last executing test programs: 2m38.684004586s ago: executing program 4 (id=3090): socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(0xffffffffffffffff, 0x4242, 0x4757, 0x0, &(0x7f0000000380)={[0x2]}, 0x8) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r4, 0x7f}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000500)={r3, 0x6, 'CA'}, &(0x7f0000000540)=0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e20, @multicast2}}, 0x1, 0x800, 0x8001, 0x2, 0xc7, 0x800, 0x9}, &(0x7f0000000040)=0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x511441, 0x0) r6 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x1) r7 = syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="38005fd45cec010400000000000000000a00400004000380200002926afc543797f006000000000008000200e000000000"], 0x38}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000003580)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaabb86dd6000000000383afffe8000000000000000000000000000bbff020000ae5db22f9f2e38ca000000018800907805000000fe80000000000000000000000000002a"], 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF(r7, 0xc0585609, &(0x7f0000000880)=@mmap={0x80ffff, 0x7, 0x4, 0x100, 0x3, {}, {0x3, 0x2, 0xfe, 0x81, 0xb, 0x5, "8000"}, 0x5c90e21, 0x1, {}, 0x201, 0x0, r8}) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xc8a86, 0x10) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x201240, 0x0) write$cgroup_int(r9, &(0x7f0000000000)=0xb00, 0x12) r10 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r10) 2m37.669807978s ago: executing program 4 (id=3093): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x4}, 0x40801) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r5, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000100000027bf000000050000", @ANYRES32, @ANYBLOB="08000000000009b82400"/23, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r6, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r6}, 0x4) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) r7 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r8 = shmat(r7, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff0000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) shmdt(r8) 2m34.113732526s ago: executing program 4 (id=3101): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1, @ANYRES32=r1], 0x4c}}, 0x40) 2m33.322532141s ago: executing program 4 (id=3102): socket$nl_generic(0x10, 0x3, 0x10) rseq(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80146, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0xf0003, 0x0, [0x680, 0x3, 0x7, 0x0, 0x0, 0x0, 0x2b, 0x40000000]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg$unix(r3, &(0x7f0000001900)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f0000000340)=""/136, 0x88}], 0x2, &(0x7f0000000480)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000000640)=""/75, 0x4b}, {&(0x7f00000006c0)=""/10, 0xa}, {&(0x7f0000000700)=""/248, 0xf8}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x4, &(0x7f0000001840)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}], 0x2, 0x40000120, &(0x7f0000001980)={0x77359400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x1f, &(0x7f00000004c0)={&(0x7f0000001000)}, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) openat$autofs(0xffffffffffffff9c, 0x0, 0x11d40be0548075bb, 0x0) ftruncate(0xffffffffffffffff, 0x3) socket(0x10, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x1, 0x6, 0x1, 0x5, 0x7f, 0x7, 0x9, 0x5, 0x7ff, 0x6, 0xfffffffffffffff7, 0x5, 0x5c5f, 0x5, 0xe, 0x2], 0x0, 0x100}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r6 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905", @ANYRES32], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r6) 2m28.750395411s ago: executing program 4 (id=3111): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) sendmsg$nl_route(r0, 0x0, 0x4010) 2m28.458629236s ago: executing program 4 (id=3112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x15555555, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r8, 0x1276, 0x20000000) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x0, 0x2, {0xffffffffffffffff}, {0xee00}, 0x2, 0xcb85}) sched_setaffinity(r10, 0x8, &(0x7f0000000240)=0xffff) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 2m13.145680785s ago: executing program 32 (id=3112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x15555555, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r8, 0x1276, 0x20000000) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x0, 0x2, {0xffffffffffffffff}, {0xee00}, 0x2, 0xcb85}) sched_setaffinity(r10, 0x8, &(0x7f0000000240)=0xffff) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 36.319614032s ago: executing program 2 (id=3315): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000000e0003006269746d61703a697000000005000400000000007caf52af794beec07ad29d35196052c5b2136d28ef90e8832f00506493af04d9948361bf86cf4c4e8fa7645ca2f2433ee4daab67"], 0x2c}}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x128) socket$kcm(0x10, 0x2, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x0, 0xd, 0x1, 0x5, 0x8, @dev={0xfe, 0x80, '\x00', 0x28}, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8000, 0x7, 0x4, 0x298}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000428bd7000fcdbdf251000210008000600e0000000080009000300000008000700000400000c00018008000100", @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x41) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000800000010a86069001ffffff041d"]) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2af, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x1c7e00, 0x19) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000015c0)='smaps\x00') close(r7) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40085507, 0x0) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) 33.458403907s ago: executing program 2 (id=3319): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) request_key(&(0x7f0000000200)='id_resolver\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='/dev/full\x00', r3) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x4b) dup2(r0, r2) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) 33.2681489s ago: executing program 2 (id=3320): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000070000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000101000000"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000280), &(0x7f0000000480)=r1}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x200, 0x55) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESHEX=r2, @ANYRESDEC=r2]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xffffffff80002000, 0x2f, 0x0, 0x4, 0x5, 0x0, 0x0, 0x1}}, 0x50) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0xffffffffffffffda, r5, {0x7, 0x2b, 0x7fffffff, 0xc040000, 0x1, 0x4, 0x7, 0x4, 0x0, 0x0, 0x1, 0x3}}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000ac0)={0x2, &(0x7f0000000a80)=[{0xb1, 0x1, 0x0, 0x80000000}, {0x16, 0x2, 0x2, 0x2000000}]}, 0x10) sendmmsg(r7, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004888) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r9) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000080000006a0a00ff0000dfff2d00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="1000000000000025050000000000000000000000000000009500000000000000"], 0x0, 0x2, 0xa5, &(0x7f0000000240)=""/165, 0x0, 0x8f, '\x00', 0x0, @cgroup_skb}, 0x94) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r12 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x320}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r6 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) ftruncate(r6, 0xffff) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ipv6={@mcast2, @mcast2, [0xffffffff, 0xffffff00, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'veth0_virt_wifi\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x28}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x9, 0xf6, {0x938f}}}}, {{@uncond, 0x0, 0x100, 0x160, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x39], 0x9, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e20, 0x4e21, 0x1, 0xa1a9, 0x7, 0x7, 0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) r9 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r9, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388ed", @ANYRES32=0x0], 0x30}], 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0xfffffffffffffc5d, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) 25.054937701s ago: executing program 2 (id=3337): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setitimer(0x2, &(0x7f0000000580)={{0x0, 0x2710}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201b2d4b1f625595b7bf3dd1b18941003000000002505a8a440000102030109021b000101016000090400fa010701020809f9000208005dff87"], &(0x7f00000007c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x6, 0xfb, 0xc, 0x8, 0x8}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x480a}}, {0x3b, &(0x7f0000000480)=@string={0x3b, 0x3, "7d2c3cebe2ca769dcba40778bb9ac034472dee56cdc7f56998f02b5cfd6164898ac0d0c5067903c3515779705a8ad52317e0186d15c2d2539f"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1801}}]}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000180)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000040)}}) 20.768117391s ago: executing program 2 (id=3347): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e24, 0x4, @private2, 0xf9}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)="d34a1a8a081837e8f79aa9b89f7c389ce3608f21d9357aee1eae8e57c672900774f69d44dd6e05996c039f316eea76f5a63f389330f6dfcd35273459f2623dc2a5fd59164483af347957cbcfe4b25170bd062b91a15c6700bb10b972917cf9347b26d1215e995b1e96e51fd5ca6756a96070f0224fbb5957ab72f91cf1de15c0161bdeac698e99456f0e1d8b4e0dbd4de50b96a999005f39ded0bafb50dd65594855a715824a1080ba654067276cad0df2e4b3", 0xb3}, {&(0x7f0000000140)="e6b73a55a81a324848749f4861919dffbc9effdf8be1f6a8af73b401a29fb282040002359673468df647df1b23f01ecf34476f718b28ec67a1bda331d2f247ef05168bca4449be0d4afd74b4929c1aada081e87ea3c3ef48ba51f06b08f348b49551139929e6bafc94bf1c65b6f09e22fff75dca664cf1aaea4a0975778cfcd9c1c86ef2112b7fee48bb676d56bfc6d17172f51a6c4c856f71d8", 0x9a}, {&(0x7f0000000200)="5eb8556ccc5042e49241383c6ac592a0d9917e7d503f59437e719132cd22f651e14a6f1f476ea8e514dbf9e06811f3f9d185e6ef09296acccd42834c37b1da68872f1aca99b4fbd7294c801c89edd85eba26c943064418382c6370fc341ad9356af6f1b000be6c3076a96528d17f0502238015fac4887cdadb2a4a20438361261abcc4ae500079f82ac447b4cd7ce00d1bfd6a1db0ff0936d5fa0ba5fc02c206c042232a3514f68b8da3d0910b0b8a1f87e90e20066a6be45daca7e55c00fb5761ef5d242e3791c2", 0xc8}], 0x3, &(0x7f0000000340)=[{0x100, 0x10d, 0x6, "55b3e90307d9d43d66d87a6789f87eff343c74770993b8658470f912660a3dc85ccf0daa9731e63fdb83218d0381e15fb32556045fb4234423ad01d077ef3d6367fafb830e7ad41fcb55b47a0e0b6d9cffceb009f00199a7c3c03a2f4f50088b4b0dda53fe52ee87a7498629c864b325315dc4bf308046f2350bf1ad0bde4e43f07fcbbcdb9ef1da90186a00168ec9ff16fe8bcaa95da5785bebfa9303521047e6de41fbde000e89416f2852deda6da5368298cbb93f0b365e610e8fa956091e5e1d05463882959ad9138aa61c5ca4fb80ba0487b36064ed52aad8890b52a3e59b545eb3f951de83f0bfdc9422d0c55b"}, {0x78, 0x10e, 0x3, "8cf461abfb240ec272b8ef4259f8302b2682b958b5c726ec262f90fe21b4598ac99836be40ee70bf6561dfaa515b96576241026c20c992a019ccb8e12e5af36d203c3ba402c9de57e9454c1a0613af2ca14a840c4051fc90e1b580a33af184824552"}, {0xf0, 0xff, 0x4, "4ca21c3b4d36081119777e5c385942470d55f4fe094dfb39d7a93f9daa4a2ea159da69fd69a90277aa9f86d5120df41809b76c31f1fb7e94de0958597cfd5cdb2ac86eaccc450322997eefcbf21cf5bf691f7c3b41ad38cee49610034fdb4f0677bd11c7e93daa73efbe1a364652c7540c827237cdb0706062e914b9e768f7b0957ec68714ce7abc526251cccb081822225d89f3e25daa1c954ed736eeb061c6389fe7ca7c49b910fbfc9e06ed3600a30fd5d83e4723edd709b5d05dc2213b36fa23775f4b0bbb61f454e4fc4c093170b65ce6b5de4c4f22738b"}], 0x268}, 0x20000000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600), 0x101880, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000640), &(0x7f0000000680)=0xe) r2 = getpid() getpgid(r2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000006c0)={0x0, 0x8, 0x4, 0x7, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3c}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000700)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000780)={0x48, 0x7, r4, 0x0, 0x1, 0x0, 0x3, 0x10142, 0x21af40}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000900)={0x14, &(0x7f0000000800)={0x0, 0x6, 0xaf, {0xaf, 0x30, "2e9c9bdd37e43e3a6079e7a08490c59d28f06ac11b17218b04394193c8a90927ab64cdb145c13717c1cbd07001a8f06dfd9601f55a259fc22e5a19a34d26b8953de9e962e5638091d38a70d5e475819f244dce4fe8565d5f468fa943af465a10f4a71bc24a001d157dcf9eba8ea4ba9024e291e23f30ba9584e1fccd598cbf848779bac1021d4fb41024822b1524e7b0093a2a93981f8d8b097ef66d3cbccf87c8d62775574f21620f6b166058"}}, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x1c, &(0x7f0000000940)={0x20, 0x13, 0x2c, "c1babd565273480e0ab79743f3ac18474b989f2ad6e0e42dae832c42c42461387c3a3b0f72506042ea9532b3"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0xfa}}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000a40), 0x50680, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000a80)) syz_open_dev$vbi(&(0x7f0000000ac0), 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x109000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000cc0)={'wg2\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001040)={r5, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f0000000e40)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000e80), &(0x7f0000000ec0), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000f00)}}, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)={0x1b, 0x0, 0x0, 0x6, 0x0, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x5, 0x12, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x40, 0x2, 0x5, 0x8, 0xc2d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='syzkaller\x00', 0x9, 0x58, &(0x7f0000000c40)=""/88, 0x40f00, 0x8, '\x00', r6, @fallback=0x5, r5, 0x8, &(0x7f0000000d00)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000d40)={0x2, 0xc, 0x7d8c, 0x6}, 0x10, r7, r5, 0x5, &(0x7f0000001100)=[0x1, r1, r8], &(0x7f0000001140)=[{0x1, 0x1, 0x2, 0x1}, {0x5, 0x4, 0x5, 0x3}, {0x3, 0x5, 0xb, 0x8}, {0x4, 0x5, 0xf, 0x5}, {0x2, 0x5, 0x3, 0x3}], 0x10, 0x2c9}, 0x94) r9 = syz_open_dev$loop(&(0x7f0000001280), 0x57f, 0x22100) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f00000012c0)={'\x00', 0x0, 0x9, 0x5, 0xffffffffffff0001, 0x6, r2}) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000001340)) r10 = accept4(r1, 0x0, &(0x7f0000001380), 0x80000) bind$inet(r10, &(0x7f00000013c0)={0x2, 0x4e21, @loopback}, 0x10) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) ioctl$VIDIOC_G_STD(r11, 0x80085617, &(0x7f0000001440)) accept4$inet6(r10, &(0x7f0000001480)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000014c0)=0x1c, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000001500)={{0x1, 0x1, 0x18, r9, {0x4e}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r0, &(0x7f0000001540)={0x10002008}) 16.24726059s ago: executing program 1 (id=3359): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) keyctl$read(0x20, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x2000c050) socket$alg(0x26, 0x5, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80800) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x4008af14, 0x0) 12.880178351s ago: executing program 1 (id=3363): syz_open_dev$sg(0x0, 0x0, 0x8002) chdir(0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101041, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES8=r0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r3, &(0x7f0000000c00), 0x0}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000000008000, 0x0, 0xd4}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224"], 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg$inet6(r4, &(0x7f0000000400), 0x0, 0x24065c21) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f00000003c0)) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x8}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x2c, r7, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x36c71cac}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xbc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000041) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'dvmrp0\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x30}, 0x0, 0x238, 0x268, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@rt={{0x138}, {0xf, [0xd, 0x4], 0x0, 0x4, 0x6, [@empty, @private0, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @loopback, @loopback, @mcast2], 0xa}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x10, 0xffffffffffffffff, &(0x7f0000000000)=0x9700) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000003c0000006cfb060a0104000000000000000095ea46610100000014000480100001800b00010072656a6563740000a3000b40000000000900010073797a3000000000140000001100010000000000000000000000000ac70750a4ec6f481b"], 0x84}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000980)=ANY=[], 0x24c) listen(0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 11.61276585s ago: executing program 5 (id=3366): syz_usb_connect(0x0, 0x81, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000a08000140000000170900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) shutdown(r2, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in=@loopback, 0x4e20, 0x5, 0x4e23, 0x81, 0xa, 0x20, 0xa0, 0x0, 0x0, r4}, {0x8, 0x7, 0x8, 0x2, 0x3, 0xffffffffffff27b7, 0xa2, 0xfffffffffffffffc}, {0x1, 0x1, 0x2, 0x9}, 0xf19c, 0x6e6bb9, 0x2, 0x0, 0x1, 0x3}, {{@in6=@mcast1, 0x4d5, 0x33}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x3506, 0x2, 0x3, 0x7, 0x9, 0x0, 0x5}}, 0xe8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002880)={0xffffffffffffffff, 0xffffffffffffffff, 0x1f, 0x0, @void}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) socket(0x848000000015, 0x805, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="434a596143cc", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @address_request}}}}, 0x0) 10.222616311s ago: executing program 5 (id=3369): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000700), 0xeba, 0x80) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x20000010, &(0x7f00000002c0)=[{0xa, 0x2, 0x4, 0x7864}, {0x5, 0xff, 0xd8, 0xa52}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x1152c0, 0x0) write$vga_arbiter(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="636520696f2b6d658ca3"], 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00f6ffffff000000b402000014000000b7030000000000008500000083f00000b70900000000000055090100000000009500000000000000bf91000000000000b780b86fa07b4d296b00000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x90) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000080)=0x804, 0x4) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000040)=0x181, 0x4) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x44000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'wlan1\x00', 0x2}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0xf, 0x9}, {0x9}, {0xb, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r9, 0x4068aea3, &(0x7f0000000140)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000000)=@arm64={0x7f, 0x4, 0xf, '\x00', 0x3}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000240)) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000180)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x9, 0x81, 0x0, 0x0, 0xfffffff7, 0x5, 0x3, 0x37f2, 0x8, 0x0}) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 9.059392405s ago: executing program 3 (id=3372): syz_usb_connect(0x5, 0x3da, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xae, 0x9a, 0x15, 0x20, 0xa07, 0x64, 0xeae3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c8, 0x2, 0x4, 0x40, 0x20, 0x0, [{{0x9, 0x4, 0x81, 0x8, 0x8, 0xe2, 0xbb, 0xa0, 0x1, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x62a, 0x9, 0x0, 0xf9}, [@mdlm_detail={0xdb, 0x24, 0x13, 0x40, "e9b6086d456d469d8ff0ff988e9265a936b1dce7d4799c9c84db8d2c0ecc144f81ee687ed68a49f0cd5292937e7d6cf3b4ad1534f5a2af9b02a5ff357416062ac51f452782ee763eeade7121145389ba9d87924ac4e0504bb69c94adfd49170eb46a4896d924398ef4230402725be88a14623101df55f392cc0c4ed0232555513da1d417d3023b6d008ebaeef97bb16ee955d6c92c25fb94aa7e77621c894b10fc008b2c30db41375a3dc42f26353762f513833e8a0a1fa39162c16bce0e3a8ab7b193ae04f78a038a48a45df87ac1bc9a96c2fdd7d4a5"}, @dmm={0x7, 0x24, 0x14, 0x4, 0x3}, @ncm={0x6, 0x24, 0x1a, 0xfff, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x4, 0xe}, @mdlm_detail={0x89, 0x24, 0x13, 0x9e, "10272499cc491e12fd8dddb5c9a47ef63b6fff981240e29b34934c23b4a2b090410bb3f7c05f4d163ca975c0492107fb7474a4f2b97341be6d35ea6475f919810b3de1098652f50412265241e762670047ba61d321ace08cffbcc3cb2d7978bd00d1ce0b97f0d8031109ce4886a695bbbc7f4449bd915b046c972dd6349d03210f9d60dee5"}]}, @generic={0xf, 0x22, "8563a22c450a365d5b14c09bb4"}], [{{0x9, 0x5, 0xa, 0x2, 0x20, 0x0, 0xa, 0x20, [@generic={0x31, 0xc, "0fe42eadb09c222d50c539e07565d9d6401c572d61569969f1a7541acdea86a9f6adaac41a6cfc5f6453360d4ff1fc"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0xc, 0xff, 0x2e}}, {{0x9, 0x5, 0x80, 0x10, 0x1f7, 0xf7, 0x75, 0x6}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0xa, 0xff, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x27, 0x5}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x5, 0x6, 0xf5}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x4, 0x3, 0x9}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0xed, 0x7, 0xe}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x0, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x4}]}}]}}, {{0x9, 0x4, 0xbe, 0x54, 0x6, 0x5, 0x7e, 0xc4, 0x5, [], [{{0x9, 0x5, 0xf, 0x7, 0x20, 0x61, 0x56, 0xed}}, {{0x9, 0x5, 0x7, 0x2, 0x4e0, 0x3, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x7c77}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xfffd}]}}, {{0x9, 0x5, 0x4, 0x0, 0x228, 0xf, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x8}]}}, {{0x9, 0x5, 0x6, 0x16, 0x200, 0x2, 0xba, 0x2}}, {{0x9, 0x5, 0x4, 0x567003a9be0129b0, 0x400, 0x2, 0x3, 0x0, [@generic={0x4b, 0x30, "d8b1919d32e489bd77637a4ea489517b6160c70fa7baf978c63e11af6838f1926af7fc083c3b6c7abcb61021c5a996e546d3e633a6868b6810410bc69b136a3a907901a25a35529529"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x3ff, 0x9, 0x3, 0xf7, [@generic={0x38, 0x30, "8605b44a539caf0f469be355c8437f7a7d5348815c2d2dba9bb1ea49d45471d1c80a319ee76279bac6530c8bcbb6bf2b92058684d7fb"}, @generic={0xb2, 0x5, "d3fd7d49d7a8fdb52c0d391dbe323298ca300addd65c75855a426caae06a4692a7976e7a5f278bc47af1f16d6e7a1814668df9e000d614d509cc82d0f08abfb1181f8695315e704098376d7630cd183a15dedd44c8606a1d06fc6ffed6974e716f4d5be268dac9fc03ee73c4987d5ac91f279b9480f07f6ce6f39f73d428e3bed4ff9a49075ee325f0f15c8ef8f51c469f6e1b48d6b1ad63b6007020a6c85fc34bc7c1c5ebd06c45f61f9ceaddfde9d3"}]}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x300, 0x9, 0x0, 0x4, 0x20, 0x3}, 0x48, &(0x7f0000000540)={0x5, 0xf, 0x48, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x1cc8000, 0xf0f, 0x8, [0x30, 0x0]}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x3, 0xf888, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x74, 0x5, 0x9, 0xf000, 0x8, [0xff3fc0, 0x0, 0x0, 0xf, 0xffc0c0]}]}, 0x1, [{0xf1, &(0x7f00000005c0)=@string={0xf1, 0x3, "e4af73b883a3089df9aae193abe8dd0c9e0855986c04cfe02aed4b507a343f89934e2b292c92ab50ff51ed077bd2816dd8067d45408804fd7fd57ee7b206e2da05260e942956ccf2dd662a7a21bb577d38244b496d0dbb266a44b56370a0af2adb678184cd0c8848c782f819a6cd21458e57febd8fe7744382880d2a4638f41d61c690a1013193b98ff0a95e069aec8562978fa4c1a7035a993d133c9fcfd944b0a546497f1bdd2cb2003ff88cef13b991aa6d0ade10929ef610639bc1888f713e9d13e6ec297035e1ab9f43b4ca244c552d1a9149941f19c90a557c48707e3b8ae0187ae9ed201397888c9e8fd619"}}]}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x40000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000740)=0x10) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000780)) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r1, 0x4008af75, &(0x7f00000007c0)={0x2, 0x7}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000900)={'wg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x9, &(0x7f0000000800)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @ldst={0x0, 0x1, 0x0, 0x4, 0xb, 0xffffffffffffffe0, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000880)='GPL\x00', 0x9, 0x0, &(0x7f00000008c0), 0x41100, 0x38, '\x00', r2, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x9, 0xbf, 0x10001}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000980)=[{0x2, 0x2, 0x0, 0xd}, {0x4, 0x1, 0x7, 0x4}, {0x2, 0x4, 0x0, 0x5}, {0x2, 0x2, 0xd, 0x3}, {0x1, 0x1, 0x10, 0xb}, {0x0, 0x2, 0x9, 0x1}, {0x4, 0x1, 0x6}, {0x4, 0x2, 0xb, 0xb}, {0x1, 0x2, 0x2}], 0x10, 0x4}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b00), 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000b40)={0x0, 0x1000, "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"}, &(0x7f0000001b80)=0x1008) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000001bc0)={r3, 0x12}, &(0x7f0000001c00)=0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001c40)) r4 = request_key(&(0x7f0000001d40)='.request_key_auth\x00', &(0x7f0000001d80)={'syz', 0x3}, &(0x7f0000001dc0)='{\x00', 0xfffffffffffffffe) add_key(&(0x7f0000001c80)='rxrpc_s\x00', &(0x7f0000001cc0)={'syz', 0x1}, &(0x7f0000001d00)="53549baf01b4d8f265dd6eb5fd0bd6cb062d313fecc0260b1931eacd81189aa26099f6a2ab451e192b7cb002a077d339f1b387913acb38f92c10ba850f", 0x3d, r4) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000001e40)=@arm64={0x6, 0x9, 0x1, '\x00', 0x3}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001fc0)=0x0) stat(&(0x7f0000002000)='./file0\x00', &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) sendmmsg$unix(r1, &(0x7f0000002240)=[{{&(0x7f0000001e80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001f00)="f5c11ac948b6077af6861cc412343d", 0xf}, {&(0x7f0000001f40)="0d489e9c89cf4b5b", 0x8}], 0x2, &(0x7f0000002200)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r7, r8}}}], 0x40, 0x1}}], 0x1, 0x0) 8.995720348s ago: executing program 5 (id=3373): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) keyctl$read(0x20, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x2000c050) socket$alg(0x26, 0x5, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80800) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x4008af14, 0x0) 8.780111176s ago: executing program 0 (id=3374): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000001000000000000000700000085000000a000000095000000000000002c252bfe49518634bb85626ae18e1622a946af364ef5816043bd5a88ad2e42ebb68db9c7026e7133d0c52d519283c90b3e083c9c3c5e20adfd6edcb4006d66d86377f6108dce3a4740797247e871408373127e2c6f65a5697e727de1b7b8a1d13a93b059"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r2, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x80) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.45967823s ago: executing program 0 (id=3375): getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0xffffa888, 0x0, 0x300}, 0x8810) 8.344973367s ago: executing program 0 (id=3376): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x1, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xc0, 0xf8, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x10, 0x81, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x5}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x8, 0x7, 0x6, 0x0, 0x9}, 0x1c, &(0x7f0000000540)={0x5, 0xf, 0x1c, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0xb, 0x7f, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0xa, 0xfff7}]}, 0x1, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1849}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000600)={0x14, &(0x7f00000006c0)={0x40, 0xf, 0xc0, {0xc0, 0x22, "25e023c37329c2eb632048ada95cc4cb68a3c89db0b2b4902afe08578949d79117f6c64914639b7da09f2f1f0f44d48304b74d1091570fe151aa8efcdb5617664982debd9dc853b2efcfadf936931ca30553a5a714ce02c776eff9ab17252972859fb7c2ab97c9e53eef48367a77c4d97dd6097a9237829fc5ad6bda153d9e6f04936c1e2943ac33db3a7e578049cca791e3f62fe099704a0733a280db227426f01173e60d1868ac3fe72529dc14ca8455a7d39f0e7327d6e966cb27af06"}}, &(0x7f00000008c0)={0x0, 0x3, 0xae, @string={0xae, 0x3, "d52c0c229a421cdb02eeb13eeba17cdd89892cbecf8af15b8a9e7f731806c5f817e27da21fa43dfdb19df033339219aad307944af9d4618f4fbbcc795bfcd2667f14fd1dbab814bb4d903501b0b92ec782ef8109691d49026b42e84d4787ee36dde4cc5d22a134d4f2099b817709b97041d4c624a4786464396c87b9c21d3643483ea3c2720a75c138f540d38ae36baa4dbecd10c19c67f9c04974550f04b6df3a6081faf4c496bd5bc9e116"}}}, &(0x7f0000000c40)={0x34, &(0x7f0000000980)={0x0, 0x17, 0x56, "75588ed02444dce53f9849550224b9d3f24a8220de1094538c3fe0b5f1038509484d61b09bc158987440f5f80ebc65d18c2138fe0af5291f59516f6fe4df21e3d28808eb8881ff074829508bdadcfe33f318b7338ee0"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000b40)={0x20, 0x0, 0xce, {0xcc, "e18206fd8a748ea9f25a17a55d3a7e94b86506c748e63e2b1bc670afdaca89bd5f211136637b8ff869c77c16de640dbaac8f1baaf08d1940d943a0bc27d15b18a3db50c4d8d368084ed94fca1e6db94a3002c5f02196cbf6bf562ae42f21657d3caa788ec2552a19f5636a90114b660ed560346a0b866d103fd9946ff29a27402e52751b2153f476db12f30352eb5bcd4684e260b7918ce9704b988e108b312baf4a2a494d34d0f3cc94655239e74a6e4e6adf4f0c009aed9e12e293b99b56d56ed162485a47298525cef6b9"}}, &(0x7f0000000a00)={0x20, 0x1, 0x1, 0x57}, &(0x7f0000000a40)={0x20, 0x0, 0x1, 0xd1}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x40, 0x7, 0x3, {0x3, 0x22, '6'}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_4={0x3, 0x0, 0xa, "d0f8f592"}, @global=@item_012={0x1, 0x1, 0x8, "a5"}, @local=@item_012={0x0, 0x2, 0x1}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0x613}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x0, 0x9, 0x9a, "881775958cf8b9d784ac36b3d7c7da362dafd2fadaba0d14ac1d6e69d8c941cc0e6e62760b1bcec40e18da231a4644c9b87a85db5ad8dcd58838699e9e13bdafd3674ab3396a5f1b00000491bbeaa57e5edff640be944814b6264c65f5e2950c4210e966ff73d48a74a99f532ebd597da6c3227ac8e3ba6b79be3b9c4cc0ccc63c70db1ed7b2ffbe1b7465170948a992d7c240a3f1eaeb2579a3"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000300)={0x20, 0x1, 0xce, "dd213d144def84191e282f8bf562cb6e03c5719d064d22fb6e87b2da0ecf18247784c75064de5aced41d801216a3f34dca4558a82f9f2b9e6b6c3e6888685471571c31ebcdc8e58e69ce26a3c6eedb78d03c20f84badec0329fa19c66c7b1b3450ef5f9bf6f94f94180e0cefdf1875d8e842555b563ca5afb9e41b332a23e1b0c443c61394954a08a1c19349da1a57bce7a051656e4722f13fe033050c24f3d2e586837c3e81798987da05cf124a6c017743c8e1550bc4df9d063b4f5cf37add363d6b05c4f2caa7eaf4b8601189"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x6}}) 8.226812774s ago: executing program 1 (id=3377): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'k'}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x16, 0x7e, @random="fcbe447baddad9e8dbaab79d50f8d5beb77e"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4851}, 0x4804) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.74422087s ago: executing program 1 (id=3378): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002f80)={0x1c, &(0x7f0000000e80)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.520779494s ago: executing program 5 (id=3379): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000040)={{0xfd, 0x3}, 0x0, 0x0, 0x2, {0x4, 0x8}, 0x3, 0x800}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x939e, 0x1, 0xfffffffe, 0x35}, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000800)={&(0x7f0000002000)={[{0x0, 0x0, 0x2}]}, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000001000)=ANY=[@ANYBLOB="440f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000980)={0x34, &(0x7f00000006c0)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000d00)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.371371376s ago: executing program 3 (id=3380): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000a40), &(0x7f0000000000)=""/10, 0x2}, 0x20) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0xcf, 0x94, 0x0, 0x8, 0x13d3, 0x3349, 0x2635, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0xb1, 0x7, 0x0, 0x6f, 0x2d, 0x87, 0xb, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0xc2}}]}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x25, 0x0}) 5.398750624s ago: executing program 33 (id=3347): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e24, 0x4, @private2, 0xf9}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)="d34a1a8a081837e8f79aa9b89f7c389ce3608f21d9357aee1eae8e57c672900774f69d44dd6e05996c039f316eea76f5a63f389330f6dfcd35273459f2623dc2a5fd59164483af347957cbcfe4b25170bd062b91a15c6700bb10b972917cf9347b26d1215e995b1e96e51fd5ca6756a96070f0224fbb5957ab72f91cf1de15c0161bdeac698e99456f0e1d8b4e0dbd4de50b96a999005f39ded0bafb50dd65594855a715824a1080ba654067276cad0df2e4b3", 0xb3}, {&(0x7f0000000140)="e6b73a55a81a324848749f4861919dffbc9effdf8be1f6a8af73b401a29fb282040002359673468df647df1b23f01ecf34476f718b28ec67a1bda331d2f247ef05168bca4449be0d4afd74b4929c1aada081e87ea3c3ef48ba51f06b08f348b49551139929e6bafc94bf1c65b6f09e22fff75dca664cf1aaea4a0975778cfcd9c1c86ef2112b7fee48bb676d56bfc6d17172f51a6c4c856f71d8", 0x9a}, {&(0x7f0000000200)="5eb8556ccc5042e49241383c6ac592a0d9917e7d503f59437e719132cd22f651e14a6f1f476ea8e514dbf9e06811f3f9d185e6ef09296acccd42834c37b1da68872f1aca99b4fbd7294c801c89edd85eba26c943064418382c6370fc341ad9356af6f1b000be6c3076a96528d17f0502238015fac4887cdadb2a4a20438361261abcc4ae500079f82ac447b4cd7ce00d1bfd6a1db0ff0936d5fa0ba5fc02c206c042232a3514f68b8da3d0910b0b8a1f87e90e20066a6be45daca7e55c00fb5761ef5d242e3791c2", 0xc8}], 0x3, &(0x7f0000000340)=[{0x100, 0x10d, 0x6, "55b3e90307d9d43d66d87a6789f87eff343c74770993b8658470f912660a3dc85ccf0daa9731e63fdb83218d0381e15fb32556045fb4234423ad01d077ef3d6367fafb830e7ad41fcb55b47a0e0b6d9cffceb009f00199a7c3c03a2f4f50088b4b0dda53fe52ee87a7498629c864b325315dc4bf308046f2350bf1ad0bde4e43f07fcbbcdb9ef1da90186a00168ec9ff16fe8bcaa95da5785bebfa9303521047e6de41fbde000e89416f2852deda6da5368298cbb93f0b365e610e8fa956091e5e1d05463882959ad9138aa61c5ca4fb80ba0487b36064ed52aad8890b52a3e59b545eb3f951de83f0bfdc9422d0c55b"}, {0x78, 0x10e, 0x3, "8cf461abfb240ec272b8ef4259f8302b2682b958b5c726ec262f90fe21b4598ac99836be40ee70bf6561dfaa515b96576241026c20c992a019ccb8e12e5af36d203c3ba402c9de57e9454c1a0613af2ca14a840c4051fc90e1b580a33af184824552"}, {0xf0, 0xff, 0x4, "4ca21c3b4d36081119777e5c385942470d55f4fe094dfb39d7a93f9daa4a2ea159da69fd69a90277aa9f86d5120df41809b76c31f1fb7e94de0958597cfd5cdb2ac86eaccc450322997eefcbf21cf5bf691f7c3b41ad38cee49610034fdb4f0677bd11c7e93daa73efbe1a364652c7540c827237cdb0706062e914b9e768f7b0957ec68714ce7abc526251cccb081822225d89f3e25daa1c954ed736eeb061c6389fe7ca7c49b910fbfc9e06ed3600a30fd5d83e4723edd709b5d05dc2213b36fa23775f4b0bbb61f454e4fc4c093170b65ce6b5de4c4f22738b"}], 0x268}, 0x20000000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600), 0x101880, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000640), &(0x7f0000000680)=0xe) r2 = getpid() getpgid(r2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000006c0)={0x0, 0x8, 0x4, 0x7, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3c}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000700)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000780)={0x48, 0x7, r4, 0x0, 0x1, 0x0, 0x3, 0x10142, 0x21af40}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000900)={0x14, &(0x7f0000000800)={0x0, 0x6, 0xaf, {0xaf, 0x30, "2e9c9bdd37e43e3a6079e7a08490c59d28f06ac11b17218b04394193c8a90927ab64cdb145c13717c1cbd07001a8f06dfd9601f55a259fc22e5a19a34d26b8953de9e962e5638091d38a70d5e475819f244dce4fe8565d5f468fa943af465a10f4a71bc24a001d157dcf9eba8ea4ba9024e291e23f30ba9584e1fccd598cbf848779bac1021d4fb41024822b1524e7b0093a2a93981f8d8b097ef66d3cbccf87c8d62775574f21620f6b166058"}}, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x1c, &(0x7f0000000940)={0x20, 0x13, 0x2c, "c1babd565273480e0ab79743f3ac18474b989f2ad6e0e42dae832c42c42461387c3a3b0f72506042ea9532b3"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0xfa}}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000a40), 0x50680, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000a80)) syz_open_dev$vbi(&(0x7f0000000ac0), 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x109000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000cc0)={'wg2\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001040)={r5, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f0000000e40)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000e80), &(0x7f0000000ec0), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000f00)}}, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)={0x1b, 0x0, 0x0, 0x6, 0x0, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x5, 0x12, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x40, 0x2, 0x5, 0x8, 0xc2d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='syzkaller\x00', 0x9, 0x58, &(0x7f0000000c40)=""/88, 0x40f00, 0x8, '\x00', r6, @fallback=0x5, r5, 0x8, &(0x7f0000000d00)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000d40)={0x2, 0xc, 0x7d8c, 0x6}, 0x10, r7, r5, 0x5, &(0x7f0000001100)=[0x1, r1, r8], &(0x7f0000001140)=[{0x1, 0x1, 0x2, 0x1}, {0x5, 0x4, 0x5, 0x3}, {0x3, 0x5, 0xb, 0x8}, {0x4, 0x5, 0xf, 0x5}, {0x2, 0x5, 0x3, 0x3}], 0x10, 0x2c9}, 0x94) r9 = syz_open_dev$loop(&(0x7f0000001280), 0x57f, 0x22100) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f00000012c0)={'\x00', 0x0, 0x9, 0x5, 0xffffffffffff0001, 0x6, r2}) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000001340)) r10 = accept4(r1, 0x0, &(0x7f0000001380), 0x80000) bind$inet(r10, &(0x7f00000013c0)={0x2, 0x4e21, @loopback}, 0x10) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) ioctl$VIDIOC_G_STD(r11, 0x80085617, &(0x7f0000001440)) accept4$inet6(r10, &(0x7f0000001480)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000014c0)=0x1c, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000001500)={{0x1, 0x1, 0x18, r9, {0x4e}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r0, &(0x7f0000001540)={0x10002008}) 5.280676177s ago: executing program 1 (id=3382): syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @loopback, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010101}, {@private}, {@multicast1}, {@remote}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private}]}]}}}}}}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = accept(r1, &(0x7f00000001c0)=@ieee802154, &(0x7f0000000140)=0x80) shutdown(r2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) link(0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x3) write$ppp(r4, &(0x7f0000000300)="5af9", 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000180)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a4, &(0x7f0000000040)={{@any, 0xffff7dff}, @hyper, 0x2, 0x0, 0x3, 0x8, 0x0, 0x4000000, 0x7}) 5.133273703s ago: executing program 0 (id=3383): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) read(r1, &(0x7f00000002c0)=""/113, 0x20) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) syz_open_dev$vim2m(&(0x7f0000000280), 0x0, 0x2) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) preadv2(r4, &(0x7f0000000840)=[{&(0x7f0000000300)=""/207, 0xcf}, {&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f00000006c0)=""/134, 0x86}, {&(0x7f0000000440)=""/141, 0x8d}], 0x4, 0x3, 0xfffffffd, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb200090581b402"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18) connect$can_j1939(r5, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 4.693828997s ago: executing program 3 (id=3384): r0 = socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @loopback={0x218, 0x7ffffffe}}, 0x80, 0x0}, 0x20000001) 3.668069134s ago: executing program 3 (id=3385): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) rt_sigpending(0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x70000, 0x0) openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x42) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffd, 0x6, 0xff, @scatter={0x0, 0x1200, 0x0}, &(0x7f00000000c0)="eaff48000000", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) ftruncate(0xffffffffffffffff, 0x200004) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000020ac0100", @ANYRES32, @ANYBLOB="be0f000000000000000000005e00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) socket$inet(0x2, 0xa, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000140)=0x2, 0x4) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, 0x0, 0x0, 0x1004000, 0x0, &(0x7f00000001c0)}) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000240), 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)=@x86={0x5, 0x10, 0xa3, 0x0, 0x401, 0x81, 0x3, 0x1, 0xff, 0x9, 0xa3, 0x2, 0x0, 0x1, 0x21, 0x7, 0x10, 0x7, 0x1, '\x00', 0x8, 0xa}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e21, @local}], 0x20) sendto$inet6(r8, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 2.865224949s ago: executing program 5 (id=3386): getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0xc3}}, 0x20}, 0x1, 0xffffa888, 0x0, 0x300}, 0x8810) 2.441327205s ago: executing program 5 (id=3387): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000000843550400000000000001090324000100000000090400000103000000092100000001220b00090581030000000000"], 0x0) socket$kcm(0x2, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) preadv(r5, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r5, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r4, 0xff08, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.423968716s ago: executing program 1 (id=3388): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) io_setup(0x67, &(0x7f0000000800)=0x0) io_destroy(r0) io_setup(0xe, &(0x7f0000000880)) io_cancel(r0, &(0x7f00000070c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000000)="10", 0x5e0, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x6, 0x6, @broadcast}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r7, &(0x7f0000000200)=""/204, 0xcc) syz_usb_disconnect(r6) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201222f4c0fbc5722d0a1a440000102030109025c00020106080d0904000001020d0000052406000105240004000d240f0107000000040001000306241a0600000905810300040afc020904010000020d00000904010102020d0000090582020004bd080a090503024000020303"], 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r8, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=ANY=[@ANYBLOB="340000001100010027bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c0000000001400001400350077673200000000000010000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 1.980111909s ago: executing program 0 (id=3389): socket$key(0xf, 0x3, 0x2) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') (async) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x40045b17, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000140), 0x1007, 0x10b00) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x190}}, 0x80) (async, rerun: 64) r6 = add_key$keyring(&(0x7f00000011c0), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r6, 0x0, 0x0) (async) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f00000001c0)=""/4096) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) (async) socket(0x40000000015, 0x4, 0x0) syz_io_uring_setup(0x1e83, 0x0, &(0x7f0000000000), &(0x7f0000000280)) unshare(0x8000000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) 969.928844ms ago: executing program 3 (id=3390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x0) 682.689666ms ago: executing program 3 (id=3391): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/29, 0x1d, 0x2b) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000006c0)={0x0, 0x0, 0x7}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090100030002000007"], 0x0) 0s ago: executing program 0 (id=3392): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x1, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xc0, 0xf8, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x10, 0x81, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x5}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x8, 0x7, 0x6, 0x0, 0x9}, 0x1c, &(0x7f0000000540)={0x5, 0xf, 0x1c, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0xb, 0x7f, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0xa, 0xfff7}]}, 0x1, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1849}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000600)={0x14, &(0x7f00000006c0)={0x40, 0xf, 0xc0, {0xc0, 0x22, "25e023c37329c2eb632048ada95cc4cb68a3c89db0b2b4902afe08578949d79117f6c64914639b7da09f2f1f0f44d48304b74d1091570fe151aa8efcdb5617664982debd9dc853b2efcfadf936931ca30553a5a714ce02c776eff9ab17252972859fb7c2ab97c9e53eef48367a77c4d97dd6097a9237829fc5ad6bda153d9e6f04936c1e2943ac33db3a7e578049cca791e3f62fe099704a0733a280db227426f01173e60d1868ac3fe72529dc14ca8455a7d39f0e7327d6e966cb27af06"}}, &(0x7f00000008c0)={0x0, 0x3, 0xae, @string={0xae, 0x3, "d52c0c229a421cdb02eeb13eeba17cdd89892cbecf8af15b8a9e7f731806c5f817e27da21fa43dfdb19df033339219aad307944af9d4618f4fbbcc795bfcd2667f14fd1dbab814bb4d903501b0b92ec782ef8109691d49026b42e84d4787ee36dde4cc5d22a134d4f2099b817709b97041d4c624a4786464396c87b9c21d3643483ea3c2720a75c138f540d38ae36baa4dbecd10c19c67f9c04974550f04b6df3a6081faf4c496bd5bc9e116"}}}, &(0x7f0000000c40)={0x34, &(0x7f0000000980)={0x0, 0x17, 0x56, "75588ed02444dce53f9849550224b9d3f24a8220de1094538c3fe0b5f1038509484d61b09bc158987440f5f80ebc65d18c2138fe0af5291f59516f6fe4df21e3d28808eb8881ff074829508bdadcfe33f318b7338ee0"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000b40)={0x20, 0x0, 0xce, {0xcc, "e18206fd8a748ea9f25a17a55d3a7e94b86506c748e63e2b1bc670afdaca89bd5f211136637b8ff869c77c16de640dbaac8f1baaf08d1940d943a0bc27d15b18a3db50c4d8d368084ed94fca1e6db94a3002c5f02196cbf6bf562ae42f21657d3caa788ec2552a19f5636a90114b660ed560346a0b866d103fd9946ff29a27402e52751b2153f476db12f30352eb5bcd4684e260b7918ce9704b988e108b312baf4a2a494d34d0f3cc94655239e74a6e4e6adf4f0c009aed9e12e293b99b56d56ed162485a47298525cef6b9"}}, &(0x7f0000000a00)={0x20, 0x1, 0x1, 0x57}, &(0x7f0000000a40)={0x20, 0x0, 0x1, 0xd1}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x40, 0x7, 0x3, {0x3, 0x22, '6'}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_4={0x3, 0x0, 0xa, "d0f8f592"}, @global=@item_012={0x1, 0x1, 0x8, "a5"}, @local=@item_012={0x0, 0x2, 0x1}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0x613}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x0, 0x9, 0x9a, "881775958cf8b9d784ac36b3d7c7da362dafd2fadaba0d14ac1d6e69d8c941cc0e6e62760b1bcec40e18da231a4644c9b87a85db5ad8dcd58838699e9e13bdafd3674ab3396a5f1b00000491bbeaa57e5edff640be944814b6264c65f5e2950c4210e966ff73d48a74a99f532ebd597da6c3227ac8e3ba6b79be3b9c4cc0ccc63c70db1ed7b2ffbe1b7465170948a992d7c240a3f1eaeb2579a3"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000300)={0x20, 0x1, 0xce, "dd213d144def84191e282f8bf562cb6e03c5719d064d22fb6e87b2da0ecf18247784c75064de5aced41d801216a3f34dca4558a82f9f2b9e6b6c3e6888685471571c31ebcdc8e58e69ce26a3c6eedb78d03c20f84badec0329fa19c66c7b1b3450ef5f9bf6f94f94180e0cefdf1875d8e842555b563ca5afb9e41b332a23e1b0c443c61394954a08a1c19349da1a57bce7a051656e4722f13fe033050c24f3d2e586837c3e81798987da05cf124a6c017743c8e1550bc4df9d063b4f5cf37add363d6b05c4f2caa7eaf4b8601189"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x6}}) kernel console output (not intermixed with test programs): 2-1: config 4 interface 190 altsetting 84 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 1307.418130][ T44] usb 2-1: config 4 interface 129 has no altsetting 0 [ 1307.427016][ T44] usb 2-1: config 4 interface 190 has no altsetting 0 [ 1307.449972][ T44] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=ea.e3 [ 1307.543500][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.554876][ T44] usb 2-1: Product: syz [ 1307.576494][ T44] usb 2-1: Manufacturer: syz [ 1307.597418][ T44] usb 2-1: SerialNumber: syz [ 1307.657036][T17719] Bluetooth: hci0: command 0x041b tx timeout [ 1307.670185][T17665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1307.688671][T17834] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1307.704928][T17665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1307.717647][T17665] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.727579][T17665] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.748686][T17665] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.758618][T17665] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.922164][ T44] adutux 2-1:4.129: interrupt endpoints not found [ 1307.983268][ T44] adutux 2-1:4.190: interrupt endpoints not found [ 1308.017302][ T44] usb 2-1: USB disconnect, device number 106 [ 1308.141340][T17007] usb 3-1: USB disconnect, device number 126 [ 1308.372609][T10758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.431339][T10758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.487011][ T44] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1308.513551][T16256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.531575][T16256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.627043][T17007] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1308.797957][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 1309.012967][T17007] usb 3-1: config 0 has an invalid interface number: 90 but max is 0 [ 1309.045667][ T44] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1309.060060][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.081318][T17007] usb 3-1: config 0 has no interface number 0 [ 1309.088311][ T44] usb 2-1: Product: syz [ 1309.092704][ T44] usb 2-1: Manufacturer: syz [ 1309.101614][ T44] usb 2-1: SerialNumber: syz [ 1309.120433][ T44] usb 2-1: config 0 descriptor?? [ 1309.135754][T17007] usb 3-1: too many endpoints for config 0 interface 90 altsetting 183: 192, using maximum allowed: 30 [ 1309.140010][ T44] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1309.248789][T17007] usb 3-1: config 0 interface 90 altsetting 183 has 0 endpoint descriptors, different from the interface descriptor's value: 192 [ 1309.437089][T17007] usb 3-1: config 0 interface 90 has no altsetting 0 [ 1309.452904][T17007] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1309.466976][T17007] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.488130][T17007] usb 3-1: config 0 descriptor?? [ 1309.730586][T17007] usb 3-1: string descriptor 0 read error: -32 [ 1309.743977][T17007] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1309.812418][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1309.812437][ T30] audit: type=1326 audit(1751401284.606:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17855 comm="syz.2.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3cb32ab19 code=0x7ffc0000 [ 1309.930325][T17007] usb 3-1: USB disconnect, device number 127 [ 1310.060699][ T30] audit: type=1326 audit(1751401284.606:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17855 comm="syz.2.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3cb32ab19 code=0x7ffc0000 [ 1310.299955][ T30] audit: type=1326 audit(1751401284.606:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17855 comm="syz.2.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3cb32ab19 code=0x7ffc0000 [ 1310.450341][ T30] audit: type=1326 audit(1751401284.606:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17855 comm="syz.2.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3cb32ab19 code=0x7ffc0000 [ 1310.697058][ T30] audit: type=1326 audit(1751401284.606:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17855 comm="syz.2.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cb38e929 code=0x7ffc0000 [ 1310.733844][T17872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.777395][ T44] gspca_sonixj: reg_w1 err -110 [ 1310.785541][ T44] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 1310.805188][T17872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.882767][ T30] audit: type=1326 audit(1751401284.606:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17855 comm="syz.2.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3cb32ab19 code=0x7ffc0000 [ 1311.008314][ T30] audit: type=1326 audit(1751401284.606:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17855 comm="syz.2.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cb38e929 code=0x7ffc0000 [ 1311.166957][ T30] audit: type=1326 audit(1751401284.606:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17855 comm="syz.2.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3cb32ab19 code=0x7ffc0000 [ 1311.345861][ T30] audit: type=1326 audit(1751401284.606:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17855 comm="syz.2.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3cb38e929 code=0x7ffc0000 [ 1311.448213][ T30] audit: type=1326 audit(1751401284.606:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17855 comm="syz.2.3116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3cb32ab19 code=0x7ffc0000 [ 1313.227368][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1313.255176][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1313.268336][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1313.289010][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1313.296976][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1313.722734][ T6122] usb 2-1: USB disconnect, device number 107 [ 1314.184853][T16256] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.566990][ T6122] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1314.710907][T16256] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.717152][ T6122] usb 4-1: Using ep0 maxpacket: 16 [ 1314.749237][ T6122] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1314.800123][ T6122] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1314.897074][ T6122] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1315.007990][ T6122] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1315.090530][ T6122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.112664][ T6122] usb 4-1: Product: syz [ 1315.118078][ T6122] usb 4-1: Manufacturer: syz [ 1315.132837][ T6122] usb 4-1: SerialNumber: syz [ 1315.168489][T16256] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.417407][ T5836] Bluetooth: hci1: command tx timeout [ 1315.634185][ T6122] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1315.739938][ T6122] usb 4-1: USB disconnect, device number 17 [ 1315.882885][T16256] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.657024][ T6122] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1316.827109][ T6122] usb 4-1: Using ep0 maxpacket: 8 [ 1316.969398][T17883] chnl_net:caif_netlink_parms(): no params data found [ 1317.466843][ T5836] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 1317.498306][ T5836] Bluetooth: hci1: command tx timeout [ 1317.511665][ T6123] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1317.589624][ T6122] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1317.631890][ T6122] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1317.647787][ T6122] usb 4-1: can't read configurations, error -71 [ 1317.668988][ T6123] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1317.679093][ T6123] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1317.794683][ T6123] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1317.817489][ T6123] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1317.844707][ T6123] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1317.854322][ T6123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.863570][ T6123] usb 2-1: Product: syz [ 1317.872848][ T6123] usb 2-1: Manufacturer: syz [ 1317.896196][ T6123] usb 2-1: SerialNumber: syz [ 1317.930726][ T6123] usb 2-1: config 0 descriptor?? [ 1317.940039][ T6123] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 1318.264903][ T6123] scsi host1: usb-storage 2-1:0.0 [ 1318.322877][ T6123] usb 2-1: USB disconnect, device number 108 [ 1318.834838][T16256] dvmrp3 (unregistering): left allmulticast mode [ 1319.240956][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1319.240973][ T30] audit: type=1326 audit(1751401294.036:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.3.3132" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f7ed8e929 code=0x0 [ 1319.577537][ T5836] Bluetooth: hci1: command tx timeout [ 1319.647311][T16256] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 1319.655797][T16256] bridge3 (unregistering): left promiscuous mode [ 1319.810235][T16256] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 1319.845904][T16256] bridge5 (unregistering): left promiscuous mode [ 1321.124377][T17719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1321.148062][T17719] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1321.162366][T17719] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1321.189079][T17719] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1321.209729][T17719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1321.326970][T16256] bond0 (unregistering): Released all slaves [ 1321.368625][T16256] bond1 (unregistering): Released all slaves [ 1321.648924][T16256] bond2 (unregistering): Released all slaves [ 1321.657288][T17719] Bluetooth: hci1: command tx timeout [ 1321.902356][T16256] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1321.920769][T16256] bond3 (unregistering): Released all slaves [ 1321.992781][T16256] bond4 (unregistering): Released all slaves [ 1322.345944][T16256] bond5 (unregistering): Released all slaves [ 1322.875725][T16256] bond6 (unregistering): Released all slaves [ 1323.212241][T16256] tipc: Disabling bearer [ 1323.228108][T16256] tipc: Left network mode [ 1323.286960][T17719] Bluetooth: hci3: command tx timeout [ 1323.350936][T17971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3139'. [ 1323.527450][ T6122] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1323.589325][T17883] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.613359][T17883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.677267][T17883] bridge_slave_0: entered allmulticast mode [ 1323.719203][T17883] bridge_slave_0: entered promiscuous mode [ 1323.802499][T17883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.851400][T17883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.887222][T17883] bridge_slave_1: entered allmulticast mode [ 1323.937824][T17883] bridge_slave_1: entered promiscuous mode [ 1324.395029][T17883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.258554][T17883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1325.347682][T17719] Bluetooth: hci3: command tx timeout [ 1325.425083][T16256] hsr_slave_0: left promiscuous mode [ 1325.488669][T16256] hsr_slave_1: left promiscuous mode [ 1325.508373][T16256] batman_adv: batadv0: Interface deactivated: dummy0 [ 1325.551141][T16256] batman_adv: batadv0: Removing interface: dummy0 [ 1325.639980][T18002] netlink: 'syz.1.3142': attribute type 4 has an invalid length. [ 1325.852742][T16256] veth0_macvtap: left promiscuous mode [ 1325.885870][T16256] veth1_vlan: left promiscuous mode [ 1325.933397][T16256] veth0_vlan: left promiscuous mode [ 1327.097248][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1327.260837][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1327.312846][ T10] usb 4-1: config 0 has no interfaces? [ 1327.332525][ T10] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1327.399658][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.428550][T17719] Bluetooth: hci3: command tx timeout [ 1327.437322][ T10] usb 4-1: Product: syz [ 1327.441546][ T10] usb 4-1: Manufacturer: syz [ 1327.449751][ T10] usb 4-1: SerialNumber: syz [ 1327.472315][ T10] usb 4-1: config 0 descriptor?? [ 1328.112927][T18011] FAULT_INJECTION: forcing a failure. [ 1328.112927][T18011] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.126185][T18011] CPU: 1 UID: 0 PID: 18011 Comm: syz.3.3146 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1328.126214][T18011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1328.126228][T18011] Call Trace: [ 1328.126237][T18011] [ 1328.126246][T18011] dump_stack_lvl+0x189/0x250 [ 1328.126285][T18011] ? __pfx____ratelimit+0x10/0x10 [ 1328.126315][T18011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1328.126347][T18011] ? __pfx__printk+0x10/0x10 [ 1328.126374][T18011] ? __lock_acquire+0xab9/0xd20 [ 1328.126412][T18011] should_fail_ex+0x414/0x560 [ 1328.126442][T18011] should_failslab+0xa8/0x100 [ 1328.126466][T18011] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1328.126498][T18011] ? skb_clone+0x212/0x3a0 [ 1328.126523][T18011] ? __pfx_skb_network_protocol+0x10/0x10 [ 1328.126554][T18011] skb_clone+0x212/0x3a0 [ 1328.126584][T18011] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 1328.126611][T18011] dev_queue_xmit_nit+0x416/0xcc0 [ 1328.126634][T18011] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 1328.126670][T18011] dev_hard_start_xmit+0x1be/0x830 [ 1328.126715][T18011] __dev_queue_xmit+0x1adf/0x3a70 [ 1328.126748][T18011] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1328.126784][T18011] ? __dev_queue_xmit+0x27e/0x3a70 [ 1328.126811][T18011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.126852][T18011] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1328.126895][T18011] ? __copy_skb_header+0xa7/0x550 [ 1328.126922][T18011] ? __asan_memcpy+0x40/0x70 [ 1328.126971][T18011] ? skb_clone+0x246/0x3a0 [ 1328.127001][T18011] __netlink_deliver_tap+0x5ad/0x850 [ 1328.127038][T18011] ? netlink_deliver_tap+0x2e/0x1b0 [ 1328.127063][T18011] netlink_deliver_tap+0x19c/0x1b0 [ 1328.127087][T18011] netlink_unicast+0x72f/0x8d0 [ 1328.127120][T18011] netlink_sendmsg+0x805/0xb30 [ 1328.127153][T18011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1328.127181][T18011] ? aa_sock_msg_perm+0x94/0x160 [ 1328.127208][T18011] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1328.127235][T18011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1328.127260][T18011] __sock_sendmsg+0x219/0x270 [ 1328.127294][T18011] ____sys_sendmsg+0x505/0x830 [ 1328.127325][T18011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1328.127361][T18011] ? import_iovec+0x74/0xa0 [ 1328.127385][T18011] ___sys_sendmsg+0x21f/0x2a0 [ 1328.127412][T18011] ? __pfx____sys_sendmsg+0x10/0x10 [ 1328.127477][T18011] ? __fget_files+0x2a/0x420 [ 1328.127499][T18011] ? __fget_files+0x3a0/0x420 [ 1328.127534][T18011] __x64_sys_sendmsg+0x19b/0x260 [ 1328.127568][T18011] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1328.127605][T18011] ? __pfx_ksys_write+0x10/0x10 [ 1328.127622][T18011] ? rcu_is_watching+0x15/0xb0 [ 1328.127659][T18011] ? do_syscall_64+0xbe/0x3b0 [ 1328.127694][T18011] do_syscall_64+0xfa/0x3b0 [ 1328.127723][T18011] ? lockdep_hardirqs_on+0x9c/0x150 [ 1328.127751][T18011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.127771][T18011] ? clear_bhb_loop+0x60/0xb0 [ 1328.127797][T18011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.127817][T18011] RIP: 0033:0x7f6f7ed8e929 [ 1328.127837][T18011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1328.127855][T18011] RSP: 002b:00007f6f7fc54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1328.127878][T18011] RAX: ffffffffffffffda RBX: 00007f6f7efb6160 RCX: 00007f6f7ed8e929 [ 1328.127893][T18011] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1328.127907][T18011] RBP: 00007f6f7fc54090 R08: 0000000000000000 R09: 0000000000000000 [ 1328.127920][T18011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1328.127932][T18011] R13: 0000000000000000 R14: 00007f6f7efb6160 R15: 00007f6f7f0dfa28 [ 1328.127965][T18011] [ 1329.500317][T17719] Bluetooth: hci3: command tx timeout [ 1330.889545][ T6123] usb 4-1: USB disconnect, device number 21 [ 1330.934774][T17883] team0: Port device team_slave_0 added [ 1331.134576][T17883] team0: Port device team_slave_1 added [ 1331.401267][T17883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1331.437062][T17883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1331.494941][T17883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1331.577812][T17883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1331.584842][T17883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1331.676977][T17883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1331.757092][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1331.906983][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1332.157488][ T10] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 1332.165733][ T10] usb 4-1: config 4 has no interface number 0 [ 1332.173210][ T10] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1332.324208][T17883] hsr_slave_0: entered promiscuous mode [ 1332.365708][T17883] hsr_slave_1: entered promiscuous mode [ 1332.385326][T17883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1332.394272][ T10] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1332.423709][T17883] Cannot create hsr debugfs directory [ 1332.493814][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1332.604151][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.745185][ T10] hub 4-1:4.128: USB hub found [ 1332.954423][T17956] chnl_net:caif_netlink_parms(): no params data found [ 1333.005699][T18036] netlink: 'syz.3.3152': attribute type 16 has an invalid length. [ 1333.014459][T16256] IPVS: stop unused estimator thread 0... [ 1333.033500][T18036] netlink: 'syz.3.3152': attribute type 17 has an invalid length. [ 1333.315470][T18035] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.571429][T18035] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.785263][ T10] hub 4-1:4.128: config failed, can't read hub descriptor (err -22) [ 1334.918105][ T10] usb 4-1: USB disconnect, device number 22 [ 1335.487361][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1335.900759][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1335.913893][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1335.976062][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1336.016757][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1336.087576][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1336.112521][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.177251][ T10] usb 4-1: config 0 descriptor?? [ 1336.244543][T18055] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1336.268786][ T10] hub 4-1:0.0: USB hub found [ 1336.481154][T17956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.487056][ T10] hub 4-1:0.0: 2 ports detected [ 1336.507226][T17956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.538060][T17956] bridge_slave_0: entered allmulticast mode [ 1336.569689][T17956] bridge_slave_0: entered promiscuous mode [ 1336.719909][T17956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.758486][T17956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.765835][T17956] bridge_slave_1: entered allmulticast mode [ 1336.837934][T17956] bridge_slave_1: entered promiscuous mode [ 1337.487567][T18055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.507586][T18055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1338.149345][T17956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1338.449736][ T6122] usb 4-1: USB disconnect, device number 23 [ 1338.881608][T17956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.549380][T17956] team0: Port device team_slave_0 added [ 1339.582782][T17956] team0: Port device team_slave_1 added [ 1339.785991][T17956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.826770][T17956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.880024][T17956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.949996][T18102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1340.003009][T17956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1340.038284][T17956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1340.050249][T18104] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=77 (154 ns) > initial count (16 ns). Using initial count to start timer. [ 1340.200924][T17956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1340.363965][T18105] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1341.008357][T17956] hsr_slave_0: entered promiscuous mode [ 1341.030957][T17956] hsr_slave_1: entered promiscuous mode [ 1341.049951][T17956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1341.069448][T17956] Cannot create hsr debugfs directory [ 1341.363542][T18120] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3167'. [ 1341.826588][T17883] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1342.014916][T17883] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1342.061575][T17883] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1342.100924][T17883] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1343.387115][ T6123] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1343.508039][T17956] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1343.545034][T17883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1343.555098][T17956] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1343.559197][ T6123] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 1343.573059][T18145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3172'. [ 1343.592280][T17956] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1343.748909][T17956] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1343.768489][ T6123] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1343.778122][ T6123] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.786131][ T6123] usb 4-1: Product: syz [ 1343.790414][ T6123] usb 4-1: Manufacturer: syz [ 1343.804273][ T6123] usb 4-1: SerialNumber: syz [ 1343.985971][ T6123] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1344.029760][T17883] 8021q: adding VLAN 0 to HW filter on device team0 [ 1344.120038][T11323] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1344.289682][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.297022][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1344.336139][T18139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.347786][T18139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.358155][T18139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.398950][T18139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.478265][T18139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.537938][T18139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.566695][T10761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.574026][T10761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1344.670709][T17007] usb 4-1: USB disconnect, device number 24 [ 1345.177299][T11323] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1345.212837][T11323] ath9k_htc: Failed to initialize the device [ 1345.249164][T17007] usb 4-1: ath9k_htc: USB layer deinitialized [ 1345.293455][T17883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1345.387376][T17956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1345.545506][T17956] 8021q: adding VLAN 0 to HW filter on device team0 [ 1345.634776][T10765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.642009][T10765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1345.647044][T17007] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1345.771647][T16256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.779007][T16256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1345.847025][T17007] usb 4-1: device descriptor read/64, error -71 [ 1346.014142][T17883] veth0_vlan: entered promiscuous mode [ 1346.138211][T17007] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1346.220716][T17883] veth1_vlan: entered promiscuous mode [ 1346.572502][T17956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1346.620927][T17883] veth0_macvtap: entered promiscuous mode [ 1346.647491][T16160] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1346.666631][T17883] veth1_macvtap: entered promiscuous mode [ 1346.832712][T16160] usb 2-1: Using ep0 maxpacket: 8 [ 1346.843173][T16160] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1346.846082][T17883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1346.863135][T16160] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.923809][T16160] usb 2-1: Product: syz [ 1346.973676][T17883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1346.981599][T16160] usb 2-1: Manufacturer: syz [ 1346.986257][T16160] usb 2-1: SerialNumber: syz [ 1347.026681][T16160] usb 2-1: config 0 descriptor?? [ 1347.176170][T17883] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.216440][T17883] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.258662][T17883] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.267595][T16160] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1347.316955][T17883] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.498120][T17956] veth0_vlan: entered promiscuous mode [ 1347.618904][T17956] veth1_vlan: entered promiscuous mode [ 1348.049577][T17956] veth0_macvtap: entered promiscuous mode [ 1348.110961][T17956] veth1_macvtap: entered promiscuous mode [ 1348.127689][T10761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.163824][T10761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.339895][T17956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1348.394283][T17956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1348.453348][T10759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.486780][T17956] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.512168][T10759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.540990][T17956] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.577290][T17956] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.606384][T17956] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.367638][T10767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1349.441331][T10767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.570999][T16160] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1349.630751][T16160] usb 2-1: USB disconnect, device number 109 [ 1349.640133][T10767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1349.652975][T10767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1350.298338][T14671] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1350.413459][T18214] FAULT_INJECTION: forcing a failure. [ 1350.413459][T18214] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.426755][T18214] CPU: 1 UID: 0 PID: 18214 Comm: syz.2.3184 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1350.426791][T18214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1350.426804][T18214] Call Trace: [ 1350.426813][T18214] [ 1350.426823][T18214] dump_stack_lvl+0x189/0x250 [ 1350.426864][T18214] ? __pfx____ratelimit+0x10/0x10 [ 1350.426892][T18214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1350.426922][T18214] ? __pfx__printk+0x10/0x10 [ 1350.426944][T18214] ? rhashtable_lookup+0x667/0x6b0 [ 1350.426974][T18214] ? __pfx_xfrm_pol_bin_cmp+0x10/0x10 [ 1350.426998][T18214] ? __pfx_rhashtable_lookup+0x10/0x10 [ 1350.427026][T18214] should_fail_ex+0x414/0x560 [ 1350.427056][T18214] should_failslab+0xa8/0x100 [ 1350.427077][T18214] __kmalloc_cache_noprof+0x70/0x3d0 [ 1350.427093][T18214] ? xfrm_policy_inexact_alloc_bin+0x3a5/0x15b0 [ 1350.427120][T18214] ? xfrm_policy_inexact_alloc_bin+0x1a5/0x15b0 [ 1350.427147][T18214] ? xfrm_policy_inexact_alloc_bin+0x1a5/0x15b0 [ 1350.427172][T18214] xfrm_policy_inexact_alloc_bin+0x3a5/0x15b0 [ 1350.427197][T18214] ? register_lock_class+0x51/0x320 [ 1350.427233][T18214] ? __lock_acquire+0xab9/0xd20 [ 1350.427269][T18214] ? __pfx_xfrm_policy_inexact_alloc_bin+0x10/0x10 [ 1350.427296][T18214] ? __get_hash_thresh+0x10e/0x420 [ 1350.427322][T18214] ? policy_hash_bysel+0x191/0x6e0 [ 1350.427345][T18214] xfrm_policy_inexact_insert+0x1e/0x180 [ 1350.427369][T18214] xfrm_policy_insert+0x116/0x940 [ 1350.427400][T18214] xfrm_add_policy+0x2e2/0x800 [ 1350.427430][T18214] ? __pfx_xfrm_add_policy+0x10/0x10 [ 1350.427451][T18214] ? apparmor_capable+0x137/0x1b0 [ 1350.427488][T18214] ? __nla_parse+0x40/0x60 [ 1350.427522][T18214] xfrm_user_rcv_msg+0x7a3/0xab0 [ 1350.427552][T18214] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1350.427611][T18214] ? __mutex_trylock_common+0x153/0x260 [ 1350.427636][T18214] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1350.427664][T18214] ? rcu_is_watching+0x15/0xb0 [ 1350.427697][T18214] ? trace_contention_end+0x39/0x120 [ 1350.427724][T18214] netlink_rcv_skb+0x205/0x470 [ 1350.427750][T18214] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1350.427775][T18214] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1350.427824][T18214] ? netlink_deliver_tap+0x2e/0x1b0 [ 1350.427847][T18214] ? netlink_deliver_tap+0x2e/0x1b0 [ 1350.427873][T18214] xfrm_netlink_rcv+0x79/0x90 [ 1350.427897][T18214] netlink_unicast+0x758/0x8d0 [ 1350.427929][T18214] netlink_sendmsg+0x805/0xb30 [ 1350.427964][T18214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1350.427990][T18214] ? aa_sock_msg_perm+0x94/0x160 [ 1350.428019][T18214] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1350.428044][T18214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1350.428069][T18214] __sock_sendmsg+0x219/0x270 [ 1350.428104][T18214] ____sys_sendmsg+0x505/0x830 [ 1350.428135][T18214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1350.428171][T18214] ? import_iovec+0x74/0xa0 [ 1350.428194][T18214] ___sys_sendmsg+0x21f/0x2a0 [ 1350.428222][T18214] ? __pfx____sys_sendmsg+0x10/0x10 [ 1350.428287][T18214] ? __fget_files+0x2a/0x420 [ 1350.428309][T18214] ? __fget_files+0x3a0/0x420 [ 1350.428344][T18214] __x64_sys_sendmsg+0x19b/0x260 [ 1350.428372][T18214] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1350.428409][T18214] ? __pfx_ksys_write+0x10/0x10 [ 1350.428426][T18214] ? rcu_is_watching+0x15/0xb0 [ 1350.428463][T18214] ? do_syscall_64+0xbe/0x3b0 [ 1350.428499][T18214] do_syscall_64+0xfa/0x3b0 [ 1350.428528][T18214] ? lockdep_hardirqs_on+0x9c/0x150 [ 1350.428556][T18214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.428577][T18214] ? clear_bhb_loop+0x60/0xb0 [ 1350.428602][T18214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.428623][T18214] RIP: 0033:0x7fc26418e929 [ 1350.428642][T18214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1350.428661][T18214] RSP: 002b:00007fc26507b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1350.428683][T18214] RAX: ffffffffffffffda RBX: 00007fc2643b5fa0 RCX: 00007fc26418e929 [ 1350.428699][T18214] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 1350.428712][T18214] RBP: 00007fc26507b090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.428725][T18214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.428738][T18214] R13: 0000000000000000 R14: 00007fc2643b5fa0 R15: 00007fc2644dfa28 [ 1350.428771][T18214] [ 1350.846914][T16159] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1351.477042][T14671] usb 4-1: Using ep0 maxpacket: 16 [ 1351.485584][T14671] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1351.497905][T14671] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1351.517086][T14671] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1351.538082][T14671] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1351.551909][T14671] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.638093][T14671] usb 4-1: config 0 descriptor?? [ 1351.746965][T16159] usb 6-1: Using ep0 maxpacket: 32 [ 1351.875180][T16159] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1351.977442][T16159] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.012469][T16159] usb 6-1: Product: syz [ 1352.034092][T16159] usb 6-1: Manufacturer: syz [ 1352.063544][T16159] usb 6-1: SerialNumber: syz [ 1352.185230][T14671] HID 045e:07da: Invalid code 65791 type 1 [ 1352.205865][T16159] usb 6-1: config 0 descriptor?? [ 1352.232956][T16159] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1352.259045][T18224] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1352.266398][T18224] IPv6: NLM_F_CREATE should be set when creating new route [ 1352.273677][T18224] IPv6: NLM_F_CREATE should be set when creating new route [ 1352.312869][T14671] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.003E/input/input127 [ 1352.506563][T14671] microsoft 0003:045E:07DA.003E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1352.653861][T14671] usb 4-1: USB disconnect, device number 27 [ 1353.481216][T18228] fido_id[18228]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1354.184810][T18242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3136'. [ 1354.735029][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1354.757820][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1354.767533][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1354.776330][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1354.784167][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1354.857904][T18249] futex_wake_op: syz.2.3187 tries to shift op by -33; fix this program [ 1355.148125][T16159] gspca_stk1135: reg_w 0x350 err -71 [ 1355.154523][T16159] gspca_stk1135: serial bus timeout: status=0x00 [ 1355.227365][T16159] gspca_stk1135: Sensor write failed [ 1355.248306][T16159] gspca_stk1135: serial bus timeout: status=0x00 [ 1355.291945][T16159] gspca_stk1135: Sensor write failed [ 1355.339365][T16159] gspca_stk1135: serial bus timeout: status=0x00 [ 1355.345776][T16159] gspca_stk1135: Sensor read failed [ 1355.461246][T16159] gspca_stk1135: serial bus timeout: status=0x00 [ 1355.511924][T16159] gspca_stk1135: Sensor read failed [ 1355.542353][T16159] gspca_stk1135: Detected sensor type unknown (0x0) [ 1355.590163][T16159] gspca_stk1135: serial bus timeout: status=0x00 [ 1355.647350][T16160] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 1355.667110][T16159] gspca_stk1135: Sensor read failed [ 1355.729646][T16159] gspca_stk1135: serial bus timeout: status=0x00 [ 1355.795459][T16159] gspca_stk1135: Sensor read failed [ 1355.822337][T16160] usb 2-1: config 7 interface 0 has no altsetting 0 [ 1355.847483][T16159] gspca_stk1135: serial bus timeout: status=0x00 [ 1355.897022][T16159] gspca_stk1135: Sensor write failed [ 1355.907735][T16160] usb 2-1: string descriptor 0 read error: -22 [ 1355.935738][T16159] gspca_stk1135: serial bus timeout: status=0x00 [ 1355.954599][T16160] usb 2-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 1355.981057][T16159] gspca_stk1135: Sensor write failed [ 1356.007092][T16160] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.017057][T16159] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 1356.112695][T16159] usb 6-1: USB disconnect, device number 2 [ 1356.150130][T16160] usb 2-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 1356.175570][T10759] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.352820][T16160] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1356.406249][T16160] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 1356.436677][T16160] usb 2-1: media controller created [ 1356.608698][T16160] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1356.871967][ T5836] Bluetooth: hci6: command tx timeout [ 1357.174345][T10759] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.928404][T10759] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.037852][T18259] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3190'. [ 1358.249586][T10759] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.812251][T17007] usb 2-1: USB disconnect, device number 110 [ 1358.937106][T14671] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1358.937349][ T5836] Bluetooth: hci6: command tx timeout [ 1359.145124][T18253] chnl_net:caif_netlink_parms(): no params data found [ 1359.173341][T14671] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 1359.207034][T14671] usb 3-1: config 0 has an invalid interface number: 4 but max is 2 [ 1359.226994][T14671] usb 3-1: config 0 has no interface number 0 [ 1359.234624][T14671] usb 3-1: config 0 has no interface number 1 [ 1359.244920][T14671] usb 3-1: too many endpoints for config 0 interface 4 altsetting 255: 255, using maximum allowed: 30 [ 1359.347620][T14671] usb 3-1: config 0 interface 4 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1359.374856][T14671] usb 3-1: config 0 interface 4 has no altsetting 0 [ 1359.392092][T14671] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1359.440400][T14671] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.580060][T14671] usb 3-1: config 0 descriptor?? [ 1359.727918][T16160] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1359.802504][T14671] usb 3-1: Could not set interface, error -71 [ 1359.891572][T14671] usb 3-1: selecting invalid altsetting 0 [ 1359.986615][T16160] usb 2-1: Using ep0 maxpacket: 16 [ 1360.002375][T14671] usb 3-1: Could not set interface, error -22 [ 1360.017754][T16160] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 1360.025965][T16160] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.078336][T14671] usb 3-1: USB disconnect, device number 2 [ 1360.096023][T16160] usb 2-1: config 0 has no interface number 0 [ 1360.123287][T16160] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1360.141286][T16160] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.157602][T16160] usb 2-1: Product: syz [ 1360.182912][T16160] usb 2-1: Manufacturer: syz [ 1360.229295][T16160] usb 2-1: SerialNumber: syz [ 1360.288520][T16160] usb 2-1: config 0 descriptor?? [ 1360.350402][T16160] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1360.767546][ T44] usb 2-1: USB disconnect, device number 111 [ 1360.797511][T16256] usb 2-1: Failed to submit usb control message: -71 [ 1360.893728][T16256] usb 2-1: unable to send the bmi data to the device: -71 [ 1360.975718][T16256] usb 2-1: unable to get target info from device [ 1361.006275][T16160] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1361.038146][ T5836] Bluetooth: hci6: command tx timeout [ 1361.091956][T16256] usb 2-1: could not get target info (-71) [ 1361.147495][T16256] usb 2-1: could not probe fw (-71) [ 1361.306962][T16160] usb 6-1: Using ep0 maxpacket: 16 [ 1361.340781][T16160] usb 6-1: config 0 has an invalid interface number: 68 but max is 0 [ 1361.349142][T16160] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.379879][T16160] usb 6-1: config 0 has no interface number 0 [ 1361.386151][T16160] usb 6-1: config 0 interface 68 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1361.447930][T16160] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1361.457505][T16160] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.465975][T16160] usb 6-1: Product: syz [ 1361.472532][T16160] usb 6-1: Manufacturer: syz [ 1361.478230][T16160] usb 6-1: SerialNumber: syz [ 1361.547427][T16160] usb 6-1: config 0 descriptor?? [ 1361.592296][T10759] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1361.664788][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.683349][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.702018][T16160] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1362.089287][T11323] usb 6-1: USB disconnect, device number 3 [ 1362.148321][T16256] usb 6-1: Failed to submit usb control message: -71 [ 1362.242383][T16256] usb 6-1: unable to send the bmi data to the device: -71 [ 1362.287293][T16256] usb 6-1: unable to get target info from device [ 1362.328827][T16256] usb 6-1: could not get target info (-71) [ 1362.337287][T16256] usb 6-1: could not probe fw (-71) [ 1363.097097][ T5836] Bluetooth: hci6: command tx timeout [ 1365.094240][T10759] bond0 (unregistering): Released all slaves [ 1365.673795][T18364] futex_wake_op: syz.2.3202 tries to shift op by -33; fix this program [ 1366.013432][T10759] bond1 (unregistering): (slave veth3): Releasing active interface [ 1366.071179][T10759] bond1 (unregistering): Released all slaves [ 1366.476344][T18253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.511882][T18253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.527848][T18253] bridge_slave_0: entered allmulticast mode [ 1366.594430][T18253] bridge_slave_0: entered promiscuous mode [ 1366.626549][T10759] tipc: Disabling bearer [ 1366.637476][T10759] tipc: Left network mode [ 1366.675644][T18366] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1366.682100][T18253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.690963][T10759] IPVS: stopping backup sync thread 11320 ... [ 1366.702815][T18253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.733684][T18366] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1366.760105][T18366] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1366.766284][T18366] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1366.779160][T18253] bridge_slave_1: entered allmulticast mode [ 1366.817885][T18366] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1366.839172][T18253] bridge_slave_1: entered promiscuous mode [ 1366.880476][T18366] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1366.988591][T18366] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1367.001482][T18366] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1367.113346][T18366] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1367.351725][T18366] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1367.394339][T18366] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1367.573814][T18253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1367.603827][T18366] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1367.672775][T18253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1367.735166][T17719] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1367.938595][ T44] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1368.028273][ T6122] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1368.207043][ T6122] usb 6-1: Using ep0 maxpacket: 16 [ 1368.217079][ T44] usb 2-1: config index 0 descriptor too short (expected 25973, got 36) [ 1368.256548][ T6122] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 1368.268074][ T44] usb 2-1: config 111 has too many interfaces: 116, using maximum allowed: 32 [ 1368.325249][ T6122] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1368.336268][ T44] usb 2-1: config 111 has an invalid descriptor of length 47, skipping remainder of the config [ 1368.453546][ T44] usb 2-1: config 111 has 0 interfaces, different from the descriptor's value: 116 [ 1368.485558][T10759] hsr_slave_0: left promiscuous mode [ 1368.524545][ T6122] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1368.544093][T10759] hsr_slave_1: left promiscuous mode [ 1368.607845][ T6122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.637419][T10759] veth1_macvtap: left promiscuous mode [ 1368.643091][ T44] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1368.668239][T10759] veth0_macvtap: left promiscuous mode [ 1368.677111][ T6122] usb 6-1: Product: syz [ 1368.681376][ T6122] usb 6-1: Manufacturer: syz [ 1368.707237][T17719] Bluetooth: hci5: command 0x0c1a tx timeout [ 1368.718082][T10759] veth1_vlan: left promiscuous mode [ 1368.736999][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.746965][ T6122] usb 6-1: SerialNumber: syz [ 1368.759850][ T6122] usb 6-1: config 0 descriptor?? [ 1368.777201][ T5836] Bluetooth: hci0: command 0x041b tx timeout [ 1368.783366][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 1368.790785][T17719] Bluetooth: hci1: command 0x0c1a tx timeout [ 1368.797898][T18384] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1368.807768][T10759] veth0_vlan: left promiscuous mode [ 1368.808960][ T6122] hub 6-1:0.0: bad descriptor, ignoring hub [ 1368.819515][ T6122] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1368.847199][ T6122] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input128 [ 1369.024480][T17719] Bluetooth: hci3: command 0x0c1a tx timeout [ 1369.103439][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1369.182879][ T44] usb 2-1: string descriptor 0 read error: -71 [ 1369.279856][ T44] usb 2-1: USB disconnect, device number 112 [ 1369.417043][T17719] Bluetooth: hci6: command 0x0c1a tx timeout [ 1370.060305][T18384] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3206'. [ 1370.367216][T17007] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1370.529791][ T44] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1370.557056][T17007] usb 2-1: Using ep0 maxpacket: 32 [ 1370.572997][T17007] usb 2-1: config 4 has an invalid interface number: 129 but max is 0 [ 1370.596387][T17007] usb 2-1: config 4 has no interface number 0 [ 1370.639070][T17007] usb 2-1: config 4 interface 129 altsetting 8 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1370.704359][T17007] usb 2-1: config 4 interface 129 has no altsetting 0 [ 1370.721550][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 1370.753706][T17007] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=ea.e3 [ 1370.784525][ T44] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1370.800628][T17007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.845688][T17007] usb 2-1: Product: syz [ 1370.853719][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1370.868123][T17719] Bluetooth: hci1: command 0x0c1a tx timeout [ 1370.897022][T17007] usb 2-1: Manufacturer: syz [ 1370.901948][T17007] usb 2-1: SerialNumber: syz [ 1370.928100][ T44] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1370.942677][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.994105][ T44] usb 4-1: config 0 descriptor?? [ 1371.012057][ T44] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1371.097259][T17719] Bluetooth: hci3: command 0x0c1a tx timeout [ 1371.201452][T17007] adutux 2-1:4.129: interrupt endpoints not found [ 1371.305769][T17007] usb 2-1: USB disconnect, device number 113 [ 1371.507033][T17719] Bluetooth: hci6: command 0x0c1a tx timeout [ 1371.980619][T18412] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3210'. [ 1372.946930][T17719] Bluetooth: hci1: command 0x0c1a tx timeout [ 1373.191101][T17719] Bluetooth: hci3: command 0x0c1a tx timeout [ 1373.367598][T11323] usb 4-1: USB disconnect, device number 28 [ 1373.577118][T17719] Bluetooth: hci6: command 0x0c1a tx timeout [ 1373.767278][T17719] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1374.036988][T16159] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1374.217041][T16159] usb 4-1: Using ep0 maxpacket: 16 [ 1374.308946][T16159] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 1374.421274][T16159] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1374.471006][T16159] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1374.480248][T16159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.488471][T16159] usb 4-1: Product: syz [ 1374.492753][T16159] usb 4-1: Manufacturer: syz [ 1374.504638][T16159] usb 4-1: SerialNumber: syz [ 1374.563352][T16159] usb 4-1: config 0 descriptor?? [ 1374.601613][T18417] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1374.611420][T16159] hub 4-1:0.0: bad descriptor, ignoring hub [ 1374.630809][T16159] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1374.693169][T16159] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input129 [ 1375.354792][T18417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3211'. [ 1375.725897][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1375.818886][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1377.148595][T18385] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3206'. [ 1377.224780][T18418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3211'. [ 1377.299507][T18253] team0: Port device team_slave_0 added [ 1377.309929][T18253] team0: Port device team_slave_1 added [ 1377.438202][ T978] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1377.596999][ T978] usb 2-1: device descriptor read/64, error -71 [ 1377.748054][T17007] usb 4-1: USB disconnect, device number 29 [ 1377.772564][ T6122] usb 6-1: USB disconnect, device number 4 [ 1377.800116][T18253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1377.839296][T18253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1377.873817][ T978] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1377.927413][T18253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1377.944081][T18253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1377.951314][T18253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1378.027589][T18253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1378.111347][ T978] usb 2-1: device descriptor read/64, error -71 [ 1378.298957][ T978] usb usb2-port1: attempt power cycle [ 1378.687036][ T978] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1378.764089][T18253] hsr_slave_0: entered promiscuous mode [ 1378.787393][ T978] usb 2-1: device descriptor read/8, error -71 [ 1378.816481][T18253] hsr_slave_1: entered promiscuous mode [ 1378.856145][T18253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1378.927022][T18253] Cannot create hsr debugfs directory [ 1379.067060][ T978] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1379.117859][ T978] usb 2-1: device descriptor read/8, error -71 [ 1379.287336][ T978] usb usb2-port1: unable to enumerate USB device [ 1379.530097][T10759] IPVS: stop unused estimator thread 0... [ 1380.201381][T18441] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1380.229266][T18441] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1380.271755][T18441] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1380.287427][T18441] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1380.318595][T18441] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1380.358635][T18441] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1380.407050][T18445] futex_wake_op: syz.3.3216 tries to shift op by -33; fix this program [ 1380.707680][T16160] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1381.040715][T16160] usb 6-1: config index 0 descriptor too short (expected 25973, got 36) [ 1381.063097][T18458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1381.085444][T16160] usb 6-1: config 111 has too many interfaces: 116, using maximum allowed: 32 [ 1381.181928][T16160] usb 6-1: config 111 has an invalid descriptor of length 47, skipping remainder of the config [ 1381.251770][T16160] usb 6-1: config 111 has 0 interfaces, different from the descriptor's value: 116 [ 1381.316157][T16160] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1381.400557][T16160] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.676664][T16160] usb 6-1: string descriptor 0 read error: -71 [ 1381.769702][T16160] usb 6-1: USB disconnect, device number 5 [ 1382.217608][T17719] Bluetooth: hci5: command 0x0c1a tx timeout [ 1382.297768][T17719] Bluetooth: hci1: command 0x0c1a tx timeout [ 1382.306654][ T5836] Bluetooth: hci0: command 0x041b tx timeout [ 1382.312953][T10285] Bluetooth: hci4: command 0x0c1a tx timeout [ 1382.377074][T17719] Bluetooth: hci6: command 0x0c1a tx timeout [ 1382.383262][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 1382.487785][T18475] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3221'. [ 1383.280668][T18253] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1383.527564][T18253] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1383.592598][T18253] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1383.670748][T18253] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1384.520399][T18253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1384.685081][T18253] 8021q: adding VLAN 0 to HW filter on device team0 [ 1384.779325][T10758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.786502][T10758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1384.912130][T10758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.919339][T10758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1385.044470][T18499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3226'. [ 1385.102632][T18253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1385.299599][T18253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1385.658697][T18253] veth0_vlan: entered promiscuous mode [ 1385.809778][T18253] veth1_vlan: entered promiscuous mode [ 1386.240648][T18253] veth0_macvtap: entered promiscuous mode [ 1386.355096][T18253] veth1_macvtap: entered promiscuous mode [ 1386.715959][T17719] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1386.922537][T18253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1387.047047][T11323] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1387.132814][T18253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1387.209388][T18253] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.263890][T11323] usb 6-1: Using ep0 maxpacket: 16 [ 1387.363980][T11323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 1387.409053][T18253] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.426510][T11323] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1387.497326][T18253] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.506110][T18253] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.557170][T16160] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1387.600109][T11323] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1387.651602][T11323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.731505][T11323] usb 6-1: Product: syz [ 1387.735742][T11323] usb 6-1: Manufacturer: syz [ 1387.754171][T16160] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1387.779563][T11323] usb 6-1: SerialNumber: syz [ 1387.825685][T16160] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1387.849587][T11323] usb 6-1: config 0 descriptor?? [ 1387.881892][T18526] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1387.940765][T16160] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1387.942230][T11323] hub 6-1:0.0: bad descriptor, ignoring hub [ 1388.007310][T16160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.033514][T11323] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1388.119944][T11323] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input130 [ 1388.203684][T16160] usb 2-1: config 0 descriptor?? [ 1388.527945][T10765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.718049][T18539] netlink: 'syz.2.3230': attribute type 4 has an invalid length. [ 1388.729806][T10765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.797451][T16160] playstation 0003:054C:0DF2.003F: unknown main item tag 0x0 [ 1388.868285][T16160] playstation 0003:054C:0DF2.003F: unknown main item tag 0x0 [ 1388.949559][T18533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.015124][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.067415][T18533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.077288][T16160] playstation 0003:054C:0DF2.003F: unknown main item tag 0x0 [ 1389.148111][T18533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.156618][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.168601][T18533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.246786][T18526] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3228'. [ 1389.524098][ C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1389.799754][T16160] playstation 0003:054C:0DF2.003F: unknown main item tag 0x0 [ 1389.898515][T16160] playstation 0003:054C:0DF2.003F: unknown main item tag 0x0 [ 1389.957901][T16160] playstation 0003:054C:0DF2.003F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 1390.529025][T16160] playstation 0003:054C:0DF2.003F: Failed to retrieve feature with reportID 5: -71 [ 1390.596979][T16160] playstation 0003:054C:0DF2.003F: Failed to retrieve DualSense calibration info: -71 [ 1390.694653][T16160] playstation 0003:054C:0DF2.003F: Failed to get calibration data from DualSense [ 1390.806579][T16160] playstation 0003:054C:0DF2.003F: Failed to create dualsense. [ 1390.841207][T16160] playstation 0003:054C:0DF2.003F: probe with driver playstation failed with error -71 [ 1390.883695][T16160] usb 2-1: USB disconnect, device number 118 [ 1391.317105][T16160] usb 6-1: USB disconnect, device number 6 [ 1391.606682][T18563] futex_wake_op: syz.3.3232 tries to shift op by -33; fix this program [ 1392.127828][T17007] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1392.277252][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1392.317204][T17007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 1392.383442][T17007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1392.491723][T17007] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1392.507102][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1392.552446][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1392.580316][T17007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.629055][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1392.648087][T17007] usb 2-1: config 0 descriptor?? [ 1392.684071][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.724665][T18569] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1392.823325][T18576] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3238'. [ 1392.879965][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1393.237930][T18569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1393.518832][T18569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.632894][T18569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1393.665435][T18567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3236'. [ 1393.732201][T11323] IPVS: starting estimator thread 0... [ 1393.748938][T18582] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001 [ 1393.760260][T18569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.817105][T18569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1393.861733][T18569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.900337][T18583] IPVS: using max 27 ests per chain, 64800 per kthread [ 1393.941687][T17007] hid-led 0003:04D8:F372.0040: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.1-1/input0 [ 1393.983856][T11323] usb 6-1: USB disconnect, device number 7 [ 1394.285233][T17007] hid-led 0003:04D8:F372.0040: Greynut Luxafor initialized [ 1395.067518][ T44] usb 2-1: USB disconnect, device number 119 [ 1395.129648][T10761] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 1395.249252][T10761] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 1395.306698][ T37] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 1395.361161][ T37] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 1395.413409][T18599] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3245'. [ 1395.482855][ T37] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 1395.519173][ T37] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 1395.577249][ T37] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 1395.598641][T11323] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1395.621334][T18597] PKCS8: Unsupported PKCS#8 version [ 1395.634258][T18597] netlink: 'syz.2.3244': attribute type 7 has an invalid length. [ 1395.706920][T10759] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 1395.756431][T10759] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 1395.847300][T11323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 1395.867028][T17007] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 1395.895125][T10761] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 1395.949935][T11323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1395.974978][ T37] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 1396.011660][T16256] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 1396.021508][T11323] usb 6-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1396.027035][T17007] usb 4-1: device descriptor read/64, error -71 [ 1396.052402][T16256] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 1396.086189][T11323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.120426][T10759] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 1396.135899][T11323] usb 6-1: config 0 descriptor?? [ 1396.180872][T10759] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 1396.238169][T16256] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 1396.265705][T10759] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 1396.317093][T17007] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 1396.331343][T10759] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 1396.487053][T17007] usb 4-1: device descriptor read/64, error -71 [ 1396.620000][T17007] usb usb4-port1: attempt power cycle [ 1396.721181][ T44] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1396.826530][T18596] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3243'. [ 1396.952788][ T978] IPVS: starting estimator thread 0... [ 1396.967292][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 1396.982738][T18615] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001 [ 1397.008699][T17007] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 1397.014700][T18614] futex_wake_op: syz.2.3248 tries to shift op by -33; fix this program [ 1397.027815][ T44] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1397.058260][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.069883][T18616] IPVS: using max 38 ests per chain, 91200 per kthread [ 1397.096625][T11323] hid-led 0003:04D8:F372.0041: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.5-1/input0 [ 1397.118781][T17007] usb 4-1: device descriptor read/8, error -71 [ 1397.125266][ T44] usb 2-1: Product: syz [ 1397.131234][ T44] usb 2-1: Manufacturer: syz [ 1397.149552][ T44] usb 2-1: SerialNumber: syz [ 1397.187428][ T44] usb 2-1: config 0 descriptor?? [ 1397.371082][T17007] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 1397.405663][T11323] hid-led 0003:04D8:F372.0041: Greynut Luxafor initialized [ 1397.440711][T17007] usb 4-1: device descriptor read/8, error -71 [ 1397.457084][ T44] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1397.499177][T11323] usb 6-1: USB disconnect, device number 8 [ 1397.573478][T10759] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 1397.597594][T17007] usb usb4-port1: unable to enumerate USB device [ 1397.625449][T10759] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 1397.688716][T10759] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 1397.710592][T10759] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 1397.828173][T10758] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 1397.867310][T10758] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 1397.913349][T10759] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 1397.956279][T10758] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 1398.046972][ T978] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1398.068695][T10759] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 1398.128907][T10759] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 1398.171128][T10759] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 1398.183258][T10761] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 1398.197079][T10759] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 1398.208089][T10761] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 1398.237348][T10759] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 1398.252118][ T37] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 1398.266107][ T37] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 1398.285619][ T978] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1398.305706][T10758] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 1398.318352][ T978] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1398.332665][ T978] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1398.344849][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.371886][T18623] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1398.486309][ T978] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1398.670499][T18623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.700894][T18623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.817045][T11323] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1398.846090][T18623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.883565][T18623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.959623][T18623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.012407][T18623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.017833][T11323] usb 6-1: Using ep0 maxpacket: 8 [ 1399.043953][T11323] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1399.083503][T17007] usb 3-1: USB disconnect, device number 3 [ 1399.091597][T11323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.137016][T11323] usb 6-1: Product: syz [ 1399.147677][T11323] usb 6-1: Manufacturer: syz [ 1399.167319][T11323] usb 6-1: SerialNumber: syz [ 1399.192179][T11323] usb 6-1: config 0 descriptor?? [ 1399.463079][T11323] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1399.509615][ T44] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1399.525795][ T44] usb 2-1: USB disconnect, device number 120 [ 1400.258419][T18640] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3256'. [ 1400.411179][T11323] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1400.483054][T11323] usb 6-1: USB disconnect, device number 9 [ 1400.838819][ T44] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1400.879042][T18645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1401.047020][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 1401.075562][ T44] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1401.125360][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.166671][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1401.210113][ T44] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1401.237098][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.265270][ T44] usb 2-1: Product: syz [ 1401.283622][ T44] usb 2-1: Manufacturer: syz [ 1401.297289][ T44] usb 2-1: SerialNumber: syz [ 1401.448761][T18653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1401.764976][ T44] usb 2-1: 0:2 : does not exist [ 1402.303447][T18657] futex_wake_op: syz.3.3262 tries to shift op by -33; fix this program [ 1402.826189][ T44] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 1402.958187][ T44] usb 2-1: USB disconnect, device number 121 [ 1403.077817][T14659] udevd[14659]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1403.387100][T16160] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1403.536494][T18673] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1403.578913][T16160] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1403.624548][T16160] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1403.686920][T16160] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1403.735954][T16160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.787174][T18669] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1403.811010][T16160] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1404.127549][T18669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1404.166425][T18669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.222661][T18669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1404.271020][T18669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.345725][T18669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1404.387658][T18669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.430522][T14671] usb 4-1: USB disconnect, device number 34 [ 1405.937082][T16160] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1406.111353][T16160] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1406.176393][T16160] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1406.254794][T16160] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1406.446116][T16160] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1406.490184][T16160] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1406.501596][T16160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.515255][T16160] usb 3-1: Product: syz [ 1406.526129][T16160] usb 3-1: Manufacturer: syz [ 1406.557094][T16160] usb 3-1: SerialNumber: syz [ 1406.595872][T16160] usb 3-1: config 0 descriptor?? [ 1406.603486][T16160] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 1406.977734][T16160] scsi host1: usb-storage 3-1:0.0 [ 1407.033397][T16160] usb 3-1: USB disconnect, device number 4 [ 1407.462446][T18710] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3275'. [ 1408.003486][T18717] xt_hashlimit: overflow, try lower: 5/0 [ 1408.818425][T18725] futex_wake_op: syz.2.3276 tries to shift op by -33; fix this program [ 1410.524850][T18753] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1410.532197][T18753] IPv6: NLM_F_CREATE should be set when creating new route [ 1410.539472][T18753] IPv6: NLM_F_CREATE should be set when creating new route [ 1411.321314][T18764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1411.328710][T18764] IPv6: NLM_F_CREATE should be set when creating new route [ 1411.336056][T18764] IPv6: NLM_F_CREATE should be set when creating new route [ 1411.615647][T18771] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3292'. [ 1412.293575][ T30] audit: type=1326 audit(1751401387.086:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.1.3294" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbee578e929 code=0x0 [ 1412.838238][T18779] futex_wake_op: syz.0.3293 tries to shift op by -33; fix this program [ 1413.690590][T18790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1413.697990][T18790] IPv6: NLM_F_CREATE should be set when creating new route [ 1414.136026][T18801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3300'. [ 1414.401345][T18802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3301'. [ 1414.418480][T18805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1415.208126][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1415.222314][T18814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1415.419712][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1415.670682][T18818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3306'. [ 1415.725351][ T10] usb 4-1: config 0 has no interfaces? [ 1415.790157][ T10] usb 4-1: New USB device found, idVendor=1661, idProduct=0932, bcdDevice=80.ea [ 1415.897494][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.906941][ T10] usb 4-1: Product: syz [ 1415.912883][ T10] usb 4-1: Manufacturer: syz [ 1415.921959][ T10] usb 4-1: SerialNumber: syz [ 1415.929912][ T10] usb 4-1: config 0 descriptor?? [ 1415.988862][T11323] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1416.160900][T11323] usb 2-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1416.213732][T11323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.227326][T18808] tipc: Started in network mode [ 1416.228839][T11323] usb 2-1: Product: syz [ 1416.277145][T18808] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1416.286242][T11323] usb 2-1: Manufacturer: syz [ 1416.296389][T11323] usb 2-1: SerialNumber: syz [ 1416.296716][T18808] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 1416.376416][T11323] usb 2-1: config 0 descriptor?? [ 1416.411391][T11323] go7007 2-1:0.0: Sensoray 2250 found [ 1416.439831][T11323] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 1416.464622][T18808] tipc: Enabled bearer , priority 10 [ 1416.531787][T11323] usb 4-1: USB disconnect, device number 35 [ 1416.568698][T18828] input: syz0 as /devices/virtual/input/input131 [ 1416.653800][T18828] syz.5.3310 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1416.717021][T14671] usb 2-1: USB disconnect, device number 122 [ 1416.977542][T18830] futex_wake_op: syz.2.3309 tries to shift op by -33; fix this program [ 1417.577023][ T10] tipc: Node number set to 1 [ 1417.687035][T17719] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1417.746969][T16160] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1417.967022][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1417.980038][T16160] usb 2-1: Using ep0 maxpacket: 8 [ 1418.024783][T16160] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1418.060082][T16160] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.071422][T18846] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1418.092552][T16160] usb 2-1: Product: syz [ 1418.101236][T18846] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1418.119122][T16160] usb 2-1: Manufacturer: syz [ 1418.124623][T18846] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1418.132937][T16160] usb 2-1: SerialNumber: syz [ 1418.154421][T18846] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1418.194663][T16160] usb 2-1: config 0 descriptor?? [ 1418.204494][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1418.225386][T18846] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1418.244805][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 1418.260185][T18846] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1418.266183][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1418.303889][ T10] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1418.319283][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.332637][ T10] usb 4-1: Product: syz [ 1418.350032][ T10] usb 4-1: Manufacturer: syz [ 1418.398111][ T10] usb 4-1: SerialNumber: syz [ 1418.410320][ T10] usb 4-1: config 0 descriptor?? [ 1418.437027][T16160] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1418.454619][T18843] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1418.485547][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 1418.492161][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1418.503599][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input132 [ 1418.527521][T16159] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1418.990651][T16159] usb 3-1: config index 0 descriptor too short (expected 25973, got 36) [ 1419.037055][T16159] usb 3-1: config 111 has too many interfaces: 116, using maximum allowed: 32 [ 1419.074091][T16159] usb 3-1: config 111 has an invalid descriptor of length 47, skipping remainder of the config [ 1419.085310][T16159] usb 3-1: config 111 has 0 interfaces, different from the descriptor's value: 116 [ 1419.099171][T16159] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1419.219645][T16159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.498894][T18846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1419.514862][T18846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1419.543983][T16159] usb 3-1: string descriptor 0 read error: -71 [ 1419.565644][T16159] usb 3-1: USB disconnect, device number 5 [ 1419.987237][T17719] Bluetooth: hci5: command 0x0c1a tx timeout [ 1420.137181][T17719] Bluetooth: hci0: command 0x041b tx timeout [ 1420.137552][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 1420.310212][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 1420.316524][ T5836] Bluetooth: hci6: command 0x0c1a tx timeout [ 1420.322606][T17719] Bluetooth: hci3: command 0x0c1a tx timeout [ 1420.921063][T16160] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1420.986950][T16160] usb 2-1: USB disconnect, device number 123 [ 1421.033017][ T978] usb 4-1: USB disconnect, device number 36 [ 1421.377124][ T978] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1421.577156][ T978] usb 4-1: Using ep0 maxpacket: 32 [ 1421.631225][ T978] usb 4-1: config 4 has an invalid interface number: 129 but max is 1 [ 1421.738009][ T978] usb 4-1: config 4 has an invalid interface number: 190 but max is 1 [ 1421.772147][ T978] usb 4-1: config 4 has no interface number 0 [ 1421.782242][ T978] usb 4-1: config 4 has no interface number 1 [ 1421.794387][ T978] usb 4-1: config 4 interface 129 altsetting 8 bulk endpoint 0xA has invalid maxpacket 32 [ 1421.827767][ T978] usb 4-1: config 4 interface 129 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1421.891731][ T978] usb 4-1: config 4 interface 129 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 1421.952115][ T978] usb 4-1: config 4 interface 129 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 1422.052819][ T978] usb 4-1: config 4 interface 129 altsetting 8 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1422.204432][ T978] usb 4-1: config 4 interface 190 altsetting 84 has a duplicate endpoint with address 0xF, skipping [ 1422.262149][ T978] usb 4-1: config 4 interface 190 altsetting 84 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1422.310534][ T978] usb 4-1: config 4 interface 190 altsetting 84 endpoint 0x7 has invalid maxpacket 1248, setting to 1024 [ 1422.374492][ T978] usb 4-1: config 4 interface 190 altsetting 84 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1422.447697][ T978] usb 4-1: config 4 interface 190 altsetting 84 endpoint 0x4 has invalid maxpacket 552, setting to 64 [ 1422.515627][ T978] usb 4-1: config 4 interface 190 altsetting 84 has a duplicate endpoint with address 0x6, skipping [ 1422.577506][ T978] usb 4-1: config 4 interface 190 altsetting 84 has a duplicate endpoint with address 0x4, skipping [ 1422.768595][ T978] usb 4-1: config 4 interface 190 altsetting 84 bulk endpoint 0xD has invalid maxpacket 1023 [ 1422.817086][ T978] usb 4-1: config 4 interface 190 altsetting 84 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1422.877141][ T978] usb 4-1: config 4 interface 190 altsetting 84 endpoint 0x83 has an invalid bInterval 215, changing to 7 [ 1422.926907][ T978] usb 4-1: config 4 interface 190 altsetting 84 endpoint 0x83 has invalid maxpacket 16765, setting to 1024 [ 1423.045325][ T978] usb 4-1: config 4 interface 190 altsetting 84 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 1423.123144][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.129857][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.146964][ T978] usb 4-1: config 4 interface 129 has no altsetting 0 [ 1423.153809][ T978] usb 4-1: config 4 interface 190 has no altsetting 0 [ 1423.290292][ T978] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=ea.e3 [ 1423.299620][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.353027][ T978] usb 4-1: Product: syz [ 1423.425431][ T978] usb 4-1: Manufacturer: syz [ 1423.455894][ T978] usb 4-1: SerialNumber: syz [ 1423.555729][T18870] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1423.836430][ T978] adutux 4-1:4.129: interrupt endpoints not found [ 1423.883256][ T978] adutux 4-1:4.190: interrupt endpoints not found [ 1423.955811][ T978] usb 4-1: USB disconnect, device number 37 [ 1424.777716][T18900] futex_wake_op: syz.5.3325 tries to shift op by -33; fix this program [ 1425.090102][ T30] audit: type=1326 audit(1751401399.866:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.3.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7ed8e929 code=0x7ffc0000 [ 1425.182615][ T30] audit: type=1326 audit(1751401399.876:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.3.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7ed8e929 code=0x7ffc0000 [ 1425.206925][ T30] audit: type=1326 audit(1751401399.876:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.3.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f7ed8e929 code=0x7ffc0000 [ 1425.231928][ T30] audit: type=1326 audit(1751401399.876:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.3.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7ed8e929 code=0x7ffc0000 [ 1425.496108][ T30] audit: type=1326 audit(1751401399.876:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.3.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7ed8e929 code=0x7ffc0000 [ 1425.846659][T11323] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1426.185724][T11323] usb 3-1: config 0 has no interfaces? [ 1426.200115][ T30] audit: type=1326 audit(1751401399.876:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.3.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f7ed8e929 code=0x7ffc0000 [ 1426.248533][T11323] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1426.293340][T11323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.357636][T11323] usb 3-1: Product: syz [ 1426.365231][ T30] audit: type=1326 audit(1751401400.236:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.3.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7ed8e929 code=0x7ffc0000 [ 1426.410537][T11323] usb 3-1: Manufacturer: syz [ 1426.447960][T11323] usb 3-1: SerialNumber: syz [ 1426.481119][T11323] usb 3-1: config 0 descriptor?? [ 1426.528976][ T30] audit: type=1326 audit(1751401400.236:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.3.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7ed8e929 code=0x7ffc0000 [ 1426.629647][ T30] audit: type=1326 audit(1751401400.286:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.3.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f7ed8e929 code=0x7ffc0000 [ 1426.766784][T18909] wg1: entered promiscuous mode [ 1426.772074][T18909] wg1: entered allmulticast mode [ 1426.807615][ T30] audit: type=1326 audit(1751401400.286:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.3.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7ed8e929 code=0x7ffc0000 [ 1427.087363][T18917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3332'. [ 1427.203559][T18916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.954976][T18923] netlink: 'syz.1.3335': attribute type 3 has an invalid length. [ 1428.047583][T11323] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1428.286094][T11323] usb 6-1: not running at top speed; connect to a high speed hub [ 1428.313671][T11323] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1428.361391][T11323] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1428.428697][T11323] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1428.497449][T11323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.505705][T11323] usb 6-1: Product: 捍冡ⴡ⤶筳㪀㎗ַ껏脶㈎퇓乆톝苎귣踟䶗駖連⫮탌실佥觟즠뒷Ⓜ䙧廖렟拹螜혏㼐ᱻ曯᨜䰍๓ [ 1428.630975][T11323] usb 6-1: Manufacturer: ఄ [ 1428.635686][T11323] usb 6-1: SerialNumber: 谼徦༌닥尒莚粪瘈퓒烐爀洗뻼畎忸ꓙ㏶퍃❃᥼躒ॊ赟僽썑㰙漊鄗␅ꢾ㇭ඏ⋂뼘签茄፧䖦僮մ੹º䒰駿杘㯫뾾똯෌県갇泥ႅ滨喬㶑ಋἵ嘈缚웼㎄챉.霃풐 [ 1428.706484][T14671] usb 3-1: USB disconnect, device number 6 [ 1428.748447][T18921] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1429.103162][T11323] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1429.145534][T11323] cdc_ncm 6-1:1.0: bind() failure [ 1429.318046][T11323] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1429.337315][T16160] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1429.355229][T11323] cdc_ncm 6-1:1.1: bind() failure [ 1429.465875][T11323] usb 6-1: USB disconnect, device number 10 [ 1429.467254][T16160] usb 3-1: device descriptor read/64, error -71 [ 1429.507117][ T5900] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1429.688672][ T5900] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1429.700830][ T5900] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1429.721601][ T5900] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1429.737040][T16160] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1429.835465][ T5900] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1429.847948][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.863019][T18934] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1429.910383][T16160] usb 3-1: device descriptor read/64, error -71 [ 1430.082409][T16160] usb usb3-port1: attempt power cycle [ 1430.448778][T16160] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1430.528360][T16160] usb 3-1: device descriptor read/8, error -71 [ 1430.857593][T16160] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1431.022966][T16160] usb 3-1: device descriptor read/8, error -71 [ 1431.065631][T18948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3343'. [ 1431.150451][T16160] usb usb3-port1: unable to enumerate USB device [ 1432.345447][ T5900] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1432.364017][ T5900] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input133 [ 1432.761728][ T5900] usb 4-1: USB disconnect, device number 38 [ 1432.761791][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1432.780870][T18951] futex_wake_op: syz.0.3344 tries to shift op by -33; fix this program [ 1433.354251][T17842] syz.4.3112: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1433.464536][T17842] CPU: 0 UID: 0 PID: 17842 Comm: syz.4.3112 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1433.464559][T17842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1433.464571][T17842] Call Trace: [ 1433.464577][T17842] [ 1433.464586][T17842] dump_stack_lvl+0x189/0x250 [ 1433.464617][T17842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1433.464643][T17842] ? __pfx__printk+0x10/0x10 [ 1433.464659][T17842] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1433.464686][T17842] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1433.464704][T17842] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1433.464727][T17842] warn_alloc+0x214/0x310 [ 1433.464759][T17842] ? __pfx_warn_alloc+0x10/0x10 [ 1433.464787][T17842] ? __get_vm_area_node+0x28f/0x300 [ 1433.464804][T17842] ? relay_open_buf+0x217/0xd40 [ 1433.464823][T17842] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1433.464863][T17842] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1433.464886][T17842] ? rcu_is_watching+0x15/0xb0 [ 1433.464920][T17842] ? relay_open_buf+0x217/0xd40 [ 1433.464934][T17842] ? relay_open_buf+0x217/0xd40 [ 1433.464948][T17842] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 1433.464970][T17842] ? relay_open_buf+0x217/0xd40 [ 1433.464984][T17842] ? trace_kmalloc+0x1f/0xd0 [ 1433.464997][T17842] ? relay_open_buf+0x17c/0xd40 [ 1433.465016][T17842] relay_open_buf+0x217/0xd40 [ 1433.465047][T17842] relay_open+0x427/0x920 [ 1433.465078][T17842] do_blk_trace_setup+0x591/0x9d0 [ 1433.465121][T17842] blk_trace_setup+0x116/0x1f0 [ 1433.465149][T17842] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1433.465180][T17842] ? __pfx_blk_trace_setup+0x10/0x10 [ 1433.465225][T17842] ? __lock_acquire+0xab9/0xd20 [ 1433.465261][T17842] sg_ioctl+0xaf3/0x2230 [ 1433.465306][T17842] ? __pfx_sg_ioctl+0x10/0x10 [ 1433.465340][T17842] ? __fget_files+0x2a/0x420 [ 1433.465368][T17842] ? __fget_files+0x2a/0x420 [ 1433.465391][T17842] ? __fget_files+0x3a0/0x420 [ 1433.465414][T17842] ? __fget_files+0x2a/0x420 [ 1433.465442][T17842] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1433.465475][T17842] ? __pfx_sg_ioctl+0x10/0x10 [ 1433.465508][T17842] __se_sys_ioctl+0xf9/0x170 [ 1433.465544][T17842] do_syscall_64+0xfa/0x3b0 [ 1433.465592][T17842] ? lockdep_hardirqs_on+0x9c/0x150 [ 1433.465630][T17842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.465657][T17842] ? clear_bhb_loop+0x60/0xb0 [ 1433.465684][T17842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.465706][T17842] RIP: 0033:0x7f10f1f8e929 [ 1433.465731][T17842] Code: Unable to access opcode bytes at 0x7f10f1f8e8ff. [ 1433.465743][T17842] RSP: 002b:00007f10f2d8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1433.465767][T17842] RAX: ffffffffffffffda RBX: 00007f10f21b6240 RCX: 00007f10f1f8e929 [ 1433.465784][T17842] RDX: 0000200000000b40 RSI: 00000000c0481273 RDI: 000000000000000c [ 1433.465799][T17842] RBP: 00007f10f2010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1433.465813][T17842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1433.465827][T17842] R13: 0000000000000000 R14: 00007f10f21b6240 R15: 00007f10f22dfa28 [ 1433.465861][T17842] [ 1433.805963][T17842] Mem-Info: [ 1433.809310][T17842] active_anon:7014 inactive_anon:20 isolated_anon:0 [ 1433.809310][T17842] active_file:4810 inactive_file:292 isolated_file:0 [ 1433.809310][T17842] unevictable:768 dirty:97 writeback:0 [ 1433.809310][T17842] slab_reclaimable:6677 slab_unreclaimable:116572 [ 1433.809310][T17842] mapped:40198 shmem:4861 pagetables:3712 [ 1433.809310][T17842] sec_pagetables:0 bounce:0 [ 1433.809310][T17842] kernel_misc_reclaimable:0 [ 1433.809310][T17842] free:142002 free_pcp:21986 free_cma:0 [ 1433.916960][T14671] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1434.087619][T17842] Node 0 active_anon:12kB inactive_anon:80kB active_file:160kB inactive_file:12kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124820kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11984kB pagetables:4628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1434.123888][T17842] Node 1 active_anon:16668kB inactive_anon:0kB active_file:19080kB inactive_file:1156kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24484kB dirty:380kB writeback:0kB shmem:6508kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:884kB pagetables:10120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1434.261158][T17842] Node 0 DMA free:10252kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:92kB local_pcp:16kB free_cma:0kB [ 1434.287097][T14671] usb 4-1: Using ep0 maxpacket: 32 [ 1434.297854][T14671] usb 4-1: config 4 has an invalid interface number: 129 but max is 1 [ 1434.306091][T14671] usb 4-1: config 4 has an invalid interface number: 190 but max is 1 [ 1434.316390][T17842] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 1434.332096][T17842] Node 0 DMA32 free:43612kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:2048KB free_highatomic:1372KB active_anon:0kB inactive_anon:52kB active_file:160kB inactive_file:12kB unevictable:1536kB writepending:16kB present:3129332kB managed:2560992kB mlocked:0kB bounce:0kB free_pcp:15876kB local_pcp:6232kB free_cma:0kB [ 1434.395419][T17842] lowmem_reserve[]: 0 0 1 1 1 [ 1434.406937][T14671] usb 4-1: config 4 has no interface number 0 [ 1434.408621][T17842] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:28kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 1434.456688][T14671] usb 4-1: config 4 has no interface number 1 [ 1434.456707][T17842] lowmem_reserve[]: [ 1434.463029][T14671] usb 4-1: config 4 interface 129 altsetting 8 bulk endpoint 0xA has invalid maxpacket 32 [ 1434.463648][T17842] 0 [ 1434.488460][T14671] usb 4-1: config 4 interface 129 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1434.488479][T17842] 0 [ 1434.502189][T16160] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1434.502197][T14671] usb 4-1: config 4 interface 129 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 1434.502225][T14671] usb 4-1: config 4 interface 129 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 1434.513074][T17842] 0 0 0 [ 1434.549180][T17842] Node 1 Normal free:518348kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15168kB inactive_anon:0kB active_file:19080kB inactive_file:1156kB unevictable:1536kB writepending:380kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:78224kB local_pcp:41340kB free_cma:0kB [ 1434.587162][T14671] usb 4-1: config 4 interface 129 altsetting 8 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1434.595263][T17842] lowmem_reserve[]: 0 0 0 0 0 [ 1434.614822][T17842] Node 0 DMA: 1*4kB (E) 1*8kB (E) 2*16kB (ME) 3*32kB (UME) 2*64kB (ME) 2*128kB (ME) 2*256kB (ME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10252kB [ 1434.636971][T16160] usb 2-1: device descriptor read/64, error -71 [ 1434.650845][T17842] Node 0 DMA32: 181*4kB (UMEH) 289*8kB (UMEH) 310*16kB (UMEH) 199*32kB (UMEH) 129*64kB (UMEH) 72*128kB (MEH) 34*256kB (UMEH) 4*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 43612kB [ 1434.676932][T14671] usb 4-1: config 4 interface 190 altsetting 84 has a duplicate endpoint with address 0xF, skipping [ 1434.677107][T17842] Node 0 Normal: 1*4kB (U) 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1434.726929][T14671] usb 4-1: config 4 interface 190 altsetting 84 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1434.734270][T17842] Node 1 Normal: 942*4kB (UM) 420*8kB (UME) 252*16kB (UM) 97*32kB (ME) 35*64kB (ME) 15*128kB (UM) 6*256kB (UM) 4*512kB (U) 4*1024kB (UME) 1*2048kB (M) 120*4096kB (UM) = 519672kB [ 1434.772404][T14671] usb 4-1: config 4 interface 190 altsetting 84 endpoint 0x7 has invalid maxpacket 1248, setting to 1024 [ 1434.786892][T17842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1434.816911][T14671] usb 4-1: config 4 interface 190 altsetting 84 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1434.831341][T17842] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1434.857713][T14671] usb 4-1: config 4 interface 190 altsetting 84 endpoint 0x4 has invalid maxpacket 552, setting to 64 [ 1434.871812][T17842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1434.877026][T16160] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1434.896323][T14671] usb 4-1: config 4 interface 190 altsetting 84 has a duplicate endpoint with address 0x6, skipping [ 1434.897311][T17842] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1434.917640][T14671] usb 4-1: config 4 interface 190 altsetting 84 has a duplicate endpoint with address 0x4, skipping [ 1434.948648][T14671] usb 4-1: config 4 interface 190 altsetting 84 bulk endpoint 0xD has invalid maxpacket 1023 [ 1434.958620][T17842] 8322 total pagecache pages [ 1434.968228][T17842] 1232 pages in swap cache [ 1434.980027][T14671] usb 4-1: config 4 interface 190 altsetting 84 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1434.992384][T17842] Free swap = 100936kB [ 1434.996598][T17842] Total swap = 124996kB [ 1435.016881][T14671] usb 4-1: config 4 interface 190 altsetting 84 endpoint 0x83 has an invalid bInterval 215, changing to 7 [ 1435.017760][T16160] usb 2-1: device descriptor read/64, error -71 [ 1435.034875][T17842] 2097051 pages RAM [ 1435.047133][T17842] 0 pages HighMem/MovableOnly [ 1435.055721][T17842] 424697 pages reserved [ 1435.061522][T14671] usb 4-1: config 4 interface 190 altsetting 84 endpoint 0x83 has invalid maxpacket 16765, setting to 1024 [ 1435.083490][T17842] 0 pages cma reserved [ 1435.097004][ T5900] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1435.146883][T14671] usb 4-1: config 4 interface 190 altsetting 84 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 1435.167899][T16160] usb usb2-port1: attempt power cycle [ 1435.205432][T14671] usb 4-1: config 4 interface 129 has no altsetting 0 [ 1435.224171][T14671] usb 4-1: config 4 interface 190 has no altsetting 0 [ 1435.249232][T14671] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=ea.e3 [ 1435.250986][ T5900] usb 6-1: Using ep0 maxpacket: 8 [ 1435.291961][ T5900] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1435.307255][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.315480][ T5900] usb 6-1: Product: syz [ 1435.319519][T14671] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.320410][ T5900] usb 6-1: Manufacturer: syz [ 1435.332829][ T5900] usb 6-1: SerialNumber: syz [ 1435.345682][ T5900] usb 6-1: config 0 descriptor?? [ 1435.370426][T14671] usb 4-1: Product: syz [ 1435.400874][T14671] usb 4-1: Manufacturer: syz [ 1435.427174][T14671] usb 4-1: SerialNumber: syz [ 1435.466120][T18968] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1435.527047][T16160] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1435.567966][T16160] usb 2-1: device descriptor read/8, error -71 [ 1435.585466][ T5900] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1435.723585][T14671] adutux 4-1:4.129: interrupt endpoints not found [ 1435.771336][T14671] adutux 4-1:4.190: interrupt endpoints not found [ 1435.817234][T14671] usb 4-1: USB disconnect, device number 39 [ 1435.854710][T16160] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1435.947394][T16160] usb 2-1: device descriptor read/8, error -71 [ 1436.068410][T16160] usb usb2-port1: unable to enumerate USB device [ 1436.976977][T16160] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1437.159241][T16160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 1437.177156][T16160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.205954][T16160] usb 4-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1437.316432][T16160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.336656][T16160] usb 4-1: config 0 descriptor?? [ 1437.537649][T18990] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3358'. [ 1437.819875][ T5900] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1437.881070][T18984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3356'. [ 1437.909519][T18984] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001 [ 1437.928005][ T5900] usb 6-1: USB disconnect, device number 11 [ 1438.072872][T16160] hid-led 0003:04D8:F372.0042: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.3-1/input0 [ 1438.383714][T16160] hid-led 0003:04D8:F372.0042: Greynut Luxafor initialized [ 1438.455856][T16160] usb 4-1: USB disconnect, device number 40 [ 1438.590105][T10761] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 1438.683977][T10761] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 1438.716260][T10761] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 1438.908791][T10767] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 1438.951173][T10767] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 1439.182985][T10767] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 1439.202131][T10767] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 1439.230335][T10767] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 1439.279371][T10767] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 1439.297046][T11323] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1439.319000][T10767] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 1439.384765][ T59] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 1439.497105][T11323] usb 6-1: Using ep0 maxpacket: 16 [ 1439.512245][T10761] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 1439.532245][T11323] usb 6-1: config 0 has an invalid interface number: 68 but max is 0 [ 1439.562288][T11323] usb 6-1: config 0 has no interface number 0 [ 1439.577646][ T37] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 1439.637092][T11323] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1439.646212][T11323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.667565][T10761] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 1439.678265][T11323] usb 6-1: Product: syz [ 1439.682487][T11323] usb 6-1: Manufacturer: syz [ 1439.694011][T11323] usb 6-1: SerialNumber: syz [ 1439.694226][T10767] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 1439.743592][T11323] usb 6-1: config 0 descriptor?? [ 1440.003184][T11323] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1440.020394][T10761] usb 6-1: Failed to submit usb control message: -71 [ 1440.029810][T11323] usb 6-1: USB disconnect, device number 12 [ 1440.036779][T10761] usb 6-1: unable to send the bmi data to the device: -71 [ 1440.046961][T10761] usb 6-1: unable to get target info from device [ 1440.053333][T10761] usb 6-1: could not get target info (-71) [ 1440.068223][ T37] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 1440.111912][T10761] usb 6-1: could not probe fw (-71) [ 1440.131700][T10767] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 1440.290301][T10761] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 1440.766970][T16160] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1440.957316][T16160] usb 4-1: Using ep0 maxpacket: 16 [ 1440.970875][T16160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1440.990243][T16160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1441.017158][T16160] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1441.026266][T16160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.105499][T16160] usb 4-1: config 0 descriptor?? [ 1441.573006][T16160] hid-picolcd 0003:04D8:F002.0043: unexpected long global item [ 1441.588939][T16160] hid-picolcd 0003:04D8:F002.0043: device report parse failed [ 1441.609144][T16160] hid-picolcd 0003:04D8:F002.0043: probe with driver hid-picolcd failed with error -22 [ 1441.636922][T17007] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1441.756986][T16160] usb 4-1: USB disconnect, device number 41 [ 1441.890838][T19015] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1441.918178][T19015] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1441.927069][T17007] usb 2-1: Using ep0 maxpacket: 32 [ 1441.939835][T19015] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1441.972451][T19015] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1441.987906][T17007] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.033076][T17007] usb 2-1: config 0 has no interfaces? [ 1442.043333][T17007] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1442.043575][T19015] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1442.068810][T17007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.097923][T17007] usb 2-1: config 0 descriptor?? [ 1442.167264][T19015] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1443.897257][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 1443.977385][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 1443.983508][T10285] Bluetooth: hci0: command 0x041b tx timeout [ 1443.989716][T17719] Bluetooth: hci4: command 0x0c1a tx timeout [ 1444.056954][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 1444.201366][T19038] dummy0: entered promiscuous mode [ 1444.219179][ T5836] Bluetooth: hci6: command 0x0c1a tx timeout [ 1444.231539][T19041] usb usb8: usbfs: process 19041 (syz.5.3369) did not claim interface 0 before use [ 1444.241716][T19038] macsec1: entered promiscuous mode [ 1444.371625][T19038] dummy0: left promiscuous mode [ 1445.143426][T19056] netlink: 'syz.0.3374': attribute type 11 has an invalid length. [ 1445.337078][T16160] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1445.479711][T19016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1445.508786][T16160] usb 4-1: Using ep0 maxpacket: 32 [ 1445.524696][T16159] usb 2-1: USB disconnect, device number 2 [ 1445.533826][T16160] usb 4-1: config 4 has an invalid interface number: 129 but max is 1 [ 1445.599633][T16160] usb 4-1: config 4 has an invalid interface number: 190 but max is 1 [ 1445.630709][T16160] usb 4-1: config 4 has no interface number 0 [ 1445.667812][T16160] usb 4-1: config 4 has no interface number 1 [ 1445.697402][T16160] usb 4-1: config 4 interface 129 altsetting 8 bulk endpoint 0xA has invalid maxpacket 32 [ 1445.732912][T16160] usb 4-1: config 4 interface 129 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1445.799205][T16160] usb 4-1: config 4 interface 129 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 1445.856991][T16160] usb 4-1: config 4 interface 129 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 1445.888977][T16160] usb 4-1: config 4 interface 129 altsetting 8 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1445.951464][T16160] usb 4-1: config 4 interface 190 altsetting 84 has a duplicate endpoint with address 0xF, skipping [ 1446.007824][T16160] usb 4-1: config 4 interface 190 altsetting 84 endpoint 0x7 has invalid maxpacket 1248, setting to 1024 [ 1446.076938][T16160] usb 4-1: config 4 interface 190 altsetting 84 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1446.132692][T16160] usb 4-1: config 4 interface 190 altsetting 84 endpoint 0x4 has invalid maxpacket 552, setting to 64 [ 1446.183500][T16160] usb 4-1: config 4 interface 190 altsetting 84 has a duplicate endpoint with address 0x6, skipping [ 1446.251489][T16160] usb 4-1: config 4 interface 190 altsetting 84 has a duplicate endpoint with address 0x4, skipping [ 1446.285103][T16160] usb 4-1: config 4 interface 190 altsetting 84 bulk endpoint 0xD has invalid maxpacket 1023 [ 1446.307377][T16160] usb 4-1: config 4 interface 190 altsetting 84 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1446.334181][T16160] usb 4-1: config 4 interface 190 altsetting 84 endpoint 0x83 has an invalid bInterval 215, changing to 7 [ 1446.396994][T16160] usb 4-1: config 4 interface 190 altsetting 84 endpoint 0x83 has invalid maxpacket 16765, setting to 1024 [ 1446.446871][T16160] usb 4-1: config 4 interface 190 altsetting 84 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 1446.466987][ T5892] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1446.505482][T16160] usb 4-1: config 4 interface 129 has no altsetting 0 [ 1446.515237][T16160] usb 4-1: config 4 interface 190 has no altsetting 0 [ 1446.537962][T16160] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=ea.e3 [ 1446.547397][T16160] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.555404][T16160] usb 4-1: Product: syz [ 1446.587762][T16160] usb 4-1: Manufacturer: syz [ 1446.611755][T16160] usb 4-1: SerialNumber: syz [ 1446.673440][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 1446.679079][T19054] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1446.728449][ T5892] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1446.748222][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.776240][ T5892] usb 2-1: Product: syz [ 1446.796539][ T5892] usb 2-1: Manufacturer: syz [ 1446.817071][ T5892] usb 2-1: SerialNumber: syz [ 1446.851513][ T5892] usb 2-1: config 0 descriptor?? [ 1446.914084][T16160] adutux 4-1:4.129: interrupt endpoints not found [ 1446.998753][T16160] adutux 4-1:4.190: interrupt endpoints not found [ 1447.073429][T16160] usb 4-1: USB disconnect, device number 42 [ 1447.086928][ T5892] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1447.817204][ T978] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1447.835295][T16160] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1447.901888][ T5892] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1447.957567][ T5892] usb 2-1: USB disconnect, device number 3 [ 1447.996938][T16160] usb 6-1: Using ep0 maxpacket: 16 [ 1447.997015][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 1448.008355][T16160] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1448.025392][ T978] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1448.046889][T16160] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1448.048274][ T978] usb 4-1: config 4 has an invalid interface number: 177 but max is 0 [ 1448.091938][T16160] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1448.101246][ T978] usb 4-1: config 4 has an invalid descriptor of length 10, skipping remainder of the config [ 1448.112163][ T978] usb 4-1: config 4 has no interface number 0 [ 1448.122378][ T978] usb 4-1: config 4 interface 177 has no altsetting 0 [ 1448.129622][T16160] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.132279][ T978] usb 4-1: New USB device found, idVendor=13d3, idProduct=3349, bcdDevice=26.35 [ 1448.156871][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.157083][T16160] usb 6-1: Product: syz [ 1448.195707][ T978] usb 4-1: Product: syz [ 1448.200158][ T978] usb 4-1: Manufacturer: syz [ 1448.204803][ T978] usb 4-1: SerialNumber: syz [ 1448.239847][T16160] usb 6-1: Manufacturer: syz [ 1448.270284][T16160] usb 6-1: SerialNumber: syz [ 1448.357614][T16160] usb 6-1: config 0 descriptor?? [ 1448.400401][T16160] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1448.428319][T16160] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1448.436120][ T978] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1448.469922][ T978] usb 4-1: USB disconnect, device number 43 [ 1449.070665][T16160] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1449.136236][T16160] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1449.845330][T16160] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1450.326245][T16160] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1450.341069][T16160] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1450.377404][T16160] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1450.384186][T16160] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1450.437349][T16160] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1450.451075][T16160] usb 6-1: USB disconnect, device number 13 [ 1450.451291][T10285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1450.466976][T10285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1450.476157][T10285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1450.493370][T10285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1450.502426][T10285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1451.743864][T19090] chnl_net:caif_netlink_parms(): no params data found [ 1451.756972][T16160] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1451.866950][ T5900] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1452.027063][T16160] usb 6-1: Using ep0 maxpacket: 16 [ 1452.057701][T16160] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1452.066905][T16160] usb 6-1: can't read configurations, error -61 [ 1452.077536][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 1452.148592][ T5900] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1452.192740][ T5900] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1452.229592][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1452.241401][ T5900] usb 2-1: Product: syz [ 1452.245595][ T5900] usb 2-1: Manufacturer: syz [ 1452.253137][ T5900] usb 2-1: SerialNumber: syz [ 1452.258183][T16160] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1452.285682][ T5900] usb 2-1: config 0 descriptor?? [ 1452.323320][T19101] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1452.332816][ T5900] hub 2-1:0.0: bad descriptor, ignoring hub [ 1452.417079][ T5900] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1452.436935][T16160] usb 6-1: Using ep0 maxpacket: 16 [ 1452.460973][T16160] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1452.469003][T16160] usb 6-1: can't read configurations, error -61 [ 1452.479827][T16160] usb usb6-port1: attempt power cycle [ 1452.480746][T19090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.577336][T19090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.597204][T19090] bridge_slave_0: entered allmulticast mode [ 1452.604532][T19090] bridge_slave_0: entered promiscuous mode [ 1452.617169][ T5836] Bluetooth: hci2: command tx timeout [ 1452.685197][T19090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.727138][T19090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.735681][T19090] bridge_slave_1: entered allmulticast mode [ 1452.816976][T16160] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1452.826675][T19090] bridge_slave_1: entered promiscuous mode [ 1452.874331][T16160] usb 6-1: Using ep0 maxpacket: 16 [ 1452.894065][T16160] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1452.932253][T16160] usb 6-1: can't read configurations, error -61 [ 1453.077322][T16160] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1453.104852][T19090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1453.141367][T16160] usb 6-1: Using ep0 maxpacket: 16 [ 1453.184728][T19090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1453.207234][T16160] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1453.227735][T16160] usb 6-1: can't read configurations, error -61 [ 1453.245000][T16160] usb usb6-port1: unable to enumerate USB device [ 1453.337058][T14671] usb 2-1: USB disconnect, device number 4 [ 1453.483070][T19090] team0: Port device team_slave_0 added [ 1453.556144][T19090] team0: Port device team_slave_1 added [ 1453.567106][T14671] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1453.648398][T19090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1453.667547][T19090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1453.757248][ T44] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1453.796068][T19090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1453.840510][T14671] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 1453.910360][T14671] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1453.919573][T14671] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1453.928084][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 1453.949006][T19090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1453.956720][T14671] usb 2-1: Product: syz [ 1453.964967][ T44] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1453.988440][T14671] usb 2-1: Manufacturer: syz [ 1453.993079][T14671] usb 2-1: SerialNumber: syz [ 1454.002120][T19090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1454.054142][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1454.079595][ T44] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1454.089783][T14671] usb 2-1: config 0 descriptor?? [ 1454.101356][T19111] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1454.111014][T14671] hub 2-1:0.0: bad descriptor, ignoring hub [ 1454.117573][T14671] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1454.126755][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.183289][ T44] usb 4-1: config 0 descriptor?? [ 1454.192322][T19090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1454.205300][ T44] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1454.308842][T19090] hsr_slave_0: entered promiscuous mode [ 1454.315420][T19090] hsr_slave_1: entered promiscuous mode [ 1454.405719][ T44] usb 4-1: USB disconnect, device number 44 [ 1454.450589][T19090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1454.460638][ T31] INFO: task syz.4.3112:17843 blocked for more than 143 seconds. [ 1454.512766][ T31] Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 [ 1454.533699][T19090] Cannot create hsr debugfs directory [ 1454.572281][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1454.630347][ T31] task:syz.4.3112 state:D stack:28904 pid:17843 tgid:17838 ppid:16150 task_flags:0x400040 flags:0x00004004 [ 1454.716960][ T5836] Bluetooth: hci2: command tx timeout [ 1454.735538][ T31] Call Trace: [ 1454.739043][ T31] [ 1454.742023][ T31] __schedule+0x16f5/0x4d00 [ 1454.746606][ T31] ? schedule+0x165/0x360 [ 1454.751127][ T31] ? __pfx___schedule+0x10/0x10 [ 1454.756045][ T31] ? schedule+0x91/0x360 [ 1454.760479][ T31] schedule+0x165/0x360 [ 1454.764687][ T31] schedule_preempt_disabled+0x13/0x30 [ 1454.770471][ T31] __mutex_lock+0x724/0xe80 [ 1454.775022][ T31] ? __mutex_lock+0x51b/0xe80 [ 1454.801801][ T31] ? blk_trace_remove+0x20/0x40 [ 1454.836928][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1454.842076][ T31] blk_trace_remove+0x20/0x40 [ 1454.876955][ T31] sg_ioctl+0x47b/0x2230 [ 1454.881270][ T31] ? __pfx_sg_ioctl+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1454.885966][ T31] ? __fget_files+0x2a/0x420 [ 1454.948254][ T31] ? __fget_files+0x2a/0x420 [ 1454.952971][ T31] ? __fget_files+0x3a0/0x420 [ 1455.006862][ T31] ? __fget_files+0x2a/0x420 [ 1455.011579][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1455.036866][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 1455.041648][ T31] __se_sys_ioctl+0xf9/0x170 [ 1455.046299][ T31] do_syscall_64+0xfa/0x3b0 [ 1455.077008][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1455.082265][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.116960][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1455.121720][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.136854][ T31] RIP: 0033:0x7f10f1f8e929 [ 1455.146971][ T31] RSP: 002b:00007f10f2d6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1455.155442][ T31] RAX: ffffffffffffffda RBX: 00007f10f21b6320 RCX: 00007f10f1f8e929 [ 1455.177063][ T31] RDX: 0000000020000000 RSI: 0000000000001276 RDI: 000000000000000c [ 1455.185220][ T31] RBP: 00007f10f2010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1455.206250][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1455.215462][ T31] R13: 0000000000000001 R14: 00007f10f21b6320 R15: 00007f10f22dfa28 [ 1455.227146][ T31] [ 1455.230314][ T31] [ 1455.230314][ T31] Showing all locks held in the system: [ 1455.247109][ T31] 1 lock held by rcu_preempt/16: [ 1455.252143][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1455.262783][ T31] 1 lock held by khungtaskd/31: [ 1455.267991][ T31] #0: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1455.278503][ T31] 1 lock held by sshd/5587: [ 1455.283045][ T31] #0: ffff8880660d3ee0 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x86a/0x1200 [ 1455.307063][ T31] 2 locks held by getty/5588: [ 1455.351115][ T31] #0: ffff8880349890a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1455.367045][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1455.387091][ T31] 3 locks held by kworker/u8:1/10758: [ 1455.392511][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1455.417088][ T31] #1: ffffc9000e7d7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1455.428371][ T31] #2: ffffffff8f50f7c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1455.437606][ T31] 3 locks held by syz.4.3112/17842: [ 1455.447202][ T31] 1 lock held by syz.4.3112/17843: [ 1455.453356][ T31] #0: ffff88802545e128 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove+0x20/0x40 [ 1455.463298][ T31] 1 lock held by syz-executor/17956: [ 1455.477156][ T31] #0: ffffffff8e144938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1455.488258][ T31] 2 locks held by syz.2.3347/18965: [ 1455.497160][ T31] #0: ffff88814237eaf0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xfb/0x1f0 [ 1455.507179][ T31] #1: ffffffff8e193128 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 [ 1455.516970][ T31] 2 locks held by syz-executor/19090: [ 1455.522348][ T31] #0: ffffffff8eca3ec0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1455.531980][ T31] #1: ffffffff8f50f7c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1455.541167][ T31] 1 lock held by syz.1.3388/19101: [ 1455.547142][ T31] #0: ffffffff8f50f7c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 1455.556948][ T31] [ 1455.559306][ T31] ============================================= [ 1455.559306][ T31] [ 1455.633087][ T31] NMI backtrace for cpu 1 [ 1455.633109][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1455.633133][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1455.633154][ T31] Call Trace: [ 1455.633163][ T31] [ 1455.633173][ T31] dump_stack_lvl+0x189/0x250 [ 1455.633208][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1455.633246][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1455.633277][ T31] ? __pfx__printk+0x10/0x10 [ 1455.633312][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1455.633340][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1455.633360][ T31] ? _printk+0xcf/0x120 [ 1455.633384][ T31] ? __pfx__printk+0x10/0x10 [ 1455.633407][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1455.633436][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1455.633464][ T31] watchdog+0xfee/0x1030 [ 1455.633492][ T31] ? watchdog+0x1de/0x1030 [ 1455.633523][ T31] kthread+0x70e/0x8a0 [ 1455.633550][ T31] ? __pfx_watchdog+0x10/0x10 [ 1455.633575][ T31] ? __pfx_kthread+0x10/0x10 [ 1455.633599][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1455.633625][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1455.633651][ T31] ? __pfx_kthread+0x10/0x10 [ 1455.633675][ T31] ret_from_fork+0x3fc/0x770 [ 1455.633706][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1455.633739][ T31] ? __switch_to_asm+0x39/0x70 [ 1455.633756][ T31] ? __switch_to_asm+0x33/0x70 [ 1455.633774][ T31] ? __pfx_kthread+0x10/0x10 [ 1455.633798][ T31] ret_from_fork_asm+0x1a/0x30 [ 1455.633834][ T31] [ 1455.633842][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1455.792260][ C0] NMI backtrace for cpu 0 [ 1455.792278][ C0] CPU: 0 UID: 0 PID: 19114 Comm: syz.3.3391 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1455.792300][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1455.792312][ C0] RIP: 0010:rcu_is_watching+0x10/0xb0 [ 1455.792344][ C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 d0 ec f5 10 5b fe bf 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df [ 1455.792360][ C0] RSP: 0018:ffffc9000b07f848 EFLAGS: 00000282 [ 1455.792376][ C0] RAX: ffffffff822eec1d RBX: 0000000000000001 RCX: 0000000000000000 [ 1455.792389][ C0] RDX: ffff88805c3b8000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1455.792401][ C0] RBP: 0000000000000001 R08: ffff88801d1b895f R09: 1ffff11003a3712b [ 1455.792413][ C0] R10: dffffc0000000000 R11: ffffed1003a3712c R12: ffff88801d1b8960 [ 1455.792427][ C0] R13: 0000000000000001 R14: ffffffff822ee94a R15: 000000000005581e [ 1455.792439][ C0] FS: 0000000000000000(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 1455.792454][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1455.792466][ C0] CR2: 00007f2e8fde83b0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 1455.792482][ C0] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 1455.792493][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1455.792504][ C0] Call Trace: [ 1455.792511][ C0] [ 1455.792519][ C0] ? __page_table_check_zero+0xba/0x530 [ 1455.792539][ C0] __page_table_check_zero+0x396/0x530 [ 1455.792556][ C0] ? __page_table_check_zero+0xba/0x530 [ 1455.792576][ C0] __free_frozen_pages+0xc84/0xe70 [ 1455.792600][ C0] vfree+0x25a/0x400 [ 1455.792617][ C0] ? __pfx_kcov_close+0x10/0x10 [ 1455.792640][ C0] kcov_close+0x28/0x50 [ 1455.792660][ C0] __fput+0x449/0xa70 [ 1455.792688][ C0] task_work_run+0x1d1/0x260 [ 1455.792711][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1455.792733][ C0] ? kmem_cache_free+0x18f/0x400 [ 1455.792753][ C0] do_exit+0x6b5/0x22e0 [ 1455.792777][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1455.792797][ C0] ? __pfx_do_exit+0x10/0x10 [ 1455.792815][ C0] ? cgroup_freezing+0x20/0x360 [ 1455.792844][ C0] do_group_exit+0x21c/0x2d0 [ 1455.792863][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1455.792889][ C0] get_signal+0x1286/0x1340 [ 1455.792926][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 1455.792949][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 1455.792971][ C0] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 1455.792996][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1455.793027][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 1455.793053][ C0] exit_to_user_mode_loop+0x75/0x110 [ 1455.793077][ C0] do_syscall_64+0x2bd/0x3b0 [ 1455.793115][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1455.793139][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.793155][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1455.793187][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.793203][ C0] RIP: 0033:0x7f6f7edc11e5 [ 1455.793217][ C0] Code: Unable to access opcode bytes at 0x7f6f7edc11bb. [ 1455.793226][ C0] RSP: 002b:00007f6f7f0dfb20 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1455.793243][ C0] RAX: fffffffffffffdfc RBX: 0000000000000005 RCX: 00007f6f7edc11e5 [ 1455.793273][ C0] RDX: 00007f6f7f0dfb60 RSI: 0000000000000000 RDI: 0000000000000000 [ 1455.793284][ C0] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000004bc4 [ 1455.793295][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f6f7efb5fac [ 1455.793306][ C0] R13: 00007f6f7efb5fa0 R14: ffffffffffffffff R15: 00007f6f7f0dfca0 [ 1455.793328][ C0] [ 1456.363865][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1456.370784][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1456.382624][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1456.392720][ T31] Call Trace: [ 1456.396023][ T31] [ 1456.398993][ T31] dump_stack_lvl+0x99/0x250 [ 1456.403647][ T31] ? __asan_memcpy+0x40/0x70 [ 1456.408271][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1456.413489][ T31] ? __pfx__printk+0x10/0x10 [ 1456.418097][ T31] panic+0x2db/0x790 [ 1456.422033][ T31] ? __pfx_panic+0x10/0x10 [ 1456.426470][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1456.432307][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1456.437699][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1456.443885][ T31] watchdog+0x102d/0x1030 [ 1456.448235][ T31] ? watchdog+0x1de/0x1030 [ 1456.452673][ T31] kthread+0x70e/0x8a0 [ 1456.456758][ T31] ? __pfx_watchdog+0x10/0x10 [ 1456.461453][ T31] ? __pfx_kthread+0x10/0x10 [ 1456.466064][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1456.471371][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1456.476586][ T31] ? __pfx_kthread+0x10/0x10 [ 1456.481193][ T31] ret_from_fork+0x3fc/0x770 [ 1456.485804][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1456.490941][ T31] ? __switch_to_asm+0x39/0x70 [ 1456.495718][ T31] ? __switch_to_asm+0x33/0x70 [ 1456.500495][ T31] ? __pfx_kthread+0x10/0x10 [ 1456.505104][ T31] ret_from_fork_asm+0x1a/0x30 [ 1456.509897][ T31] [ 1456.513181][ T31] Kernel Offset: disabled [ 1456.517519][ T31] Rebooting in 86400 seconds..