipc: Enabling of bearer rejected, failed to enable media [ 296.912795][ T5864] usb 1-1: Using ep0 maxpacket: 16 [ 296.919350][ T5864] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 296.948931][ T5864] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 296.979010][ T5864] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 297.019006][ T5864] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 297.028397][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.045338][ T5864] usb 1-1: Product: syz [ 297.059688][ T5864] usb 1-1: Manufacturer: syz [ 297.073326][ T5864] usb 1-1: SerialNumber: syz [ 297.634937][ T8934] libceph: resolve 'c' (ret=-3): failed [ 297.644258][ T8934] misc userio: The device must be registered before sending interrupts [ 298.951704][ T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 299.210341][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 299.314703][ T5870] usb 4-1: USB disconnect, device number 39 [ 299.340689][ T24] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 299.454019][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.535264][ T24] usb 5-1: Product: syz [ 299.614432][ T24] usb 5-1: Manufacturer: syz [ 299.662563][ T24] usb 5-1: SerialNumber: syz [ 300.180992][ T24] usb 5-1: config 0 descriptor?? [ 300.211311][ T24] as10x_usb: device has been detected [ 300.237329][ T24] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 300.350758][ T24] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 300.410583][ T8939] random: crng reseeded on system resumption [ 300.419133][ T30] audit: type=1400 audit(1746200644.676:344): avc: denied { write } for pid=8937 comm="syz.4.801" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 300.450933][ T5864] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 300.479254][ T5864] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 300.503120][ T30] audit: type=1400 audit(1746200644.686:345): avc: denied { open } for pid=8937 comm="syz.4.801" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 300.529920][ T24] as10x_usb: error during firmware upload part1 [ 300.543216][ T24] Registered device Sky IT Digital Key (green led) [ 300.552780][ T30] audit: type=1400 audit(1746200644.796:346): avc: denied { firmware_load } for pid=24 comm="kworker/1:0" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=271 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 300.559012][ T5864] usb 1-1: USB disconnect, device number 38 [ 300.613933][ T8949] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.803'. [ 300.809624][ T5870] usb 5-1: USB disconnect, device number 42 [ 300.837145][ T8955] tipc: Enabled bearer , priority 0 [ 300.848029][ T5870] Unregistered device Sky IT Digital Key (green led) [ 300.849233][ T5870] as10x_usb: device has been disconnected [ 300.851918][ T8955] syzkaller0: entered promiscuous mode [ 300.869885][ T8955] syzkaller0: entered allmulticast mode [ 300.886015][ T8955] tipc: Resetting bearer [ 300.894859][ T8954] tipc: Resetting bearer [ 300.906536][ T8954] tipc: Disabling bearer [ 300.991503][ T24] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 301.161734][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 301.255687][ T24] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 301.280191][ T8969] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 301.467072][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 301.490337][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 301.552087][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 301.594866][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 301.605184][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 301.613475][ T24] usb 2-1: Product: syz [ 301.617611][ T24] usb 2-1: Manufacturer: syz [ 301.629516][ T8973] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 301.633170][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 301.673061][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 301.720530][ T1205] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 301.820717][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 301.834218][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 301.913520][ T8977] libceph: resolve 'c' (ret=-3): failed [ 301.935393][ T8977] misc userio: The device must be registered before sending interrupts [ 302.479758][ T5864] usb 2-1: USB disconnect, device number 35 [ 302.604164][ T1205] usb 3-1: unable to get BOS descriptor or descriptor too short [ 302.629694][ T1205] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 302.667882][ T1205] usb 3-1: can't read configurations, error -71 [ 302.853457][ T8981] tipc: Enabling of bearer rejected, already enabled [ 303.132749][ T24] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 303.434503][ T8990] libceph: resolve 'c' (ret=-3): failed [ 303.819793][ T8991] syzkaller1: entered promiscuous mode [ 303.842311][ T8991] syzkaller1: entered allmulticast mode [ 303.869156][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 303.884048][ T24] usb 5-1: config 0 has no interface number 0 [ 303.932334][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 304.024979][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 304.036075][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 304.062303][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.185608][ T8995] libceph: resolve 'c' (ret=-3): failed [ 304.921303][ T24] usb 5-1: config 0 descriptor?? [ 304.936874][ T8981] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 304.969463][ T24] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 305.062412][ T9001] libceph: resolve 'c' (ret=-3): failed [ 306.856196][ T9015] netlink: 32 bytes leftover after parsing attributes in process `syz.2.820'. [ 307.125893][ T9023] tipc: Enabled bearer , priority 0 [ 307.147722][ T9023] syzkaller0: entered promiscuous mode [ 307.188538][ T9025] libceph: resolve 'c' (ret=-3): failed [ 307.201196][ T9025] misc userio: The device must be registered before sending interrupts [ 307.719102][ T9023] syzkaller0: entered allmulticast mode [ 307.844689][ T9018] netlink: 52 bytes leftover after parsing attributes in process `syz.2.820'. [ 307.859922][ T5870] usb 5-1: USB disconnect, device number 43 [ 307.893047][ T9022] tipc: Resetting bearer [ 307.998437][ T9022] tipc: Disabling bearer [ 308.273920][ T5870] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 308.471190][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 308.509675][ T5870] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 308.534811][ T5870] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 308.618008][ T5870] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 308.650255][ T5870] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 308.665509][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.690360][ T5870] usb 5-1: Product: syz [ 308.694616][ T5870] usb 5-1: Manufacturer: syz [ 308.706206][ T5870] usb 5-1: SerialNumber: syz [ 308.715665][ T30] audit: type=1400 audit(1746200652.986:347): avc: denied { setattr } for pid=9044 comm="syz.2.830" name="tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 308.850329][ T1205] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 308.996331][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 309.205965][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 310.520407][ T24] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 310.536981][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 310.546248][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 310.557673][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 310.604646][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 310.613761][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 310.622050][ T24] usb 3-1: Product: syz [ 310.626221][ T24] usb 3-1: Manufacturer: syz [ 310.657519][ T1205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.675755][ T5870] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 310.685772][ T5870] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 310.704417][ T5870] usb 5-1: USB disconnect, device number 44 [ 310.747488][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 310.766684][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 310.774661][ T1205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.779272][ T5805] udevd[5805]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.806894][ T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 310.814421][ T24] cdc_wdm 3-1:1.0: Unknown control protocol [ 310.840389][ T1205] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 310.849544][ T1205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.863521][ T1205] usb 1-1: config 0 descriptor?? [ 311.004997][ T5870] usb 3-1: USB disconnect, device number 38 [ 311.240004][ T9053] netlink: 32 bytes leftover after parsing attributes in process `syz.1.832'. [ 311.254621][ T9053] netlink: 32 bytes leftover after parsing attributes in process `syz.1.832'. [ 311.318693][ T9057] netlink: 52 bytes leftover after parsing attributes in process `syz.1.832'. [ 312.159976][ T1205] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.002E/input/input35 [ 312.357784][ T9040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.427639][ T9068] libceph: resolve 'c' (ret=-3): failed [ 312.448454][ T9068] misc userio: The device must be registered before sending interrupts [ 312.786580][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 312.825400][ T1205] uclogic 0003:256C:006D.002E: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 312.864689][ T1205] usb 1-1: USB disconnect, device number 39 [ 312.879859][ T9071] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 312.970317][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 312.990044][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 313.011299][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 313.042143][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.169039][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 313.189271][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.197550][ T9] usb 4-1: Product: syz [ 313.202122][ T9] usb 4-1: Manufacturer: syz [ 313.206717][ T9] usb 4-1: SerialNumber: syz [ 313.218748][ T9075] syz_tun: entered allmulticast mode [ 313.349276][ T9073] syz_tun: left allmulticast mode [ 313.756572][ T9070] netlink: 60 bytes leftover after parsing attributes in process `syz.4.836'. [ 313.782182][ T1205] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 313.986289][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.050834][ T5870] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 315.068353][ T9091] netlink: 'syz.1.843': attribute type 1 has an invalid length. [ 315.244014][ T5870] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 315.293635][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.337434][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.376725][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.386561][ T1205] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 315.395619][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.405075][ T1205] usb 3-1: config 0 descriptor?? [ 315.562860][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 315.618549][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.637439][ T9] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 315.650439][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.662056][ T9] usb 4-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 315.693380][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 315.708948][ T9094] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.709166][ T30] audit: type=1400 audit(1746200659.976:348): avc: denied { write } for pid=9093 comm="syz.3.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 315.716182][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.747674][ T9] usb 4-1: USB disconnect, device number 40 [ 315.795067][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.817881][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 315.819414][ T1205] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 315.835086][ T1205] pyra 0003:1E7D:2CF6.002F: item fetching failed at offset 6/7 [ 315.844595][ T6232] udevd[6232]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.863785][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.883121][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.909777][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 315.923396][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.938502][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.950037][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 315.959908][ T9101] tipc: Enabling of bearer rejected, already enabled [ 315.969008][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.984244][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.006981][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 316.025044][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.037140][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.059021][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 316.074999][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.089149][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.127497][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 316.145063][ T1205] pyra 0003:1E7D:2CF6.002F: parse failed [ 316.151908][ T1205] pyra 0003:1E7D:2CF6.002F: probe with driver pyra failed with error -22 [ 316.184764][ T5870] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 316.215608][ T5870] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 316.233679][ T24] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 316.253775][ T5870] usb 5-1: Product: syz [ 316.258696][ T5870] usb 5-1: Manufacturer: syz [ 316.263562][ T5870] usb 5-1: SerialNumber: syz [ 316.273982][ T5870] usb 5-1: config 0 descriptor?? [ 316.283849][ T5870] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 316.370324][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 316.422039][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.435657][ T24] usb 2-1: config 0 has no interface number 0 [ 316.441954][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 316.464671][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 316.476580][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 316.540122][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 316.546749][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.590919][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.592280][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 316.616362][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 316.630015][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 316.630315][ T1205] usb 5-1: USB disconnect, device number 45 [ 316.653009][ T1205] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 316.659367][ T9] usb 4-1: Product: syz [ 316.671419][ T9] usb 4-1: Manufacturer: syz [ 316.684343][ T9] usb 4-1: SerialNumber: syz [ 316.696685][ T9] usb 4-1: config 0 descriptor?? [ 316.713850][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.720246][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.748903][ T24] usb 2-1: config 0 descriptor?? [ 316.763083][ T9101] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 316.774561][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 316.782126][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 316.801219][ T24] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 316.872857][ T9108] libceph: resolve 'c' (ret=-3): failed [ 316.891666][ T9108] misc userio: The device must be registered before sending interrupts [ 317.383684][ T5864] usb 3-1: USB disconnect, device number 39 [ 317.772112][ T9114] syz_tun: entered allmulticast mode [ 317.804636][ T9110] syz_tun: left allmulticast mode [ 317.811272][ T1205] usb 4-1: USB disconnect, device number 41 [ 318.500408][ T1205] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 318.620321][ T5864] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 318.721321][ T1205] usb 4-1: Using ep0 maxpacket: 32 [ 318.729773][ T1205] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.750175][ T1205] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 318.759457][ T1205] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 318.776971][ T1205] usb 4-1: Product: syz [ 318.783739][ T1205] usb 4-1: Manufacturer: syz [ 318.788997][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.802259][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.812936][ T5864] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 318.825421][ T1205] usb 4-1: SerialNumber: syz [ 318.832526][ T9127] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 318.873251][ T1205] usb 4-1: config 0 descriptor?? [ 318.882532][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.912546][ T1205] hub 4-1:0.0: bad descriptor, ignoring hub [ 318.918483][ T1205] hub 4-1:0.0: probe with driver hub failed with error -5 [ 318.947222][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 318.957356][ T5864] usb 3-1: config 0 descriptor?? [ 319.015829][ T1205] usb 4-1: USB disconnect, device number 42 [ 319.114074][ T9] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 319.125842][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.136594][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.148118][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 319.156941][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.169772][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.179277][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 319.190839][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.203631][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.213042][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 319.223661][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.233985][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.245756][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 319.253887][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.266489][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.279664][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 319.291139][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.328634][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.337631][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 319.348256][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.358690][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.368437][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 319.378871][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.389446][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.407039][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 319.417421][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 319.426774][ T9] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 319.464745][ T9] usb 1-1: Product: syz [ 319.474061][ T9] usb 1-1: Manufacturer: syz [ 319.485888][ T9] usb 1-1: SerialNumber: syz [ 319.504356][ T9] usb 1-1: config 0 descriptor?? [ 319.528374][ T9] yurex 1-1:0.0: Could not find endpoints [ 319.577585][ T30] audit: type=1400 audit(1746200663.846:349): avc: denied { write } for pid=9132 comm="syz.4.854" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 319.606419][ T30] audit: type=1400 audit(1746200663.876:350): avc: denied { read write } for pid=9132 comm="syz.4.854" name="sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 319.632564][ T30] audit: type=1400 audit(1746200663.876:351): avc: denied { open } for pid=9132 comm="syz.4.854" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 319.706370][ T9] usb 2-1: USB disconnect, device number 36 [ 319.795331][ T1205] usb 1-1: USB disconnect, device number 40 [ 320.568973][ T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 320.799037][ T9142] misc userio: The device must be registered before sending interrupts [ 321.262384][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 321.273341][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 321.292216][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.295355][ T5864] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0030/input/input37 [ 321.302523][ T24] usb 5-1: Product: syz [ 321.317525][ T24] usb 5-1: Manufacturer: syz [ 321.324372][ T24] usb 5-1: SerialNumber: syz [ 321.359965][ T24] r8152-cfgselector 5-1: Unknown version 0x0000 [ 321.380174][ T24] r8152-cfgselector 5-1: config 0 descriptor?? [ 321.510825][ T5864] uclogic 0003:256C:006D.0030: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 321.535288][ T9120] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.606738][ T9156] libceph: resolve 'c' (ret=-3): failed [ 321.622097][ T9156] misc userio: The device must be registered before sending interrupts [ 322.034857][ T5870] usb 3-1: USB disconnect, device number 40 [ 322.169259][ T9154] netlink: 32 bytes leftover after parsing attributes in process `syz.1.860'. [ 322.249425][ T9159] netlink: 52 bytes leftover after parsing attributes in process `syz.1.860'. [ 322.638451][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 322.694546][ T5864] r8152-cfgselector 5-1: USB disconnect, device number 46 [ 322.883041][ T30] audit: type=1400 audit(1746200667.156:352): avc: denied { getopt } for pid=9173 comm="syz.2.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 323.050837][ T30] audit: type=1400 audit(1746200667.156:353): avc: denied { ioctl } for pid=9173 comm="syz.2.865" path="socket:[20765]" dev="sockfs" ino=20765 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 323.100349][ T5863] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 323.281959][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 323.310204][ T5863] usb 1-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 323.319518][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.331603][ T5863] usb 1-1: Product: syz [ 323.335777][ T5863] usb 1-1: Manufacturer: syz [ 323.370341][ T5863] usb 1-1: SerialNumber: syz [ 323.379326][ T5863] usb 1-1: config 0 descriptor?? [ 323.397461][ T5863] cypress_m8 1-1:0.0: HID->COM RS232 Adapter converter detected [ 323.434594][ T5863] cyphidcom ttyUSB0: required endpoint is missing [ 323.621588][ T1205] usb 1-1: USB disconnect, device number 41 [ 323.751309][ T1205] cypress_m8 1-1:0.0: device disconnected [ 324.540491][ T9192] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 324.830346][ T1205] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 324.987564][ T9201] tipc: Enabling of bearer rejected, already enabled [ 325.094140][ T1205] usb 5-1: unable to get BOS descriptor or descriptor too short [ 325.156486][ T1205] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 325.170338][ T1205] usb 5-1: can't read configurations, error -71 [ 325.284262][ T5870] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 325.500892][ T5870] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 325.619759][ T9203] netlink: 32 bytes leftover after parsing attributes in process `syz.2.872'. [ 325.667113][ T9203] netlink: 32 bytes leftover after parsing attributes in process `syz.2.872'. [ 325.826057][ T5863] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 326.424693][ T9225] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 326.590635][ T1205] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 326.690327][ T5864] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 326.763021][ T1205] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 326.775428][ T1205] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.788987][ T1205] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 326.806668][ T1205] usb 4-1: config 0 interface 0 has no altsetting 0 [ 326.816835][ T1205] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.827894][ T1205] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 326.840104][ T1205] usb 4-1: config 0 interface 0 has no altsetting 0 [ 326.860037][ T5864] usb 3-1: unable to get BOS descriptor or descriptor too short [ 326.927479][ T5864] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 326.935925][ T5864] usb 3-1: can't read configurations, error -71 [ 326.942880][ T1205] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.957679][ T1205] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 326.973213][ T1205] usb 4-1: config 0 interface 0 has no altsetting 0 [ 326.993030][ T1205] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.004325][ T1205] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.021607][ T1205] usb 4-1: config 0 interface 0 has no altsetting 0 [ 327.038066][ T1205] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.048916][ T1205] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.059920][ T1205] usb 4-1: config 0 interface 0 has no altsetting 0 [ 327.069012][ T1205] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.106144][ T1205] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.116470][ T1205] usb 4-1: config 0 interface 0 has no altsetting 0 [ 327.120348][ T5870] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 327.131659][ T1205] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.143653][ T1205] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.154500][ T1205] usb 4-1: config 0 interface 0 has no altsetting 0 [ 327.164126][ T1205] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.174746][ T1205] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.185794][ T1205] usb 4-1: config 0 interface 0 has no altsetting 0 [ 327.203971][ T1205] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 327.213056][ T1205] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 327.224621][ T1205] usb 4-1: Product: syz [ 327.228829][ T1205] usb 4-1: Manufacturer: syz [ 327.233843][ T1205] usb 4-1: SerialNumber: syz [ 327.281851][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.287696][ T1205] usb 4-1: config 0 descriptor?? [ 327.292949][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.292984][ T5870] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 327.344333][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.345143][ T1205] yurex 4-1:0.0: Could not find endpoints [ 327.466891][ T5870] usb 2-1: config 0 descriptor?? [ 327.585963][ T24] usb 4-1: USB disconnect, device number 43 [ 328.359641][ T5863] usb 1-1: unable to get BOS descriptor or descriptor too short [ 328.369039][ T5863] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 328.400926][ T5863] usb 1-1: can't read configurations, error -71 [ 328.515222][ T9237] tipc: Enabled bearer , priority 0 [ 328.546201][ T5870] uclogic 0003:256C:006D.0032: failed retrieving string descriptor #100: -71 [ 328.558464][ T5870] uclogic 0003:256C:006D.0032: failed retrieving pen parameters: -71 [ 328.568083][ T9237] tipc: Resetting bearer [ 328.588690][ T5870] uclogic 0003:256C:006D.0032: failed probing pen v1 parameters: -71 [ 328.620562][ T5870] uclogic 0003:256C:006D.0032: failed probing parameters: -71 [ 328.665051][ T5870] uclogic 0003:256C:006D.0032: probe with driver uclogic failed with error -71 [ 328.734935][ T9235] tipc: Disabling bearer [ 328.806046][ T5870] usb 2-1: USB disconnect, device number 37 [ 328.812583][ T9241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.882'. [ 328.824117][ T9238] netlink: 32 bytes leftover after parsing attributes in process `syz.3.882'. [ 329.215461][ T9256] fuse: Bad value for 'fd' [ 329.634553][ T9270] netlink: 32 bytes leftover after parsing attributes in process `syz.2.888'. [ 329.653102][ T9270] netlink: 32 bytes leftover after parsing attributes in process `syz.2.888'. [ 329.729239][ T9272] netlink: 52 bytes leftover after parsing attributes in process `syz.2.888'. [ 331.208143][ T9294] netlink: 'syz.4.894': attribute type 1 has an invalid length. [ 331.220422][ T5863] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 331.381798][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.396392][ T5863] usb 1-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 331.405753][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.416794][ T5863] usb 1-1: Product: syz [ 331.443642][ T5863] usb 1-1: Manufacturer: syz [ 331.448365][ T5863] usb 1-1: SerialNumber: syz [ 331.542425][ T5863] usb 1-1: config 0 descriptor?? [ 331.595463][ T5863] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 331.631764][ T5863] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 331.645539][ T5863] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 331.670515][ T5870] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 331.807087][ T5863] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 331.822822][ T5863] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 331.890527][ T5863] usb 1-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 332.297983][ T5870] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 332.324924][ T5863] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 332.340322][ T5870] usb 4-1: config 0 has no interface number 0 [ 332.346554][ T5870] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 332.362414][ T24] kernel read not supported for file /dsp (pid: 24 comm: kworker/1:0) [ 332.405797][ T5870] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 332.431639][ T5870] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 332.434693][ T5864] usb 1-1: USB disconnect, device number 44 [ 332.457103][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.501323][ T5870] usb 4-1: config 0 descriptor?? [ 332.508620][ T9301] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 332.705215][ T5870] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 332.739693][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.900'. [ 332.740674][ T5863] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 332.852397][ T9318] libceph: resolve 'c' (ret=-3): failed [ 332.887410][ T9318] misc userio: The device must be registered before sending interrupts [ 333.321807][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.597613][ T5863] usb 2-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 333.612279][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.665051][ T5863] usb 2-1: Product: syz [ 333.680684][ T5863] usb 2-1: Manufacturer: syz [ 333.705742][ T5863] usb 2-1: SerialNumber: syz [ 333.741236][ T5863] usb 2-1: config 0 descriptor?? [ 333.758522][ T9329] netlink: 32 bytes leftover after parsing attributes in process `syz.4.903'. [ 333.769918][ T9329] netlink: 32 bytes leftover after parsing attributes in process `syz.4.903'. [ 333.828519][ T5863] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 333.872173][ T5863] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 333.887628][ T5863] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 334.010517][ T5863] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 334.023638][ T5863] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 334.100348][ T5863] usb 2-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 334.116705][ T5863] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 334.590459][ T5864] kernel read not supported for file /dsp (pid: 5864 comm: kworker/0:4) [ 334.714374][ T5870] usb 2-1: USB disconnect, device number 38 [ 334.740350][ T5863] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 334.869779][ T5864] usb 4-1: USB disconnect, device number 44 [ 336.790088][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 337.044405][ T1205] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 338.033415][ T1205] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.054166][ T1205] usb 2-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 338.081866][ T1205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.100289][ T1205] usb 2-1: Product: syz [ 338.109236][ T1205] usb 2-1: Manufacturer: syz [ 338.120086][ T1205] usb 2-1: SerialNumber: syz [ 338.136901][ T1205] usb 2-1: config 0 descriptor?? [ 338.150882][ T1205] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 338.164342][ T5863] usb 3-1: unable to get BOS descriptor or descriptor too short [ 338.187917][ T5863] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 338.189196][ T9] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 338.198573][ T5863] usb 3-1: can't read configurations, error -71 [ 338.203702][ T1205] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 338.231704][ T1205] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 338.239101][ T9] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 338.331181][ T5864] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 338.348984][ T1205] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 338.374924][ T1205] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 338.443277][ T1205] usb 2-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 338.473001][ T1205] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 338.523751][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.539583][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.565220][ T5864] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 338.592733][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.645984][ T5864] usb 1-1: config 0 descriptor?? [ 338.871001][ T5870] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 338.888383][ T24] kernel read not supported for file /dsp (pid: 24 comm: kworker/1:0) [ 339.014856][ T24] usb 2-1: USB disconnect, device number 39 [ 339.095528][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 339.106973][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 339.121004][ T5870] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 339.134278][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.145856][ T5870] usb 5-1: Product: syz [ 339.150020][ T5870] usb 5-1: Manufacturer: syz [ 339.172693][ T5870] usb 5-1: SerialNumber: syz [ 339.218041][ T5870] usb 5-1: config 0 descriptor?? [ 339.480376][ T5863] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 339.634083][ T5863] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 339.644854][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.656246][ T5863] usb 4-1: Product: syz [ 339.669231][ T5863] usb 4-1: Manufacturer: syz [ 339.691798][ T5863] usb 4-1: SerialNumber: syz [ 339.710915][ T5863] usb 4-1: config 0 descriptor?? [ 339.734104][ T5863] comedi comedi0: Wrong number of endpoints [ 339.741487][ T5863] dt9812 4-1:0.0: driver 'dt9812' failed to auto-configure device. [ 339.827239][ T5864] uclogic 0003:256C:006D.0034: failed retrieving string descriptor #200: -71 [ 339.836269][ T5864] uclogic 0003:256C:006D.0034: failed retrieving pen parameters: -71 [ 339.845120][ T5864] uclogic 0003:256C:006D.0034: failed probing pen v2 parameters: -71 [ 339.858870][ T5864] uclogic 0003:256C:006D.0034: failed probing parameters: -71 [ 339.873529][ T5864] uclogic 0003:256C:006D.0034: probe with driver uclogic failed with error -71 [ 339.892704][ T5864] usb 1-1: USB disconnect, device number 45 [ 340.347877][ T9401] tipc: Enabling of bearer rejected, failed to enable media [ 340.680351][ T5864] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 340.880376][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 340.889734][ T5864] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.904275][ T5864] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 340.913466][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 340.923404][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 340.952834][ T5864] usb 3-1: Product: syz [ 340.959286][ T5864] usb 3-1: Manufacturer: syz [ 340.966715][ T5864] usb 3-1: SerialNumber: syz [ 340.980974][ T5864] usb 3-1: config 0 descriptor?? [ 340.989938][ T5864] hub 3-1:0.0: bad descriptor, ignoring hub [ 340.996873][ T5864] hub 3-1:0.0: probe with driver hub failed with error -5 [ 341.148117][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.160378][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.173153][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 341.183334][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.245014][ T5870] usb 5-1: USB disconnect, device number 49 [ 341.826734][ T9] usb 2-1: config 0 descriptor?? [ 342.387310][ T5870] usb 4-1: USB disconnect, device number 45 [ 342.941726][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'. [ 343.083728][ T5870] usb 3-1: USB disconnect, device number 45 [ 343.660195][ T9] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0035/input/input39 [ 343.676326][ T9438] tipc: Enabling of bearer rejected, already enabled [ 343.833419][ T9] uclogic 0003:256C:006D.0035: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 344.053975][ T9442] netlink: 32 bytes leftover after parsing attributes in process `syz.4.933'. [ 344.140482][ T1205] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 344.473614][ T9410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 344.499065][ T9446] netlink: 32 bytes leftover after parsing attributes in process `syz.4.933'. [ 344.554593][ T5870] usb 2-1: USB disconnect, device number 40 [ 344.818902][ T1205] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 344.900655][ T1205] usb 4-1: config 0 has no interface number 0 [ 344.932205][ T1205] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 345.020343][ T1205] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 345.127487][ T1205] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 345.192844][ T1205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.235690][ T1205] usb 4-1: config 0 descriptor?? [ 345.264494][ T9438] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 345.279604][ T1205] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 345.350352][ T5870] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 345.502272][ T5870] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 345.511603][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.571650][ T5870] usb 1-1: config 0 has no interfaces? [ 345.579812][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.591558][ T5870] usb 1-1: config 0 has no interfaces? [ 345.599700][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.610593][ T5870] usb 1-1: config 0 has no interfaces? [ 345.617647][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.745913][ T5870] usb 1-1: config 0 has no interfaces? [ 345.754320][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.764435][ T5870] usb 1-1: config 0 has no interfaces? [ 345.773816][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.783919][ T5870] usb 1-1: config 0 has no interfaces? [ 345.791192][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.801908][ T5870] usb 1-1: config 0 has no interfaces? [ 345.811264][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.830140][ T5870] usb 1-1: config 0 has no interfaces? [ 345.842691][ T5870] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 345.852211][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'. [ 345.878599][ T5870] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 345.887425][ T5870] usb 1-1: Product: syz [ 345.891993][ T5870] usb 1-1: Manufacturer: syz [ 345.896707][ T5870] usb 1-1: SerialNumber: syz [ 345.904493][ T5870] usb 1-1: config 0 descriptor?? [ 346.428390][ T5870] usb 1-1: USB disconnect, device number 46 [ 347.187483][ T5863] usb 4-1: USB disconnect, device number 46 [ 347.315208][ T9491] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 347.480320][ T5870] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 348.041698][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.060630][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.070692][ T5870] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 348.100359][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.118941][ T5870] usb 3-1: config 0 descriptor?? [ 348.344819][ T9505] netlink: 'syz.4.946': attribute type 1 has an invalid length. [ 348.417240][ T9499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.943'. [ 348.450428][ T1205] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 348.500465][ T5863] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 348.539926][ T5870] pyra 0003:1E7D:2CF6.0036: unknown main item tag 0x0 [ 348.552519][ T5870] pyra 0003:1E7D:2CF6.0036: item fetching failed at offset 6/7 [ 348.605866][ T5870] pyra 0003:1E7D:2CF6.0036: parse failed [ 348.614271][ T5870] pyra 0003:1E7D:2CF6.0036: probe with driver pyra failed with error -22 [ 348.641834][ T1205] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 348.670985][ T1205] usb 1-1: config 0 has no interface number 0 [ 348.682337][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.695505][ T5863] usb 2-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 348.704643][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.714207][ T5863] usb 2-1: Product: syz [ 348.718473][ T5863] usb 2-1: Manufacturer: syz [ 348.723216][ T5863] usb 2-1: SerialNumber: syz [ 348.723953][ T1205] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 348.797907][ T5863] usb 2-1: config 0 descriptor?? [ 348.815517][ T5863] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 348.850306][ T5863] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 348.906546][ T1205] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 348.942572][ T1205] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 348.951685][ T1205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.969048][ T5863] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 349.483931][ T1205] usb 1-1: config 0 descriptor?? [ 349.508251][ T9500] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 349.528963][ T1205] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 349.540416][ T5863] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 349.546769][ T5863] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 349.632142][ T5863] usb 2-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 349.683145][ T5863] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 350.192296][ T1205] kernel read not supported for file /dsp (pid: 1205 comm: kworker/0:2) [ 350.267839][ T5863] usb 2-1: USB disconnect, device number 41 [ 350.587857][ T5863] usb 3-1: USB disconnect, device number 46 [ 351.098183][ T9535] misc userio: The device must be registered before sending interrupts [ 351.398991][ T5863] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 352.635445][ T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 352.699629][ T5870] usb 1-1: USB disconnect, device number 47 [ 352.881681][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.913696][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.934651][ T9557] netlink: 'syz.0.960': attribute type 1 has an invalid length. [ 352.997526][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 353.035859][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.069934][ T24] usb 4-1: config 0 descriptor?? [ 353.090491][ T58] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 353.242357][ T58] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 353.251001][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.261408][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 353.272576][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 353.287691][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.300136][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 353.309285][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 353.323789][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.335979][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 353.348220][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 353.361586][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.373493][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 353.395069][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 353.403473][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.428738][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 353.438159][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 353.451828][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.463736][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 353.472796][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 353.483200][ T24] pyra 0003:1E7D:2CF6.0037: unknown main item tag 0x0 [ 353.490142][ T24] pyra 0003:1E7D:2CF6.0037: item fetching failed at offset 6/7 [ 353.501561][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.512136][ T24] pyra 0003:1E7D:2CF6.0037: parse failed [ 353.520108][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 353.529617][ T24] pyra 0003:1E7D:2CF6.0037: probe with driver pyra failed with error -22 [ 353.543870][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 353.562829][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.573454][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 353.585382][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 353.594869][ T58] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 353.604489][ T58] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 353.614181][ T58] usb 2-1: Product: syz [ 353.618469][ T58] usb 2-1: Manufacturer: syz [ 353.623803][ T58] usb 2-1: SerialNumber: syz [ 353.664810][ T58] usb 2-1: config 0 descriptor?? [ 353.680163][ T58] yurex 2-1:0.0: Could not find endpoints [ 354.348684][ T5863] usb 3-1: unable to get BOS descriptor or descriptor too short [ 354.383332][ T5863] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 354.391707][ T5863] usb 3-1: can't read configurations, error -71 [ 354.463984][ T58] usb 2-1: USB disconnect, device number 42 [ 355.010463][ T5863] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 355.446281][ T1205] usb 4-1: USB disconnect, device number 47 [ 356.964748][ T9597] libceph: resolve 'c' (ret=-3): failed [ 357.012257][ T9597] misc userio: The device must be registered before sending interrupts [ 357.589832][ T5863] usb 3-1: unable to get BOS descriptor or descriptor too short [ 357.649375][ T5863] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 357.677280][ T5863] usb 3-1: can't read configurations, error -71 [ 357.694895][ T5863] usb usb3-port1: attempt power cycle [ 358.039041][ T58] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 358.119317][ T9615] libceph: resolve 'c' (ret=-3): failed [ 358.159201][ T9615] misc userio: The device must be registered before sending interrupts [ 358.564373][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 358.615762][ T58] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 358.668653][ T58] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 358.819077][ T24] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 359.211633][ T58] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 359.304520][ T58] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 359.318230][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.508546][ T58] usb 1-1: Product: syz [ 359.513179][ T58] usb 1-1: Manufacturer: syz [ 359.528378][ T58] usb 1-1: SerialNumber: syz [ 360.050367][ T5863] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 360.167019][ T58] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 360.181011][ T58] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 360.204394][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 360.235031][ T5863] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 360.247491][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.272784][ T58] usb 1-1: USB disconnect, device number 48 [ 360.283275][ T5863] usb 2-1: Product: syz [ 360.306044][ T5863] usb 2-1: Manufacturer: syz [ 360.335576][ T5863] usb 2-1: SerialNumber: syz [ 360.360116][ T5863] r8152-cfgselector 2-1: Unknown version 0x0000 [ 360.378175][ T5863] r8152-cfgselector 2-1: config 0 descriptor?? [ 360.615777][ T9635] netfs: Couldn't get user pages (rc=-14) [ 360.732025][ T9636] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 360.801724][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.983'. [ 360.836161][ T5863] r8152-cfgselector 2-1: USB disconnect, device number 43 [ 361.678440][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 361.885576][ T9650] libceph: resolve 'c' (ret=-3): failed [ 361.927426][ T9650] misc userio: The device must be registered before sending interrupts [ 362.574978][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 362.582906][ T24] usb 5-1: can't read configurations, error -71 [ 362.687473][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'. [ 364.111030][ T9664] libceph: resolve 'c' (ret=-3): failed [ 364.277524][ T9678] misc userio: The device must be registered before sending interrupts [ 364.439583][ T9684] syz_tun: entered allmulticast mode [ 365.950359][ T9] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 366.143527][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 366.150443][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 366.157537][ T9] usb 3-1: config 0 has no interface number 0 [ 366.166528][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 366.214311][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 366.284902][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 366.410359][ T24] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 366.455517][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.583493][ T9] usb 3-1: config 0 descriptor?? [ 366.638961][ T9695] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 366.661384][ T9] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 367.911285][ T5870] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 368.746604][ T5870] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 368.755466][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 368.764505][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 368.775485][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 368.786984][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 368.796480][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 368.810355][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 368.924306][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 368.958148][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 368.978958][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.000220][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.058665][ T9722] CIFS: VFS: Malformed UNC in devname [ 369.064923][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 369.086829][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.242260][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.249083][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 369.285106][ T24] usb 4-1: can't read configurations, error -71 [ 369.395351][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.404655][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.417255][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.440049][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.450647][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.498102][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.528178][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.537921][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.549195][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.557742][ T5870] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.567157][ T5870] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.579248][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.591255][ T5870] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 369.600609][ T5870] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 369.629136][ T5870] usb 5-1: Product: syz [ 369.664798][ T5870] usb 5-1: Manufacturer: syz [ 369.683959][ T9] usb 3-1: USB disconnect, device number 50 [ 369.706256][ T5870] usb 5-1: SerialNumber: syz [ 369.756511][ T5870] usb 5-1: config 0 descriptor?? [ 369.769685][ T5870] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 369.858511][ T9738] netlink: 'syz.0.1013': attribute type 1 has an invalid length. [ 370.020527][ T1205] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 370.052822][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 370.053675][ T9] usb 5-1: USB disconnect, device number 52 [ 370.076972][ T9] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 370.170371][ T1205] usb 2-1: Using ep0 maxpacket: 16 [ 370.179097][ T1205] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 370.193494][ T1205] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 370.213075][ T1205] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 370.926505][ T1205] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 370.947882][ T1205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.968072][ T1205] usb 2-1: Product: syz [ 370.977233][ T1205] usb 2-1: Manufacturer: syz [ 370.987114][ T1205] usb 2-1: SerialNumber: syz [ 371.480353][ T24] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 372.628551][ T1205] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 372.679236][ T1205] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 373.403301][ T1205] usb 2-1: USB disconnect, device number 44 [ 374.640355][ T5870] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 374.800462][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 374.812463][ T9788] CIFS: VFS: Malformed UNC in devname [ 374.899133][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 374.939174][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.966642][ T5870] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 374.980260][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 374.996639][ T24] usb 3-1: can't read configurations, error -71 [ 375.003540][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.039202][ T5870] usb 5-1: config 0 descriptor?? [ 375.373483][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 375.550873][ T24] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 375.559702][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.571908][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 375.653803][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 375.670792][ T5870] usbhid 5-1:0.0: can't add hid device: -71 [ 375.678677][ T5870] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 375.691431][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.700401][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 375.781079][ T5870] usb 5-1: USB disconnect, device number 53 [ 375.806706][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 375.837644][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.846697][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 375.907885][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 375.916607][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.925916][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 375.937854][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 375.948755][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.959071][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 375.992866][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 376.001384][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.011251][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.028593][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 376.046366][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.055667][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.111067][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 376.118494][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.128139][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.139193][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 376.157643][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 376.248427][ T24] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 376.257133][ T24] usb 3-1: Product: syz [ 376.261334][ T24] usb 3-1: Manufacturer: syz [ 376.265946][ T24] usb 3-1: SerialNumber: syz [ 376.280675][ T24] usb 3-1: config 0 descriptor?? [ 376.410295][ T9802] libceph: resolve 'c' (ret=-3): failed [ 376.521977][ T9803] misc userio: The device must be registered before sending interrupts [ 376.768892][ T24] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 376.831219][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 376.838463][ T24] usb 3-1: USB disconnect, device number 52 [ 376.846780][ T24] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 376.920974][ T9808] tipc: Enabling of bearer rejected, already enabled [ 377.252452][ T5870] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 377.578849][ T5870] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 377.592057][ T5870] usb 5-1: config 0 has no interface number 0 [ 377.662010][ T9] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 377.772826][ T5870] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 377.784092][ T5870] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 377.794825][ T5870] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 377.804176][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.852021][ T5870] usb 5-1: config 0 descriptor?? [ 377.863781][ T9808] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 377.890673][ T5870] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 378.165450][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.174101][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.198414][ T9828] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 379.001807][ T9828] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1041'. [ 380.306701][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 380.357922][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 380.376174][ T9] usb 1-1: can't read configurations, error -71 [ 381.156994][ T9864] libceph: resolve 'c' (ret=-3): failed [ 381.216992][ T9864] misc userio: The device must be registered before sending interrupts [ 381.416764][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 381.467046][ T1205] usb 5-1: USB disconnect, device number 54 [ 381.610716][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.640378][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.650163][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 381.670331][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.688450][ T9] usb 1-1: config 0 descriptor?? [ 381.994587][ T9873] syz_tun: entered allmulticast mode [ 382.407873][ T9] pyra 0003:1E7D:2CF6.0038: unknown main item tag 0x0 [ 382.424179][ T9] pyra 0003:1E7D:2CF6.0038: item fetching failed at offset 6/7 [ 382.434477][ T9] pyra 0003:1E7D:2CF6.0038: parse failed [ 382.440230][ T9] pyra 0003:1E7D:2CF6.0038: probe with driver pyra failed with error -22 [ 384.436079][ T24] usb 1-1: USB disconnect, device number 50 [ 385.233154][ T9911] CIFS: VFS: Malformed UNC in devname [ 387.150484][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 387.250481][ T1205] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 387.310731][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 387.334698][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 387.350377][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 387.360042][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 387.392142][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 387.405563][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.422462][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.436454][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.460266][ T9] usb 2-1: Product: syz [ 387.472726][ T9] usb 2-1: Manufacturer: syz [ 387.493002][ T1205] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 387.502132][ T9] usb 2-1: SerialNumber: syz [ 387.530453][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.571618][ T1205] usb 3-1: config 0 descriptor?? [ 387.674069][ T30] audit: type=1400 audit(1746200731.946:354): avc: denied { ioctl } for pid=9935 comm="syz.4.1072" path="socket:[23234]" dev="sockfs" ino=23234 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 387.914137][ T9947] syzkaller1: entered promiscuous mode [ 387.919750][ T9947] syzkaller1: entered allmulticast mode [ 388.188401][ T1205] pyra 0003:1E7D:2CF6.0039: unknown main item tag 0x0 [ 389.884367][ T1205] pyra 0003:1E7D:2CF6.0039: item fetching failed at offset 6/7 [ 389.923870][ T1205] pyra 0003:1E7D:2CF6.0039: parse failed [ 389.931971][ T1205] pyra 0003:1E7D:2CF6.0039: probe with driver pyra failed with error -22 [ 390.023362][ T1205] usb 3-1: USB disconnect, device number 53 [ 390.047557][ T9] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 390.060741][ T9] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 390.234298][ T9] usb 2-1: USB disconnect, device number 45 [ 391.184240][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 391.800409][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 391.807359][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.819065][ T24] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 391.828608][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.846671][ T9977] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1082'. [ 391.857992][ T9977] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1082'. [ 391.866298][ T24] usb 1-1: config 0 descriptor?? [ 391.970760][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 392.146809][ T9] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 392.172714][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.294972][ T9] usb 5-1: Product: syz [ 392.299161][ T9] usb 5-1: Manufacturer: syz [ 392.309873][ T9] usb 5-1: SerialNumber: syz [ 392.801792][ T9] usb 5-1: config 0 descriptor?? [ 392.815718][ T9] comedi comedi0: Wrong number of endpoints [ 392.842142][ T9] dt9812 5-1:0.0: driver 'dt9812' failed to auto-configure device. [ 392.892888][ T9991] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 393.004388][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 393.105983][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 393.185686][ T24] usb 1-1: USB disconnect, device number 51 [ 393.263025][ T9985] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1086'. [ 393.410566][ T1205] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 393.687397][ T1205] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 393.696294][ T1205] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.708486][ T1205] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.725974][ T1205] usb 4-1: config 0 interface 0 has no altsetting 0 [ 393.745234][ T1205] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.169162][ T1205] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.180078][ T1205] usb 4-1: config 0 interface 0 has no altsetting 0 [ 394.187578][ T1205] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.278526][ T1205] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.290153][ T1205] usb 4-1: config 0 interface 0 has no altsetting 0 [ 394.298653][ T1205] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.308756][ T1205] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.325914][ T1205] usb 4-1: config 0 interface 0 has no altsetting 0 [ 394.392805][ T1205] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.042142][ T1205] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 395.053103][ T1205] usb 4-1: config 0 interface 0 has no altsetting 0 [ 395.060653][ T1205] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.069868][ T1205] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 395.080867][ T1205] usb 4-1: config 0 interface 0 has no altsetting 0 [ 395.088253][ T1205] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.116938][ T1205] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 395.130349][ T1205] usb 4-1: config 0 interface 0 has no altsetting 0 [ 395.137680][ T24] usb 5-1: USB disconnect, device number 55 [ 395.161969][ T1205] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.175138][ T1205] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 395.193916][ T1205] usb 4-1: config 0 interface 0 has no altsetting 0 [ 395.204909][ T1205] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 395.220359][ T1205] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 395.228700][ T1205] usb 4-1: Product: syz [ 395.232913][ T1205] usb 4-1: Manufacturer: syz [ 395.238299][ T1205] usb 4-1: SerialNumber: syz [ 395.405169][ T1205] usb 4-1: config 0 descriptor?? [ 395.480910][ T1205] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 395.491213][T10025] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1095'. [ 395.509756][T10025] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1095'. [ 395.656124][T10021] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1095'. [ 395.809057][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 395.809258][ T24] usb 4-1: USB disconnect, device number 50 [ 395.899092][ T24] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 396.700618][ T1205] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 396.937342][ T1205] usb 3-1: Using ep0 maxpacket: 16 [ 396.944853][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.957081][ T1205] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 396.968777][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.008473][ T1205] usb 3-1: config 0 descriptor?? [ 397.008871][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1107'. [ 397.252350][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 397.421044][ T9] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 397.429966][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.466283][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.526738][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 397.573268][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.653038][ T1205] usbhid 3-1:0.0: can't add hid device: -71 [ 397.671964][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.721731][ T1205] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 397.773579][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 397.817528][ T1205] usb 3-1: USB disconnect, device number 54 [ 397.824618][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.844606][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.861182][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 397.868737][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.879212][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.891110][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 397.898589][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.908587][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.920265][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 397.934826][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.944173][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.958620][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 397.966185][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.975373][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.986299][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 397.993728][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 398.002738][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 398.027907][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 398.040357][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 398.055608][ T9] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 398.070434][ T9] usb 1-1: Product: syz [ 398.116570][ T9] usb 1-1: Manufacturer: syz [ 398.128844][ T9] usb 1-1: SerialNumber: syz [ 398.137805][ T9] usb 1-1: config 0 descriptor?? [ 398.149163][ T9] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 398.628438][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 398.635554][ T24] usb 1-1: USB disconnect, device number 52 [ 398.661664][T10087] syzkaller1: entered promiscuous mode [ 398.668481][T10087] syzkaller1: entered allmulticast mode [ 398.750333][ T24] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 399.004496][T10090] CIFS: VFS: Malformed UNC in devname [ 399.241806][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1120'. [ 399.580876][ T24] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 399.710486][ T5870] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 399.735068][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.748242][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.870336][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 400.063046][ T5870] usb 4-1: config 0 has an invalid interface number: 4 but max is 1 [ 400.080733][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.093970][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 400.103439][ T5870] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 400.114175][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.122961][ T5870] usb 4-1: config 0 has no interface number 0 [ 400.131917][ T24] usb 5-1: config 0 descriptor?? [ 400.146244][ T5870] usb 4-1: config 0 interface 4 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 400.163515][ T5870] usb 4-1: config 0 interface 4 has no altsetting 0 [ 400.175165][ T5870] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2750, bcdDevice=e2.82 [ 400.184417][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.200668][ T5870] usb 4-1: config 0 descriptor?? [ 400.570497][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 400.618851][ T24] pyra 0003:1E7D:2CF6.003A: unknown main item tag 0x0 [ 400.626394][ T24] pyra 0003:1E7D:2CF6.003A: item fetching failed at offset 6/7 [ 400.635069][ T24] pyra 0003:1E7D:2CF6.003A: parse failed [ 400.641077][ T24] pyra 0003:1E7D:2CF6.003A: probe with driver pyra failed with error -22 [ 400.730383][ T1205] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 400.741618][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.753175][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.764785][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 400.774076][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.787453][ T9] usb 2-1: config 0 descriptor?? [ 401.078648][ T1205] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.088895][ T1205] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 401.100062][ T1205] usb 1-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 401.110208][ T1205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.118721][ T1205] usb 1-1: Product: syz [ 401.123274][ T1205] usb 1-1: Manufacturer: syz [ 401.128146][ T1205] usb 1-1: SerialNumber: syz [ 401.154877][ T1205] usb 1-1: config 0 descriptor?? [ 401.535501][ T9] usb 2-1: language id specifier not provided by device, defaulting to English [ 401.690442][ T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 401.736158][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 401.743592][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 401.751063][ T9] uclogic 0003:256C:006D.003B: failed retrieving Huion firmware version: -71 [ 401.759851][ T9] uclogic 0003:256C:006D.003B: failed probing parameters: -71 [ 401.767554][ T9] uclogic 0003:256C:006D.003B: probe with driver uclogic failed with error -71 [ 401.779482][ T9] usb 2-1: USB disconnect, device number 46 [ 401.840444][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 401.847545][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 401.860361][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 401.871662][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 401.884644][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 401.893907][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.901980][ T24] usb 3-1: Product: syz [ 401.906214][ T24] usb 3-1: Manufacturer: syz [ 401.910908][ T5863] kernel read not supported for file /dsp (pid: 5863 comm: kworker/1:3) [ 401.919298][ T24] usb 3-1: SerialNumber: syz [ 401.928250][ T1205] usb 1-1: USB disconnect, device number 53 [ 402.783063][ T9] usb 5-1: USB disconnect, device number 56 [ 402.830945][ T1205] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 402.931985][T10138] binder: 10137:10138 ioctl 4018620d 0 returned -22 [ 402.985257][ T5870] usb 4-1: string descriptor 0 read error: -71 [ 403.024382][ T1205] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 403.051041][ T1205] usb 2-1: config 0 has no interface number 0 [ 403.100962][ T1205] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 403.215029][ T1205] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 403.293009][ T1205] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 403.357820][ T1205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.400470][ T9] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 403.462209][ T1205] usb 2-1: config 0 descriptor?? [ 403.475352][T10136] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 403.565883][ T1205] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 403.663202][T10141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.783983][T10141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.473015][ T5870] usb 4-1: USB disconnect, device number 51 [ 404.559162][ T24] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 404.608510][ T24] usb 3-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 404.700383][ T24] usb 3-1: USB disconnect, device number 55 [ 405.200349][ T1205] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 405.367243][ T5864] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 405.376586][ T1205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.388341][ T1205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.398686][ T1205] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 405.407998][ T1205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.421392][ T1205] usb 5-1: config 0 descriptor?? [ 405.543140][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.554244][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.564109][ T5864] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 405.573930][ T5870] usb 2-1: USB disconnect, device number 47 [ 405.578140][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.599087][ T5864] usb 3-1: config 0 descriptor?? [ 405.799559][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 405.810073][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 405.822328][ T9] usb 1-1: can't read configurations, error -71 [ 406.740575][ T5864] usb 3-1: language id specifier not provided by device, defaulting to English [ 407.003516][ T5864] uclogic 0003:256C:006D.003C: failed retrieving Huion firmware version: -71 [ 407.021802][ T5864] uclogic 0003:256C:006D.003C: failed probing parameters: -71 [ 407.035152][ T5864] uclogic 0003:256C:006D.003C: probe with driver uclogic failed with error -71 [ 407.051914][ T5864] usb 3-1: USB disconnect, device number 56 [ 408.670576][ T1205] usbhid 5-1:0.0: can't add hid device: -71 [ 408.676515][ T1205] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 408.690739][ T1205] usb 5-1: USB disconnect, device number 57 [ 408.864767][T10211] netlink: 'syz.4.1155': attribute type 1 has an invalid length. [ 410.337528][T10218] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1157'. [ 410.435834][T10218] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1157'. [ 410.750556][ T1205] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 410.780690][ T24] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 410.921603][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.941949][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.957448][ T1205] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 410.960663][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.966774][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.001465][ T1205] usb 3-1: config 0 descriptor?? [ 411.022426][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.035049][ T24] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 411.053505][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.080799][ T24] usb 5-1: config 0 descriptor?? [ 411.592943][T10253] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 411.860358][ T5864] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 412.110059][ T1205] usb 3-1: language id specifier not provided by device, defaulting to English [ 412.124617][ T5864] usb 1-1: unable to get BOS descriptor or descriptor too short [ 412.134722][ T5864] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 412.142360][ T5864] usb 1-1: can't read configurations, error -71 [ 412.559396][ T24] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.003D/input/input42 [ 412.671898][ T24] uclogic 0003:256C:006D.003D: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 412.775831][T10229] netfs: Couldn't get user pages (rc=-14) [ 412.896525][T10231] netfs: Couldn't get user pages (rc=-14) [ 413.118639][T10259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.312420][ T1205] uclogic 0003:256C:006D.003E: failed retrieving string descriptor #100: -71 [ 413.325026][ T1205] uclogic 0003:256C:006D.003E: failed retrieving pen parameters: -71 [ 413.333830][ T1205] uclogic 0003:256C:006D.003E: failed probing pen v1 parameters: -71 [ 413.343436][ T1205] uclogic 0003:256C:006D.003E: failed probing parameters: -71 [ 413.351363][ T1205] uclogic 0003:256C:006D.003E: probe with driver uclogic failed with error -71 [ 413.575478][T10271] netlink: 'syz.1.1170': attribute type 1 has an invalid length. [ 413.611593][ T1205] usb 3-1: USB disconnect, device number 57 [ 414.006054][ T13] ================================================================== [ 414.014165][ T13] BUG: KASAN: slab-out-of-bounds in iov_iter_revert+0x443/0x5a0 [ 414.019570][ T24] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 414.021790][ T13] Read of size 4 at addr ffff8880328cc1b8 by task kworker/u8:1/13 [ 414.021806][ T13] [ 414.021814][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 414.021835][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 414.021846][ T13] Workqueue: events_unbound netfs_write_collection_worker [ 414.021869][ T13] Call Trace: [ 414.021874][ T13] [ 414.021880][ T13] dump_stack_lvl+0x116/0x1f0 [ 414.021899][ T13] print_report+0xc3/0x670 [ 414.021913][ T13] ? __virt_addr_valid+0x5e/0x590 [ 414.021933][ T13] ? __phys_addr+0xc6/0x150 [ 414.021952][ T13] ? iov_iter_revert+0x443/0x5a0 [ 414.021970][ T13] kasan_report+0xe0/0x110 [ 414.021984][ T13] ? iov_iter_revert+0x443/0x5a0 [ 414.022003][ T13] iov_iter_revert+0x443/0x5a0 [ 414.022022][ T13] netfs_retry_writes+0x166d/0x1a50 [ 414.022039][ T13] ? rcu_is_watching+0x12/0xc0 [ 414.022058][ T13] ? __lock_acquire+0xaa4/0x1ba0 [ 414.022080][ T13] ? __pfx_netfs_retry_writes+0x10/0x10 [ 414.022096][ T13] ? __pfx___mod_timer+0x10/0x10 [ 414.022117][ T13] ? register_lock_class+0x41/0x4c0 [ 414.022138][ T13] ? do_raw_spin_lock+0x12c/0x2b0 [ 414.022154][ T13] netfs_write_collection_worker+0x23fd/0x3830 [ 414.022178][ T13] process_one_work+0x9cc/0x1b70 [ 414.022195][ T13] ? __pfx_netfs_write_collection_worker+0x10/0x10 [ 414.022212][ T13] ? __pfx_process_one_work+0x10/0x10 [ 414.022229][ T13] ? assign_work+0x1a0/0x250 [ 414.022247][ T13] worker_thread+0x6c8/0xf10 [ 414.022266][ T13] ? __pfx_worker_thread+0x10/0x10 [ 414.022280][ T13] kthread+0x3c2/0x780 [ 414.022292][ T13] ? __pfx_kthread+0x10/0x10 [ 414.022304][ T13] ? __pfx_kthread+0x10/0x10 [ 414.022315][ T13] ? __pfx_kthread+0x10/0x10 [ 414.022327][ T13] ? __pfx_kthread+0x10/0x10 [ 414.022340][ T13] ? rcu_is_watching+0x12/0xc0 [ 414.022355][ T13] ? __pfx_kthread+0x10/0x10 [ 414.022368][ T13] ret_from_fork+0x45/0x80 [ 414.022381][ T13] ? __pfx_kthread+0x10/0x10 [ 414.022393][ T13] ret_from_fork_asm+0x1a/0x30 [ 414.022417][ T13] [ 414.022422][ T13] [ 414.102538][ T24] hid-generic 0000:0000:0000.003F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 414.107277][ T13] Allocated by task 7517: [ 414.107287][ T13] kasan_save_stack+0x33/0x60 [ 414.253688][ T13] kasan_save_track+0x14/0x30 [ 414.253714][ T13] __kasan_kmalloc+0xaa/0xb0 [ 414.253732][ T13] proc_thread_self_get_link+0x1c6/0x240 [ 414.253744][ T13] step_into+0x19e4/0x2270 [ 414.253760][ T13] walk_component+0xfc/0x5b0 [ 414.253776][ T13] link_path_walk.part.0.constprop.0+0x685/0xd60 [ 414.253794][ T13] path_openat+0x227/0x2d40 [ 414.253812][ T13] do_filp_open+0x20b/0x470 [ 414.253829][ T13] do_sys_openat2+0x11b/0x1d0 [ 414.253842][ T13] __x64_sys_openat+0x174/0x210 [ 414.253855][ T13] do_syscall_64+0xcd/0x260 [ 414.253871][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.253884][ T13] [ 414.253888][ T13] Freed by task 7517: [ 414.253894][ T13] kasan_save_stack+0x33/0x60 [ 414.253911][ T13] kasan_save_track+0x14/0x30 [ 414.253929][ T13] kasan_save_free_info+0x3b/0x60 [ 414.253944][ T13] __kasan_slab_free+0x51/0x70 [ 414.253954][ T13] kfree+0x2b6/0x4d0 [ 414.253970][ T13] walk_component+0x1a2/0x5b0 [ 414.253986][ T13] link_path_walk.part.0.constprop.0+0x553/0xd60 [ 414.254003][ T13] path_openat+0x227/0x2d40 [ 414.254021][ T13] do_filp_open+0x20b/0x470 [ 414.254038][ T13] do_sys_openat2+0x11b/0x1d0 [ 414.254051][ T13] __x64_sys_openat+0x174/0x210 [ 414.254064][ T13] do_syscall_64+0xcd/0x260 [ 414.254078][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.254090][ T13] [ 414.254093][ T13] The buggy address belongs to the object at ffff8880328cc180 [ 414.254093][ T13] which belongs to the cache kmalloc-32 of size 32 [ 414.254104][ T13] The buggy address is located 24 bytes to the right of [ 414.254104][ T13] allocated 32-byte region [ffff8880328cc180, ffff8880328cc1a0) [ 414.254117][ T13] [ 414.254120][ T13] The buggy address belongs to the physical page: [ 414.254126][ T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x328cc [ 414.254137][ T13] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 414.254149][ T13] page_type: f5(slab) [ 414.254160][ T13] raw: 00fff00000000000 ffff88801b441780 dead000000000100 dead000000000122 [ 414.254172][ T13] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000 [ 414.254179][ T13] page dumped because: kasan: bad access detected [ 414.254185][ T13] page_owner tracks the page as allocated [ 414.254189][ T13] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP), pid 5882, tgid 5882 (modprobe), ts 61339339325, free_ts 61338817112 [ 414.254210][ T13] post_alloc_hook+0x181/0x1b0 [ 414.254228][ T13] get_page_from_freelist+0x135c/0x3920 [ 414.254247][ T13] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 414.254266][ T13] alloc_pages_mpol+0x1fb/0x550 [ 414.254277][ T13] new_slab+0x244/0x340 [ 414.254292][ T13] ___slab_alloc+0xd9c/0x1940 [ 414.254308][ T13] __slab_alloc.constprop.0+0x56/0xb0 [ 414.254324][ T13] __kmalloc_cache_noprof+0xfb/0x3e0 [ 414.254340][ T13] kmem_cache_free+0x148/0x4d0 [ 414.254358][ T13] exit_mmap+0x511/0xb90 [ 414.254373][ T13] __mmput+0x12a/0x410 [ 414.254388][ T13] mmput+0x62/0x70 [ 414.254401][ T13] do_exit+0x9d1/0x2c30 [ 414.254418][ T13] do_group_exit+0xd3/0x2a0 [ 414.254435][ T13] __x64_sys_exit_group+0x3e/0x50 [ 414.254452][ T13] x64_sys_call+0x1530/0x1730 [ 414.254470][ T13] page last free pid 5882 tgid 5882 stack trace: [ 414.254477][ T13] __free_frozen_pages+0x69d/0xff0 [ 414.254493][ T13] tlb_finish_mmu+0x237/0x7b0 [ 414.254514][ T13] exit_mmap+0x403/0xb90 [ 414.254529][ T13] __mmput+0x12a/0x410 [ 414.254542][ T13] mmput+0x62/0x70 [ 414.254555][ T13] do_exit+0x9d1/0x2c30 [ 414.254571][ T13] do_group_exit+0xd3/0x2a0 [ 414.254588][ T13] __x64_sys_exit_group+0x3e/0x50 [ 414.254606][ T13] x64_sys_call+0x1530/0x1730 [ 414.254623][ T13] do_syscall_64+0xcd/0x260 [ 414.254637][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.254649][ T13] [ 414.254652][ T13] Memory state around the buggy address: [ 414.254658][ T13] ffff8880328cc080: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 414.254668][ T13] ffff8880328cc100: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 414.254677][ T13] >ffff8880328cc180: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 414.254684][ T13] ^ [ 414.254690][ T13] ffff8880328cc200: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 414.254699][ T13] ffff8880328cc280: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 414.254707][ T13] ================================================================== [ 414.274505][ T13] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 414.274519][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 414.274538][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 414.274547][ T13] Workqueue: events_unbound netfs_write_collection_worker [ 414.274569][ T13] Call Trace: [ 414.274575][ T13] [ 414.274580][ T13] dump_stack_lvl+0x3d/0x1f0 [ 414.274599][ T13] panic+0x71c/0x800 [ 414.274620][ T13] ? __pfx_panic+0x10/0x10 [ 414.274639][ T13] ? mark_held_locks+0x49/0x80 [ 414.274661][ T13] ? preempt_schedule_thunk+0x16/0x30 [ 414.274675][ T13] ? iov_iter_revert+0x443/0x5a0 [ 414.274694][ T13] ? preempt_schedule_common+0x44/0xc0 [ 414.274711][ T13] ? check_panic_on_warn+0x1f/0xb0 [ 414.274733][ T13] ? iov_iter_revert+0x443/0x5a0 [ 414.274750][ T13] check_panic_on_warn+0xab/0xb0 [ 414.274771][ T13] end_report+0x107/0x170 [ 414.274786][ T13] kasan_report+0xee/0x110 [ 414.274800][ T13] ? iov_iter_revert+0x443/0x5a0 [ 414.274820][ T13] iov_iter_revert+0x443/0x5a0 [ 414.274839][ T13] netfs_retry_writes+0x166d/0x1a50 [ 414.274856][ T13] ? rcu_is_watching+0x12/0xc0 [ 414.274875][ T13] ? __lock_acquire+0xaa4/0x1ba0 [ 414.274896][ T13] ? __pfx_netfs_retry_writes+0x10/0x10 [ 414.274912][ T13] ? __pfx___mod_timer+0x10/0x10 [ 414.274934][ T13] ? register_lock_class+0x41/0x4c0 [ 414.274955][ T13] ? do_raw_spin_lock+0x12c/0x2b0 [ 414.274971][ T13] netfs_write_collection_worker+0x23fd/0x3830 [ 414.274995][ T13] process_one_work+0x9cc/0x1b70 [ 414.275013][ T13] ? __pfx_netfs_write_collection_worker+0x10/0x10 [ 414.275030][ T13] ? __pfx_process_one_work+0x10/0x10 [ 414.275047][ T13] ? assign_work+0x1a0/0x250 [ 414.275061][ T13] worker_thread+0x6c8/0xf10 [ 414.275079][ T13] ? __pfx_worker_thread+0x10/0x10 [ 414.275093][ T13] kthread+0x3c2/0x780 [ 414.275106][ T13] ? __pfx_kthread+0x10/0x10 [ 414.275129][ T13] ? __pfx_kthread+0x10/0x10 [ 414.275141][ T13] ? __pfx_kthread+0x10/0x10 [ 414.275153][ T13] ? __pfx_kthread+0x10/0x10 [ 414.275166][ T13] ? rcu_is_watching+0x12/0xc0 [ 414.275181][ T13] ? __pfx_kthread+0x10/0x10 [ 414.275195][ T13] ret_from_fork+0x45/0x80 [ 414.275208][ T13] ? __pfx_kthread+0x10/0x10 [ 414.275221][ T13] ret_from_fork_asm+0x1a/0x30 [ 414.275245][ T13] [ 414.280045][ T13] Kernel Offset: disabled