last executing test programs: 4m6.601532205s ago: executing program 3 (id=1203): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x26) fcntl$notify(r5, 0x402, 0x0) socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 4m5.647003653s ago: executing program 3 (id=1208): syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) r1 = io_uring_setup(0x65f6, &(0x7f0000000080)={0x0, 0xb91b, 0x40, 0x3, 0x2e3}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000000340)={0x5, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/210, 0xd2}], &(0x7f0000000300)=[0xc5], 0x1}, 0x20) r2 = dup(r0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a0069ae26bd7000000000001c000000ff0000048e"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd86) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd86) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000000)={0x3e72, "adbdc43569b35f553ac67f1b19b8a6777da9415e08db4272944db221f51deee2", 0x2}) 4m4.256567452s ago: executing program 3 (id=1215): r0 = socket(0x2d, 0x2, 0x0) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000180)={@multicast2, @rand_addr=0x64010100}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000000)) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000200)='task\x00') syz_open_dev$media(&(0x7f0000000100), 0x8000000000000001, 0x14141) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) lseek(r4, 0x3, 0x0) r5 = fsopen(&(0x7f0000000040)='udf\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='u\x8cl', &(0x7f0000000200)='-\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x97\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x9f\x18\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\x9d\x03y\x0f\x80I\xd5\xe8KX\'V~\x9c\xf3^w\x90d\x91\xcd\xfc\x0f\x00\xfa\xe4k\xd1\x93E\xab\xf4Y\xa6\xb9\xd6\xcaI\x19\x9cn\xa7\xe1[x=\xb7\x1a\xdev\xc8\a\xd0\x00\x00\x00\x00\x00\x00\vh\x80\xab\x8f\x8c\xd6\xbf\xe3\x9e\xfaRS\x03\xe3\xeduh\"3\x98b(\xb2\xceG\xa1\xdb\x01\'\x87MB FHl\xa6\xad\xed\xcd\x05\x95\xe3\xa2m\xb0\xab\xae4^Z7-\x1f)e5z\xb1\xfa\x89\x0e\xd3m\xcc`\xc6\xc3h\xb3\xa5\x05f\x96\xda#', 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f0000000080)={0xffffffff, 0x8, 0x4, 0xe000, 0x0, {0x0, 0xea60}, {0x4, 0x1, 0x7, 0x8, 0xed, 0xfc, "08e9d012"}, 0x4, 0x4, {}, 0x3, 0x0, r4}) getdents64(r4, &(0x7f0000003440)=""/92, 0x5c) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r6}, 0x10) ptrace$setregs(0xf, 0xffffffffffffffff, 0x4, &(0x7f0000000400)="bc8557fe976794c7eaf78822cf36724895cac89bad0a603a430556f7b33b96635c8ef65ef29b4b1ece160ff7956e7cb38b8d7c57d8029b01c04f0b45e5c6c61ab42039b52f0fcf4b3b26ffd67495234cc130e5c43301e5b9b17f3547eef9c4852c2d567314978ab29d255a58a35a58a7efe0845153c2efa6a82abca143cad792ca6206ee1834455eb1cfbce44e3efdcc2af57ccdebcfacfc056bc0fa2e5cecd951c18a990ce5d00581e30f9809f4529223ff4126dd34f7f9f9ad2c1e5df13b2016fdafc5db40ff233ff18b5db443e77530fc34da11fc7891f16f0d88ce2a8caf5d1a0d7e88ca6b76cb2302701fa9e3313b754c2e8da461ce65ef3f4f49b274c9310aaa99228386508c88a02e55a4d49a51d9d5f7b859804d091fcfbe915d7761af609b3194dcf1a3693f9da8d2b9e37c4940153816cd32aa14ededbccbdd1f9e1b30815e957aa8bfaf5891699ebc1d7646723b2b145eb579efbaad03a4a8e5f6db2fa2e29a06d95a4b3c0dd9124b2c1715d4f1a7c8a9a106c4952d0743394c94f69427ec3514130f09823577e5c1267da764ac108a6ce6b1fdbfb22eedb657378ce47bca751b29a66eb57378ed8269744a0cbc2c48ec6ecbc1311451eaa87a06f6142b1060a8ff515c31f0283575ea8f53555eea13df55353f52538e9d23ec531a77920838d5984b4ae9be1b51d5dae63b62b90edb1ecb04846f90415d2b470e8ab929f83611b6d3e086b8b5d7bc6d6f045caadc2590ec2c0c88e52a7b7e9dc1ec10ba9d460ba3560bc0a54c0fd7dde9b0893e928398538caf735c7ac7656890cf8c4f09432794f23565b361c26d3623dc2194b6bbe07f56cac11f59f38168dafb9e71d292a9269f7077dc7d3916f17bc1a3ca50edfa401d5fa233c014a8ae89a50c33e34213c86f1cd38cc375c0edd72173ebffefd116d45e15c81b3dacdcda9de01adc1f59b821d8fd9626c41002196872a9aecc5bd5da25a4fc6271b10896a1a17fd1c3d39f0cf11b89b7ab424f69e77b667ed24f4ea87b18d334f30c07b5f15943761f593d0605fc37a2cd9af0174996447ed7e5d19db70be3ec783daf2ca8c5fcc6f3ac234ce894089a36afbd6b0eccdf072c2d0aaf810da516a612dc836cb322851d24b42c1e98e59a6d62f3cebd20ebcc9abf9d95c5194973779c873a03be08c75cee0f1fafb2e47c23aa96a4051bbaddaea4f6f9e275b4fd143637682d86bbb73a41310cde6bef75fdc81bbab4d196292c13f72fbf3f366edbb078a1db5cd55f2dde9ea95cfd4b057af825f8c9bb454ab175bddc5d0a9058a0955e0808a3d181799790c52cf07e66d85b22224dd80c2f3ad5d3a7dc86003acfa907dd490b5443b5a5b52116337d0fad9dc81d6b9348477b65d963a11e23cdf0f7d646fe0f689b93e65e582bb190b8f51a8aaf199d6acee3060a3bc6b72b245825d27dfcc461ba99008c40532b83d16fe1b2f93864f244b26278e57efce5f342b0b6b47f39dc40af2c7f66e07136da8b91a12fd8ca9e3564725af37e712782bd5ab60e454f2924a2320be87e84359a495182c29dbccce4e628f2948f40f442a76ab9215d2f14f1ee6477d6809b2a8cb981a63bc5d763e048266e3d94c4956af39b8908ca6e6edd34cf6a03f0648c4645b89a292a1aee58f7816a4e1db978126ae288f48518c488714668f341106b52c5d7b83b299d598c61f9ed5a874c4972e840351ec1bfaa9fd86074441fb9033a51c024c881145b413ef6c215c349f492b75c266e299e778b5b43d5f6362ee2998dddcff8b9e90e576da9babc6df3cdce65d2f5278f347989289b28e3385cdeef355a3f3befa6732d156fdbb2e44f8df5827778549ab735b518516e690107b3913592199e2fe5b8af8ffed4fb7fb4a529e7934693891c41bd8ea2785ff0b513f51dae7200a58acd000973d0c3f46270add8f87e2a889982c0900975da2897da2af265d6c7ed3d36401ff814f8e425b1d09e960412eee75c8005fc528cd67a5e02cde7694728b63b099dd2642f1c39d803e2cdf39de733e24b4606a01a0002359bbc01878e1040f6732c67404a68f60d7f89fd3fe5c1e55493ce9305ccc576c1473b04fbe9ef57e8d6b2d09033845527dfebca61002456738820dca01e130e4f6e8add55f0296fe8290019203201c686822eece5d79b8a6b88eefd6fe7acec5aa52987f543009c63b45efb4304693997ad993c38884644ea28d3cb90f2e5615e3b934b94e3e8e3ffb01bf1b4108824d5a4880cd917ad97814c95ee57ffad0f6d9b4471426031f3eb24c499de3e171bd96c1af02b6fc40645670195b323ee7833df8f8bf2b68e7ade352209eff3d70e8a1ddaa8195501ca7de56d9e5ff4691a003c6140c6dddd8d1dc1f35ff0d0fefdfc1c5c84f5af9752dadd3ca8bae3b451d42254648f9059b417c873389a2f5af444dd067622e4bd2431e4d8a43ec1e59282c7012f3805bc25c59cba3cd19a915be1b5e2c40cc5585d341da61cd38098109b6d9785f38c1a13ae6a098a2bbdd88b21ba5113d1da09eef75a70680c61436c194c5ae7270f74f517cc81dc58f634f65f42e65ea5b602ab3b3c15d34062bd6c73e96ebe04ba9ca186281f95e0533bdaf31698bababe825f6e5bf4f1e8eb3e6bbd628257049201bcefeef550abc4f27aded26d3999d294ab7d13c0ec7c179bf50b0fc75a2b1b1538345ad6dd4798737b6db65707e08d6ec430f6869173f0fb8b9fc0aff347493bba790de4419adfa90f44e7d0a8d450f91f4aac646bbfe08612f31acace849a3a6452e4510c6cae4524ffad1ad28e1729dc74a8d2e813c3c7351f3642dd3d1022f46550ddec9d23e69662215e064127ed19a6cb990dc9a714ef5daf9c4c0c357b9366d1ef0b4cf0ba71137d3a8b22dbc0fc5ef571aaa42bbf0d27debbd8a1e21aff6124c2b0b2745851eca2499acce9f4c989e56087a81e6df63d9a46e148940eea82ee0ca507c4b8e54c5eb3d0be2911102aa605bfb4f3628a497ef4edaae32d6b886f741424e9b1c4eeec4f682fa01d6c44deeb653858b14d200759627d996ef75fdc0f03f1e55033a3a44bffe2715f0061072567cf2dfad2b70001ecebc8706e754be73aa1fb14d02f28cc890bf5e1bc060ffc3b4147ef16aa885912080544e5430e4542aad6fb5f7e0d0bf63d49a17fcc547905305a2678048e380d891d92081197b1c1dcebd25252f9df5c323fdaa0dad2ef3ce1073de7d3c46225e31fb40adb992b89ddc7a5110cb93391fca3875671a37aaaee00428e9367e2c91c7c8fd8c5d22e0cdaff2004eb2e54debd5f074ce43ac801729806da19eed1819f890eba66432131213a794fab205f52a7a0f24307290be026a0d45452e3e4a75dd93cbf7a3431317d8c7f84459b91c5c8b4d125c5f9d781766756cb1148d37678a4953439c6ba435c6c4e118f0765ff197f45aa3374af4f66af52c31c126350ba7f13e529809d06bb0b08eee94fbabbab6d27dfc9693dd026e066d233b280d01b0cb1d1aafc60a70034c2cde818c2f2e59cb0c1f904fbc25946cc076e456736115381d5daa332c19da4d6942e5b96189af8e2c2fe982824b1d776721202ed26a66df954aebe14891c8a1681cea36c3675dd3effb63f05ea6963da982bd788b82c3608da3ac2afe6593425413bae3a71e14659048197bb42d0a134403a2d0b92eedf536c9dc1276524592f69fc77f413a98da3b486ff50ebd8352ad6fe476d6b8723335914f73457d0e012e7d28c6f06821dd69bb5ecded65d3d9aa662007433a8e2b3334988a98af5ceb9436d5ae2a05f6d6d1f19994e6361ca628cabd5e8ad942769c7993f1ab7141f949e22cfe22179cb8f3e8c2e3f52fa1d96526cdd3c659fd8d8b04e3d7e61bad8a554be821baf713879f6af966199ffb281e2d4427a3f8c5393109e0808eca7a97a70abba454aa87153e2dd000a01ef98778d95304881e10a66580ee6d3c920c6a7a69ade8bf81b8829ff63aaf956d00ba1c10a28b6743bb9c2820efc82b0c165c358a636cec602cdb6d42eb4c7e04180ac2ad074bbc48f734e6b9b3358972da2f38739198a3dd1c8802e3f8cfe086c6240022e5e9cd8325d987e4db2882eb27d46369032d9690e0e79a5fc8fa12358126fa54fb4568b8312f69b6de3f9b8d57d4185d4b6de3292af2f976e11891c22fca9d2313fdc82296e28d4633bca6f9ddb190ead0a28904e866a71f0a41f4057e873e682067640fbb68b0a72be60bcdf79a2dbedfea3041971fd9ea925bff4c910a3b69d92f89453066db2bc6adabe054ec311e93a4193bfd2fec7844d586f9bfa6d96820e0affc9bc577d637b06c50df88661dc4fecf3ef08e92fc24bb6f9aa8798da591aafa705cd59d4fbc451fa8b92d889d9cd1a9b11ec7bbb8609bedcf68d6c329e0e6ddf1a84a39077617665841714da86678d55bc71364c03c3580a6ea314068a264030abcb1c2eec54151a9383e40fa69b9412b5715c4ebe539df1928c16720e19eb05a016e8b467ac76fa577d54ab548a2537d1dc1677332825c95a0abd7bb3e048cd11e61ccc589577ae755166a5492652860fcc23afd3b426a3a5c7b118551a76b0b382e07f6925fbf02169cf4572f20df95dd25140f65094bdfa7a2004dc62314be7cca5472653afb5c28254111180325801c126874c0acd3c8868db6ee7d2e8d6bb289997079f046c8e2f999066653084ca59fae4aca2cd01e3a34af33e19b58bcbc8b9376d40ac70d14fdc575c74ca20e07ec3086a5d5d51ac0d75adcc530da7efa5fc19c48ef5668671fd17ece35816516d678090826365fdfca5a90acee96e6023ca4432d68d78d0164aafe5151f5bb8d5cb80d8e6abe6253444ef375c10d0cb78f36b4b40035e5656e5bca9dcdfedd356eb17682f8cb77a04a7251f104eb5ab1f47b2aa8bc0526c4e92f7953d1e1a9591145c58569de410b5549504e6fe85e3a74b70615be2d921ebfe414a2f8385be2d27dc0e0a495303900f1ff9c97d900b536ebe23f0096a3a3b00f5bbba94c4fb16641359b06fd1b16c548650ed025cc72a9589c2167a6b17a17688790f62365d259a8a3b26df5c5501161c96dda52c3b55636ca20c5fac7b857e38f1e21ecefcc966635d2c357581740579ea55081e274d318073451b63a06f1e5fe70ee7cc79ed6c81671dfd9160f3088026f7e222d2a8eacafb9748705d845d82f9f7c1d8774a528c8fe9d0370069f1a3ca95bc252812aac7452ae03679febe1dbc51f721bc47337a74091dfaecc28883ca16bcf97176e66379de9511cf8fde2d8cac660b27e16b4b7502962ef681541c1ed56ec9e5b2bf01b16e713167f4c4fa3098f8b4f640f609c4fe4d7566375e0c5a3535239ca7e18f888505a1d1573b64a91f014e6c21cba1e748b96375f8b7b3d50488a6ab17e2bda8d05ee52318119daca3731228ead9693de9ba1f33c8b9cca3f0bf16b83da403b0371701c52546890ea3d703fe8c955abd36c959269b8a5a9a232e069ba1118db60de1f8f8d58516f91cae0ae04dd57d8b4181a3cc7bde0531d0e4a2f5138573206c8a8cc0fa836ee5577cad7bcc8c966cc9982b13a8779c9bae828da13082c0cd3c59a187ddc14e1794b69da3eb1b1524a27c8c43eeab8b71caf9e7c6b860f8096a6fa36beada7567232c0d67d8f677e5dc44920d7539e9fc751bc72ef1259e21037b674540303a313d31269fb03298e75c549666abe4fc574069c42ceaab414ac75da4cb4bf407e93a23087a87bf49be153d80a5797c5a74f8d5ac6eb4d3752da79b25b207f04cf1f41e1d38c0") sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getqdisc={0x38, 0x26, 0x4, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0xfffa, 0xffff}, {0xfff3, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}}, 0xc0) 4m4.072464685s ago: executing program 3 (id=1217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f0000000080)='./file0/file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x59}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x5}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x880) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x140d, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x200001}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4090) 4m3.387056719s ago: executing program 3 (id=1221): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='_\x00'/11, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20040815}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e657200000050000280080002400000008408000340000000080004400000000f08000140000000002c0005800c0001007061796c6f6164001c000280080004400000005608000340000000b908000240000000040900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a00"], 0xb8}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x543442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETFILTER(r4, 0x801054db, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[], 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x20c89, 0x50108}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r7}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) fcntl$getown(r6, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "130da108d2"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004c8f4}, 0x4000000) unshare(0x60000480) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 4m3.141188177s ago: executing program 3 (id=1222): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) statx(r1, &(0x7f0000000980)='./file0\x00', 0x100, 0x100, 0x0) getdents64(r1, 0x0, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)={0x10, 0x24, 0xc8fe83ee7f0e7fd5}, 0x10}], 0x1}, 0x4800) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x4, 0x4) 4m2.682408157s ago: executing program 32 (id=1222): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) statx(r1, &(0x7f0000000980)='./file0\x00', 0x100, 0x100, 0x0) getdents64(r1, 0x0, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)={0x10, 0x24, 0xc8fe83ee7f0e7fd5}, 0x10}], 0x1}, 0x4800) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x4, 0x4) 18.109807839s ago: executing program 5 (id=2270): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$dri(0x0, 0x1ff, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x10001, 0xfffffe0000000005, 0xfa11, 0xfffffffe}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, &(0x7f0000000340)}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000c40)="e0ace5e07fb9cfc6016e87bbcbcc986aa9ff9a539a3d8efc8ee5c4b76c562ce79444782f57778c7c70e9eea8bab1db78214e7c1acbf8d79a8a6e34aaebdef879d1985dfedccf9d9e969cba38e118942e9982cc85ab2d169ff60db1ca55e1d6fa974b240f6d964afb74ae099f5ea4714365abcff8ac12dfb8aef1a55011f4c1b2811f523a05b1e5689b2dfd70ce5414502b7b354557f52fd68ac0e1f1d5bb7cf36a620e40fa01724c", 0x10e}, {&(0x7f0000000d40)="fd29da22e9dc1d7216ac625d939a5b9c27ecfe50a0fc467dd46b0edd870392818718b19f729b45b53a0aa7feb589e9f78cef5712", 0x34}, {0x0}, {&(0x7f0000000e80)="ba0c5da7fa2a76ee7398cfb22f300316070548d29459bdaa6bd2f132e9c481ac48ec2e42a1430f63e6f05af8a54668901d04ce785fbc53fb64ec43937ff9757d1b8f4b1d66b98a3c7dbc5387dc9d05d5f08b", 0x52}], 0x4, 0x0, 0x0, 0x20000001}}, {{&(0x7f0000000fc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000001040)="6828bc7b8686f9e4b253fa6a93709303ce851612e4798e41fdd4420db1e41b79d70c197a6f5a4cc8059275cceb1655ebcfc6ff675a81344f833d1bb9eab06dc1562e79c0e6415d65fac6033e1c04cc62240038a26d4d620854a88b1e771bdaf6679c72e708e90999a5665d84ba5f022c141ee9ff19980738c6eb3d4ec773dd9b96d1d813ba305796916571dc75a34a1b3ebbc9ec48c96cecc37c89857da914a97e09e75cfb41ddb54e6c1e2018359cb11bb87c75ffcd84c760631f1be831cc077c43c46fd2ca86a26c2e00f560efa2ea7b830a7d4266489918b026814149ecb43f24", 0xe2}, {&(0x7f0000001200)="7e47a8b6632fe8b83fac67bea137e8df07f3fb62124c79b45e7b140e9fd05cd1499f55c10a138c2ebecb7e2745d4e60fe44c4b4ad464300dbef12d6b8c96e5f24873e1cb8aed7506c6ada89c0cc037267191f564e36674abc2a5d7ba3a345aa5695cc0affef6a6c2305e5d9cb920d12047272bb43643d4da12208723550eb799642627dccb0f74c541e847b13e998acd241ea2626073bb2bb489781b88b7b8b148c80a4fcdf086205bcc9a4501", 0xad}, {&(0x7f0000000a80)="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", 0x12c}], 0x3, &(0x7f0000001540), 0x0, 0x40}}], 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) (async, rerun: 32) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (rerun: 32) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) (async) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000007c0)=0x6) dup3(r2, r3, 0x0) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) 17.961289213s ago: executing program 5 (id=2271): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ppoll(&(0x7f0000000240)=[{r1, 0x2280}], 0x1, 0x0, 0x0, 0x0) r2 = geteuid() write$P9_RSTATu(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/530, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0xee01], 0x21e) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000000c0)=@v3={0x3000000, [{0x6eb8}, {0x5, 0x3}], r2}, 0x18, 0x3) 14.871507719s ago: executing program 5 (id=2279): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/215, 0xd7) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r1, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) lseek(r1, 0x0, 0x4) (async) r2 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000100)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000940)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000f00), 0x0, &(0x7f0000001080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}, @end, @end]}}}], 0x68}}], 0x2, 0x200000c0) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = dup(r5) bind$rds(r6, 0x0, 0x0) (async) close(r4) (async) getdents64(r0, 0xfffffffffffffffe, 0xfffffdf8) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x4e, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) (async) r10 = socket$l2tp6(0xa, 0x2, 0x73) connect(r10, &(0x7f0000000000)=@generic={0x0, "a580f1724e779971ec8449b37f662c740dd6f32f4192451be94d20d79c1885f5affd021e978c1ba6d87d9bb35f8e73bbb763abcc60fba685174814fbdec7624b87f7ddc441cc67fdf1cb839bea4a7b3f9a0fc44711bdd6913b7381dea622ac79bc252f10f96b9b201e9e4a736d999a2cf671690e4a1b12da522173e13a5f"}, 0x80) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@deltfilter={0x38, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff1, 0xc}, {0xffff, 0xffff}, {0x0, 0x8abf833ddfa404b6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x4c844) 14.695034155s ago: executing program 5 (id=2280): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) syz_emit_ethernet(0x248, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r1, &(0x7f0000000380)=""/144, 0x90) pwrite64(r1, 0x0, 0x0, 0x4) socket$key(0xf, 0x3, 0x2) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000000)={0x2, 0x0, 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) syz_open_procfs(0x0, 0x0) close(0x3) open(0x0, 0x14927e, 0xa0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x4b, 0x0, &(0x7f0000001680)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000180)={0x9}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 6.780582171s ago: executing program 1 (id=2311): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x2004c840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.640945836s ago: executing program 1 (id=2312): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001", @ANYRESOCT=r0], 0x0, 0x0, 0x0}, 0x0) r1 = socket(0x11, 0x3, 0x1000000) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f00000001c0)=0x9, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000b80)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x48d, 0xce50, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x20, 0x2f, [{{0x9, 0x4, 0x0, 0x15, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0xe81}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x9, 0xf8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x1, 0xf, 0xd3}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xfe, 0x3, 0x3, 0x20, 0xf7}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0xe8, &(0x7f0000000180)=@string={0xe8, 0x3, "d719b9a24aebb5b827440147816254eb37f4a88aef070e4d97a100f9384c6d2bdd5f036dcea03f97b8475060f7a58eb2cc6625a59cdbaf8c9d08a2376694283463b7fdecb314a5f47bcde6cc2d979a29d8764a91f9a44b15862f929f88a10aa682569dd7a6472acb724e2a4ff24dd55e154a28971f15eaa3cc2066fcd10d5088db93da2089c9cdf2c11f6909e1d6e7803947cdd11a2089c61dbbe3e85d4375be1713400f749da7e1234b52129fdfd2359bb2d971faedda8c4e072757411e46e9c653416efcb1dc385624b13a50b761da955ddd18629899d38d88f42b05a8eb12e3c400796f78"}}, {0x63, &(0x7f0000000280)=@string={0x63, 0x3, "a28b18042a3add7186af8c22201ac1bce2d1af441bbc0da9d3f2277cb8cf53a0fe7c7d385c9336dc6c9cb68a84b6a49bf53e4019404bb5de89cc83a66683d403d35c244cf89e4427250130331491168848d914d35b335db29bc72bcd1cb103bb49"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x804}}, {0x97, &(0x7f0000000340)=@string={0x97, 0x3, "20775283c5b59f8ccd0491bb865691c88a84701283596da46d095eb1cf4510d6797a764fb4830c29fa464a56234808973eed0932127a57f3053b69fec8dd2c6b3c73070a7fbfe6800101f69ac88572721e71957e7777c8527822acc547e6078e16f578eba3bad5b503cd588c2b74aed4167dfa6ab5b4d648d7cac54587dcdc28fc6b3eb4ecc396eecd73ae660afd8b2e18fc669779"}}]}) 5.058205962s ago: executing program 2 (id=2322): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)={0x14, 0x1e, 0x101, 0x70bd25, 0xfffffffc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d48", 0x3}], 0x2) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000000c0)={0x14, &(0x7f0000000340)=ANY=[], 0x0}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc8, r4, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9df}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe6}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x14, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044011) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}, {&(0x7f0000000040)="53000000796613d655a92e064b578623044e932885cc8daa0cdf2bdeee3fb0463f9a9caf5b3faebb3704be9f88637386318b0488", 0x34}], 0x2) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000180), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@ldst={0x0, 0x0, 0x2, 0x0, 0xb, 0x20, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0xa, 0x1005, &(0x7f0000001840)=""/4101, 0x0, 0xa0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) 3.590891062s ago: executing program 1 (id=2328): r0 = syz_open_dev$media(0x0, 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) (async) listen(r1, 0x6) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003000c0b, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETGROUP(r6, 0x400454ce, 0x0) (async) ioctl$TUNSETOWNER(r6, 0x400454cc, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9, 0x0, r1}) epoll_create1(0x0) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) r7 = dup(r2) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000ac0)={{{@in6=@private1, @in6=@private0}}, {{@in6=@dev}, 0x0, @in6=@private0}}, &(0x7f0000000200)=0xe8) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000240)={[0x2000000000, 0xb, 0x80006, 0x4000000000000e51, 0x101, 0x547a, 0x103d, 0x200000000006, 0x0, 0x3aa, 0x1, 0x1, 0x5, 0x40000000009, 0x40000000080a8c, 0x800000068], 0x6000, 0x4000}) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0606610, &(0x7f0000000040)=0x60) (async, rerun: 32) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (rerun: 32) close_range(r11, 0xffffffffffffffff, 0x200000000000000) 3.457566074s ago: executing program 1 (id=2329): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0xc090, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty, 0xa17}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000400)="700569b1f0862c6fe1198244a6216dc4cf2f95d91db53397123dd80885e1632e63ccb88de7b05548d8c227d437add86d7986eb93911f9ce05fb1579fd32d11e07194cd08b920d49071dea9948ee87c01e09340488a3327ce4ea274b4d076d24bcc3e181b39e10c87651db31e42ab9216c328e5abdd8150463a7f9028b93d933f59c116aca152a7d307f484687c4a532002e9616b78b7e075f931e4f8989bc42c3ac4eba63f3d04f8dcbaf0", 0xab}, {&(0x7f0000000080)="f34f4068b5cd9feede96fb27ae674bdd4ab9c7fe154c82e7b5b0d306b18c7fc3284f9000be20fe1c3555607a71946c91df3034eb11f8240789602b", 0x3b}], 0x2, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x20, 0x1, 0x1, [r4, r1, r1, r2]}}], 0x38, 0x40000000}}], 0x1, 0x4000000) close(0x3) syz_usb_ep_write(r0, 0x5, 0x52, &(0x7f0000000200)="9cd56b6dc16dcaa8b1c47e6c052049bf8993b563919aa87825cc5eb0aff29cb182b71fdaccba9225f9cb248259d69cd3a1135b8c9d66a78d9f9090bc448f349cf1a3f1b6b813df6e696ea8e37d30d0dc4f8e") syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x40, 0x23, 0xa0, {0xa0, 0xc, "82a0b506d18388d96a8860aad541520a4843319eabc3da3490ea5a227cf7ec2cea9a503e5d05b0775fd90119fd6c1a82a53552ac1d979939df30db2e596c69486dd650ef60ec5f4c8fc6dce9541d5fff27832e7ab4f8f940758f968e0adf2e647631969f52696b2633b31446e1f0f933bb5c7ad293068ccd90733cd032b878b9c017c67f7fe76826b4e7be5031d6961dd1809a28eba8d68c148302e435ae"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x600) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000140)=[0xc022f, 0x5]) 3.33582284s ago: executing program 2 (id=2330): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0100001000010000000000000000000a010101000000000000000000001200ac1414bb00000000000000000000000000000000000000000a00000063f90000", @ANYRESHEX=r2, @ANYRESHEX=r1, @ANYBLOB="00000000000000000000000000000000000000003c000000ac141436000000000000000000000000000000000000000000010000000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000000000000400000000000000fdffffffffffffff04000000000000000000000800000000000000000100000000000000000000000200000000000000000000000a000000cd000000000000004c001400636d6163286165732900"/244], 0x13c}, 0x1, 0x0, 0x0, 0x2000015}, 0x44000) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0xfffffe0000000001, 0x10000000, 0xffffffff}, 0x0) (async) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) (async, rerun: 64) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp={0x0, 0x7, 0x32314d4e, 0x7, 0x0, [{}, {0xffffffff, 0xffffffff}, {0x4}, {}, {}, {0x6}, {0x0, 0xffffffff}], 0x4e, 0xac}}) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x4241, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) (async) sendmsg$NFT_BATCH(r7, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) socket$xdp(0x2c, 0x3, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.251447172s ago: executing program 2 (id=2331): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x4e21, 0x0, 0xa}, {0x1000000000, 0x4, 0x0, 0x1, 0x80000000006, 0x9, 0x2, 0x40000000000000}, {0x8000000000000000, 0x100009, 0x53e5, 0x21}, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in6=@private2, 0xfffffffd, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1500, 0x4, 0x2, 0x0, 0x4, 0xfffffffd, 0xfffffffd}}, 0xe8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x28}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) (async) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101040) ioctl$EVIOCGABS20(r1, 0x40044591, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x0, 0x0, 0xe3800000000000, 0x58e}) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000240)=r3, 0x4) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000140)={'\x00', 0x2, 0x0, 0x6, 0x0, 0x2, 0xffffffffffffffff}) (async) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000000900020073797a32000000000900010073797a310000000028000480240001800b000100736f636b65740000140002800800024000000002080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async, rerun: 64) fcntl$lock(r5, 0x6, &(0x7f0000000040)={0x0, 0x3, 0x2, 0xffffffffffffffff, r4}) (rerun: 64) fcntl$lock(r2, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008}) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000c00)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c0311040000000c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYBLOB="0635d3fb90fe59"], 0x0) 3.133478715s ago: executing program 2 (id=2332): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80082, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x11, r1, 0xfffffffffaa23000) r2 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x40084504, &(0x7f0000ffcffc)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000001540)={&(0x7f00004a0000/0x1000)=nil, 0x1000}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x5fd, 0x5}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000000)={r4, 0x2f, "2a139440424a0ca9f8898fd489acfce9f6bd6151d2e6d39ea972179b79e47d04f338147bcc67e8695e14b0aa35d6f8"}, &(0x7f0000000040)=0x37) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={r5, 0x5, 0x0, 0x0, 0x3, 0x7}, &(0x7f0000000140)=0x14) 3.078696359s ago: executing program 2 (id=2333): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) eventfd2(0xe5a, 0x80000) r3 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xf400000000000000) fcntl$setpipe(r4, 0x407, 0x80000000) sendmsg$key(r3, 0x0, 0x40408c0) r8 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x3234564e, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000140)=""/181, 0xb5}], 0x1, 0x6, 0x1) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)='\x00\x00\x00\x00\x00\x00 \x00', 0x8) 3.013186263s ago: executing program 0 (id=2334): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r5 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x13b800, 0x0, 0x24}, 0x18) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r6) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) (async) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) (async) sendto$inet6(r9, &(0x7f0000000000)="19", 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) shutdown(r9, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x1}, 0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r10, 0x400, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40060}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x2c, r7, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x44, r7, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc4af}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x4005) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 2.941333178s ago: executing program 5 (id=2335): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010326bd700000dcdf2526"], 0x2c}}, 0x804) write$uinput_user_dev(r0, &(0x7f0000000940)={'syz1\x00', {0x1, 0x2, 0x1ff, 0xb06}, 0x27, [0x1000, 0x10001, 0x80, 0x10, 0xc, 0x827, 0xf, 0x1, 0xcf1, 0x2, 0x0, 0x8, 0x3, 0x100, 0xc776, 0x7, 0x7, 0x9, 0x3, 0xfffffffd, 0xfffffffd, 0x4, 0x2, 0xa, 0xe, 0x1, 0x80000000, 0x4, 0x8, 0xb, 0x4, 0xa9, 0x956, 0x11, 0x88, 0x4, 0x2, 0x7, 0xa, 0x0, 0x9de, 0x1, 0x0, 0x80000000, 0x7, 0x2, 0x7fff, 0x200009, 0x40000000, 0x6, 0xb05, 0xc, 0x5, 0x5, 0x6, 0x4, 0x0, 0x3, 0x3, 0x9, 0x5, 0x6252, 0x0, 0x8], [0x800, 0x96, 0x2fd1d58, 0x0, 0x401, 0x6, 0x1, 0x8, 0x7, 0x80, 0x4000fff, 0x2f, 0x9, 0x0, 0x6db9, 0x0, 0xfffffbff, 0x6, 0x100, 0x4, 0x7fffffff, 0x1, 0x8001, 0x1, 0xd, 0x5, 0x1000, 0x8, 0x1, 0x9, 0x80000000, 0xc, 0x1, 0x1, 0xfa, 0x7, 0x9f9, 0x1, 0x2, 0x800, 0x2, 0x451f, 0x1, 0x605f, 0xb2, 0xd4e5, 0x3, 0x80000001, 0x1, 0xa, 0x5, 0x0, 0xb9, 0x7, 0x101, 0xca8, 0x0, 0x7fffffff, 0xfffffffe, 0xffffff81, 0x5, 0x7, 0x5, 0xff], [0xfffffff5, 0x0, 0x0, 0xdd, 0x6, 0x0, 0x80000349, 0x10000000, 0x89ef, 0xcb4, 0x4, 0x587a, 0x0, 0xf, 0x100, 0xa0000000, 0x0, 0x5, 0x4, 0x9, 0x6, 0xe, 0xcc, 0x7, 0x10000, 0x8, 0x6, 0x6, 0x3, 0x10001, 0x7fff, 0x1, 0xfb, 0x2, 0x5, 0x1, 0x0, 0x1fd, 0x6, 0xf, 0x5, 0x2, 0x1000, 0xfa, 0x5, 0x2, 0xfffffff7, 0x0, 0x2, 0x3, 0x9, 0x5, 0x741, 0x3, 0x8, 0x2, 0xfd, 0x8, 0x6, 0x7ff, 0xd, 0x5, 0x7f, 0x4028], [0x2e, 0x9, 0x1, 0x33700000, 0x5, 0x4f84, 0x7ff, 0x0, 0x4, 0x2b, 0x6, 0x81, 0x8, 0x200, 0xa, 0x1, 0x7fff, 0x7, 0x4, 0x1, 0x2acd684b, 0x2, 0x0, 0x80000000, 0x8009, 0x4, 0x41, 0x7, 0x2, 0x4, 0x5, 0x6, 0xda, 0x200, 0x0, 0x6, 0x2, 0xa0000, 0x6a, 0x6, 0x8, 0x8, 0x5, 0xffffff2d, 0x20004, 0xbe9f, 0x5728, 0x2, 0x8cb3, 0x40007, 0x400, 0x7, 0x10000, 0x1c0000, 0x8, 0xaa3, 0x38e5, 0x0, 0x5, 0x2, 0x1, 0x3, 0x6, 0xffffffff]}, 0x45c) syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a8008009040000010300"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket(0x11, 0x800000003, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) r8 = openat$cgroup_ro(r4, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0) preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000e00)=""/57, 0x39}], 0x1, 0x2, 0x8bd7) r9 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$HIDIOCGRDESCSIZE(r9, 0x80044801, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x40, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) mprotect(&(0x7f00005c7000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r10 = socket(0x2, 0x80805, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x7a, &(0x7f0000000340)={r12, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000000)={0x200, 0x9, 0x8000, 0xffff58ca, 0x8, 0x9, 0x0, 0x1, r13}, &(0x7f0000000080)=0x20) 2.787293699s ago: executing program 4 (id=2336): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) (async) chdir(&(0x7f0000000540)='./cgroup\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) r0 = socket(0x80000000000000a, 0x80000, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e000000200000000ffffffffac14140c"], 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xa0, &(0x7f0000000580)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0x4, @local, 0x2}, @in6={0xa, 0x2, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff}, @in6={0xa, 0x4e23, 0x7ff, @empty, 0x9c3d}, @in={0x2, 0x4e24, @private=0xa010100}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e23, 0xffff, @private1, 0x9}]}, &(0x7f0000000100)=0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r10, @ANYRES32=r6], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1f4, 0xd, 0x7, 0x4}, 0x9c) (async) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0) (async) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000640)={0x0, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x1fffc}}, {{0xa, 0x4e21, 0x40000, @dev={0xfe, 0x80, '\x00', 0x3c}}}}, 0x108) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffe0}, {0x10}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) 2.679541879s ago: executing program 0 (id=2337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240308000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092402050001"], 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="05"], 0x1c}}, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 2.097360418s ago: executing program 4 (id=2338): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8=r2, @ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bond0\x00', 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r6, 0x0, 0x0}, 0x10) r7 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) r9 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r9, 0x0, 0x1) r10 = syz_open_procfs(0x0, &(0x7f0000001240)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000140), &(0x7f0000001180)) preadv(r10, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) 1.858127822s ago: executing program 0 (id=2339): ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef60, 0xfffd, 0x1, 0xff, 0x8, 0x80, 0x8, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0xd9, 0x0, 0x2, 0x7, 0x8, 0x5, 0x6, 0xb, 0x1, 0x3, 0x9, 0xf2}, {0x7fffffff, 0x4, 0xc, 0x2, 0x0, 0x2, 0x7, 0x0, 0x9, 0x4, 0x8, 0x4, 0x1}], 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0xcc, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008009) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xd0003, 0x0, {[0x7fff, 0x6, 0x4000000000007, 0xffffffffefffff11, 0x3, 0x2, 0x7, 0xb37f]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.53548646s ago: executing program 2 (id=2340): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x20, 0x3e, 0x10, "21d8747f2a9ff39af9e4b7bc62abb2b5"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000003c0)={0x20, 0x1, 0xc1, "8b8f72827f49fe3bba20efe4e47b081c23f53cc1ddde886b9e955b90d89ff3593b1ac7bcf3e8e233e3a117227fbdd77e8909472610283682b4c4d012b19b2572bffae41b17044b8494ee2914c067bf6de535098932841ec4d0e905047057ec51a4b08119f9a7a6d90ad2c82e8c8e111a330bee15d9a73093c76f1d1018c00b88f7b7dc359e08f1aca20353d6ea47499a6cec4e5d0dcabd06864087fc407ec463cc50190402f7a36c13a49e2c1ecdbbd6f9036aefa96d2a2880babf8a03b3b3c2ea"}, &(0x7f00000004c0)={0x20, 0x3, 0x1}}) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x7, 0x24c501) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, 0x0) 1.453049698s ago: executing program 0 (id=2341): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000040)=""/4096) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe8, &(0x7f00000010c0)={[{0x19, 0x4e00, "21efac76815aa0301a7ee8033f6b19eb032315726e76bc88ea"}, {0x64, 0x4e00, "e175ee9ad7cfb45f98f65c1a25aa5a9d888161fe21ee309350fe76b3e06ebb143666d91f35784f1fd3230e6977dabff99596d7c32b6061f69f550d10fe179de017c6a619889f3783f35c5df3f840851ceda4bd602ec9cf7cc8f38fd0fb7111037f921d26"}, {0x59, 0x4e00, "09d3327be1f08ede5504ceffa9fe001ac7423d1e5cfb01de293a28ff1bc26730fb8fbfc99f4b89bbb2190f29ad19bad0b9edfad553c07806bf9d22422c6190ebb0378bb03b32de2256c4d9e0e851e2eca58001ef32d8c8cf6d"}]}) r2 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x40000, 0x8) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000001200)={{0x58000, 0xe000, 0xc, 0x9, 0x5, 0x1, 0x5, 0xf9, 0x7f, 0x9, 0x1d, 0x4}, {0x6000, 0xa000, 0x10, 0x3, 0x30, 0x1, 0xb, 0x6, 0x3, 0x9, 0x6, 0x1}, {0xffff1000, 0x8080000, 0x8, 0x2, 0x7, 0x4, 0x3, 0x6, 0x9, 0x7, 0x6, 0xf2}, {0xfec00000, 0xd000, 0xe, 0x8e, 0x76, 0x2, 0x10, 0x3, 0xf4, 0xe, 0x8, 0x7}, {0x3000, 0x58000, 0xd, 0x3, 0x40, 0x3, 0x7, 0x0, 0x8, 0x9, 0x32}, {0x0, 0x25000, 0x10, 0x9b, 0x9, 0xb, 0x4, 0xcc, 0x7, 0x5, 0x34, 0x6}, {0xc000, 0x80a0000, 0xf, 0xff, 0x3, 0xf6, 0x3, 0x5, 0x8, 0x5, 0x6, 0x7}, {0x2, 0x2, 0xe, 0x2, 0x2, 0x6, 0x5, 0x2, 0x7b, 0x3, 0x4, 0x5}, {0x40000, 0x7}, {0x60000, 0x8000}, 0x80000000, 0x0, 0x5000, 0x200000, 0xd, 0x2000, 0x4000, 0x0, [0x4, 0xfffffffffffffa1c, 0xffffffff, 0x4]}) syz_usb_disconnect(r1) setxattr$security_evm(&(0x7f0000001340)='./file0\x00', &(0x7f0000001380), &(0x7f00000013c0)=@v2={0x5, 0x1, 0x11, 0x3, 0x4f, "baa44e9b1f62e8efd0ce7716c918ce9f9e11ff3ebc07080763e21d388c972df6319144b44d62d4561f5f20a4abad771f7ee4bf1a442ab9609440c70b6b1b3bbb5efd81240ccbf09dec43b260d1918a"}, 0x58, 0x2) r3 = getpgrp(0xffffffffffffffff) ptrace(0x11, r3) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r3, &(0x7f0000001440), 0x4001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000014c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)=@mpls_getnetconf={0x4c, 0x52, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x2}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xde42}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) setxattr$security_ima(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640), &(0x7f0000001680)=@v2={0x5, 0x0, 0xf, 0x1ff, 0xe0, "df646dba0976f1236dfe8e9d58320141ca82591b59803428979874a6a18d5b1fd32ddfae22c9ab6fb2c56b6e47146aeae3c51efbe5d521d353dc538e4f6c9759a79d435f53732b8c1772691a8fafac432554dbfa9a7df6a3c59bec7f80262801a2cd4490acd652a5c526ab7f4ea0bf1e4d412c7947895d7bb287130e0bf515f0b7d1000b6753df522116575f7eaf8b93843cce8594d24f1642d44d394bf279cdc9df48ffd3866f91970830d66d2dec576d9db7313d65cb6ce354ad0401a6e1b9620d9cbac998cd4704c42e387c32afc54647df054f1dfd4333463423a67800f1"}, 0xe9, 0x2) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x20, 0x1409, 0x20, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x80) move_pages(r3, 0x1, &(0x7f0000001880)=[&(0x7f0000001000/0x3000)=nil], &(0x7f00000018c0)=[0x2, 0x5, 0xe, 0x80000000], &(0x7f0000001900)=[0x0, 0x0, 0x0], 0x4) gettid() sendmmsg$alg(r0, &(0x7f0000001f00)=[{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001940)="9d78c7f09208d80c50df2af063b04a6bd2fec9db7057817129d4eae36acd222600426a3f476df8231c2a2518e2b158f48d003a26bdff2d440f6e458fd48ddc6bd13cc52fa7863f1b2bdd4074b0452436b6dc5b960d6379e999e7f134c93061d50a3123c4b37218a5", 0x68}, {&(0x7f00000019c0)="c6da2d43c6cc16c9c8f934ed8d484e2f6d22046a49ffc86e28420c8a585abf9c0a25577ce63c4c95bad9a6c0ed4c3039eb4817453a5e614485b73c255f4cc9b9bf055477f3f829ee605a15155785b09f1ad49dcb514fc10bac9463877295a725f5a1c90302562228e2f8a9f26bff54956ad23ec6f45d474852c3316df9c13cc679f2f8f3eb6e9ed9b5813914eb41c87ef14e1a266c7773ecce", 0x99}, {&(0x7f0000001a80)="048547bb35113f4e713248e779b5fe772020bbca0db682ab3040f3d21db8c3e6d0ddc12e9181ae2d75992cce81b2b08888d3c96e4a6cbeabf37283a3ffc1aa7fae6a3770e75d181d894123e28a5552058dbcebfb8eb6ddbe6cbf14580d1e207284dfaed8a805ca3bc828ea8444db0bd296541b6b1d03a9b3d7981b2c0c9c466d3880c11bf94d6b043dcf6e59053072e3f88646170aa7dd89b94c08b9780f86aac1942eea9cf8e4d10fd22ca9", 0xac}, {&(0x7f0000001b40)="74a292fb8fff07e45ac711f56c21a78f39bcd085a24f7cd706e486b0fa5c1de7a1eb8baaf6b40c91adecc6304a2d9cf10d963b96fa735dfe3c36757470d014d915dac79b74f1f9f77c9f8a1422d228f816497831e0f28b31335126a85b31cdab6d88cbedf296ad8dba1bf7e4e227fbf27fb07f02c553017bdf621d1e1b0954b14f01b77750b9ca63a6da2be1af79f845bf4ec4fa952f5580b5eab8a9dadb0624a26b4acc1bd187ac81bb01081375932e5e566de6dc5f3e0048906a89f0c9659f929b59c992427628f03c0b922acbb1d32fefc17a344ecf5c9e40d7d341e90bca8b7da7c551", 0xe5}, {&(0x7f0000001c40)="d6d57a959e018c708e0fd5c7bbc74fcb134096a79ec7dc897044a88562b3cc5abadc41f6f15cbb628b04", 0x2a}, {&(0x7f0000001c80)="692d4bab26dddbbd6555951c820a00f3c454e62006adf5d93d69a740fbab28b41b0b8878ea385bea24d35cdf59c77581438aa3389b98b9f9280c3a3962a4815b794571ea74c878757de83d509cf9184cb490568283133255ef94541e032ff1e3945fb18f113d1fc7dbd0ed5d7f05156d9891c7703caa6571de3bc1ab113d7ef142b2bd4e1578049731b30c30001743ebe34a7bed2c5ea578c987b22828b206022d10d51eb303e982c9730a4e7e1137f493e1ea3189833da6a88d4c70705c885b13f1", 0xc2}, {&(0x7f0000001d80)="69da14dc7c3a5c02b82fc4a10d7b4f10c47bd203948b78f6b418adae09a5b318f95c1ff45392fe4bfad05671a40e38d254eeb5bce84e0d4ff3802d687e0823e3c6c53bcc688df9e020e549c613e023444109e75aacc3cd9c4426f9402f5823f07407fa0ab04c9fc642c2335cf89542c5f2f2d3faab7e1d7388b1117a275cb20bc74102430e81dccb5e33", 0x8a}], 0x7, &(0x7f0000001ec0)}], 0x1, 0x80) r5 = memfd_secret(0x80000) fcntl$setstatus(r2, 0x4, 0x2000) r6 = syz_open_dev$vcsn(&(0x7f0000001f40), 0x4862, 0x840) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x30, 0xa, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1e}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x96e0c64d9088b44c}, 0x81) r7 = syz_genetlink_get_family_id$team(&(0x7f00000020c0), r6) getsockname$packet(r6, &(0x7f0000002100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002140)=0x14) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000002180)={@rand_addr, @initdev, 0x0}, &(0x7f00000021c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000002200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000002240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000002280)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000022c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000002e80)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002e40)={&(0x7f0000002540)={0x8f8, r7, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0xc8, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x195, 0x0, 0x10, 0x7fffffff}, {0x4, 0x1f, 0xb6, 0x400}, {0xff5, 0x5, 0x24, 0x7}, {0x7b81, 0x4, 0x9, 0x7}, {0x80ec, 0xad, 0x9, 0x7ff}, {0x9e13, 0x4, 0x55, 0x5}, {0x1, 0x9, 0x2, 0x5}, {0xb5, 0x8, 0x1, 0xf618}, {0x2, 0x3, 0x7, 0x652}, {0x1, 0x7, 0x7, 0x8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r12}, {0x104, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x40, 0x6}, {0xfff8, 0xf, 0x6, 0x6}, {0x80, 0xf, 0xdb, 0xd}]}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r13}, {0x1b0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd3b}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x8f8}, 0x1, 0x0, 0x0, 0xf1d318da27350787}, 0x0) 1.189962616s ago: executing program 4 (id=2342): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r2}, 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x11}, 0x4000000) 1.126179136s ago: executing program 4 (id=2343): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80880, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b52a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x1ec, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0x1c0, 0x2, [@TCA_U32_SEL={0x1b4, 0x5, {0xb, 0x8, 0x7f, 0xc, 0x3, 0xff, 0xfff, 0x7, [{0x5, 0x8001, 0x1, 0x8f}, {0xfffffffb, 0x7, 0xfffffffa, 0x800}, {0x9, 0x6, 0x5, 0x9}, {0x9, 0x9, 0x2, 0x9}, {0xffff, 0x10, 0x8, 0x7}, {0x0, 0x2, 0x7, 0x670b2445}, {0x2, 0x8, 0x7, 0x1}, {0x3, 0x3ff, 0x7ff, 0xbeae}, {0xfffffff9, 0xb78, 0x9, 0xfffffff6}, {0x5, 0x6b, 0x3, 0x49}, {0xa6, 0x4, 0x60, 0x9}, {0xfffffff9, 0xcaa, 0x80, 0xc0000}, {0x7, 0x2, 0x800, 0x6e77}, {0x77, 0x0, 0x0, 0x6}, {0x9, 0x9, 0x800, 0x9}, {0x4, 0x8, 0x5, 0x5}, {0x6, 0x6, 0x4, 0x672}, {0x5f, 0x80000000, 0x9, 0x1000}, {0x4, 0x570, 0x4, 0x8bb2}, {0x0, 0x7fffffff, 0x4, 0xe9d}, {0x2, 0x4, 0x2, 0x8}, {0x9, 0x4, 0x9, 0x1}, {0xcf, 0x7fffffff, 0x5, 0x2}, {0x200, 0x5, 0x3, 0x1}, {0x7fff, 0x3, 0x10, 0x5}, {0x9be5, 0x1, 0x4, 0x2b7}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xf, 0xfff1}}]}}]}, 0x1ec}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@local, @local, @mcast1, 0x2, 0xe, 0x3, 0x500, 0x81, 0x800081, r2}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r3) 556.78669ms ago: executing program 0 (id=2344): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) fcntl$setflags(r0, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x22040, 0x0) write$dsp(r1, &(0x7f0000000100)="f70651a890bf3a352e8d3c915ea88ca35b12778b8b39a01fbe90305d75e420330633c37006eb94a7a49dcaa7e374bccf145abfe93ec6ff775aecf32db5096aafa3b228aebe1b04811ab384", 0x4b) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x4, 0x81) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f00000001c0)={0x7, 0xd, 0x3, 0x5, 0x2, 0x200}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@mpls_delroute={0xdc, 0x19, 0x300, 0x70bd27, 0x25dfdbfb, {0x1c, 0x20, 0x0, 0xd, 0xfd, 0x3, 0xff, 0x4, 0x1000}, [@RTA_DST={0x8, 0x1, {0x9, 0x0, 0x1}}, @RTA_DST={0x8, 0x1, {0x7fff}}, @RTA_NEWDST={0x84, 0x13, [{0x8, 0x0, 0x1}, {0x5}, {0x3, 0x0, 0x1}, {0x8}, {0xe}, {0x1}, {0x3}, {0x6}, {0x7}, {0x60, 0x0, 0x1}, {0x989}, {0xfc8, 0x0, 0x1}, {0xb, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x4}, {0xe}, {0x3, 0x0, 0x1}, {0xc}, {0xc, 0x0, 0x1}, {0x8}, {0x601b}, {0x2}, {0x200, 0x0, 0x1}, {0x1}, {0x597}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xc000}, {0xd, 0x0, 0x1}, {0x64, 0x0, 0x1}, {0xb5bc}, {0x9}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}, @RTA_OIF={0x8, 0x4, r3}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x81}, @RTA_VIA={0x14, 0x12, {0xf, "d362385594bf5216fa58ffbf750c"}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x60000004}, 0x40800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xc0, 0x0, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7a}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xf}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2416}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x54}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) semget(0x0, 0x0, 0xc3) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000001500)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000014c0)={&(0x7f0000000640)={0xe58, 0xd, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xdec, 0x3, 0x0, 0x1, [{0x254, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x34, 0x6, 0x1, 0x0, "721382977d3e58504ca5fe27514489e5394e1b3161400db757b722533a10878fbc13e6586db6f7866a5cda4254991883"}, @NFTA_SET_ELEM_EXPRESSIONS={0x124, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x64, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x52}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_NG_DREG={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x6}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xf8, 0x6, 0x1, 0x0, "529aa96079e9c83240481ea0fec91135929ddacf8149e3ac12d2ce51e417cab106881b990b7edac7481787c67bc0db2a076bb70f7477032be4331db15e7f3a86fe112827f8d04f1091629a72a2c6ad3db65b6084db3526695cd551fba18ba7f8947555ac97416628a54829e4a49cd86f92acba7078a0fa23ed630af8b81e816bf73a003f26a641e10aedd423bcffe997bc8fa5c2d2e3d9b4557277531126b81b56bb56b0443f58ed5a274c949b2a593458ec0d726ca18c8e20b3b8bdc84f1a94cfef41833664e3dccc3e92d9b5e0e23bfd17afec61957ff8696ff95e7f46c57cf89b5aa2db16c7c4e4072c755dcfec3eac1c83dd"}]}, {0xb94, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x9f, 0x1, "d56e38fd78d57ca9325e41639e2ab01cf0aa91444a1a9f359acd6d86ba459d800c1ee2e74562a8f2b20dc130cbb45b81c670bfbbc721398e4372a745c4085c1a762a7c29bc03eaac9b6ce83e1edf7fb0f2a34aa1ea2a2eb5ac06aa6c53e7ef380f68bef5edd4620b131ea3cdec075c5fac4fb598223dabc845c78950cc730032bb0aedadea03b6fc4d32f23374b27c5c9e2a3c44ea54d61bee5cb8"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "cc80dfeb9608f5cea36a2bfb8b11c0b7d89ace5f04344d38e9c2158fac2eb710f6bd7559645f74456013802f0f766bdccf08e5b2e95b4d37d3a4870ff3a0156286d621ed06919f97c948e233eb6941e9f340ea3fa4853bd530d3e5223b8c47d1ec2dbd19a7bf67f78636"}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_USERDATA={0x9f, 0x6, 0x1, 0x0, "ae572883adaa834a86b6e07dfc9747a71aa2ae2f9c5f34107fb392cfe32286ad08de0741b40264af5920d642355aa547e85937df4aafbbdd0245f557632262946a846f40fe9e17c7fa5ed7284fb086fa96d8a414dfe2fc2275e83ceea65f53cfafa6c3db0d73782f4cb827d6d3a812c00d6b76910bb8356351a5bb50b3b9f373773583e11e8e0e58c65ecad9563df1c70980efefc39e3b7e497274"}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_USERDATA={0xd0, 0x6, 0x1, 0x0, "49bc5c602edacafa0e49f51d5c6b8a61fadb1d756eb7d17702e642c88903110b002ba12a0d11ae8fd722c215ac6d222ff8145d79a96168daec5b147b60e30598687c2fb0766ae86952884a95f42f11b6b8593f4fd2020083d154b410fa8aadeabfc5c1708234c9c4ce0f546d781e56ec41d4002707cc72c23b6f19c07e6e1c040703292f3dca879e0748129a096a4d162b3d25e5064ca1c47bec18837df1620975d125135e4269dc0b60a8f26978f8331c16819ca3dc132a4baa149876a242d82ad3e533b57919290bababed"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x778, 0x7, 0x0, 0x1, @immediate={{0xe}, @val={0x764, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x3ec, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xbb, 0x1, "5c1c0b2ea011f5e2f5df2f1d61e370217bdf5c9420160b63fc2af9c324ffa95a201361f5262c072d884de030fe874c489ef661c34f802f532d89277f4b836e109ec878ebe207c7932466da53808d51b47547b1d579cde1374a6d233b24ac7e5fd9b710ecd70db5b1a3e954da6913282536897bd09d1dc1bb0f0feb0e2dacf7bf7b210f720972764a639702fb6fa56abc1a59ec4f0a4f784b702afadce5eba19fc91f5d9d8aea78d9cbaae18986a8190c9a925fb90a2b3d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x8e, 0x1, "0129843a2bb7eda2239a7311ad847425c48b6fa3f909dce2d168a2b426834a93dd70acb141b596b580ba3173a888b7c5fa5dd8d13d3236675c5f697e5ab77aea4da498c0a3009135ffaf422fa36fbe2aaf8632c3ebdf5fdcfb0e5521de640bad1c8e7abd8209ff788dc245e9093e4b9d45b2ee9292e9a3e35569cba3067f70c59923bb554f184dc3b563"}, @NFTA_DATA_VALUE={0xe9, 0x1, "a37d17348c3297f8597e01706d724712e12207c2a13a8e45165973925e592bdd377f76229a47abc63b4a2c01b623be9639b98b841a24d0e3fa0c19b1befe39359593086e405aee856238d1c47ebc8f99149dd4147d52bfc3cd16d1fbbe169db86d12876fccf6e8ad2812535f2bb5fd7ae2bd1f93c0fd9b8599d7425b03c635c9f82464a9e7aa17c65a33864b1f6336170f1865d9b7222e136c4d393fd1e73e59a2c87eda5e387511d78f2c3ae61ed31b5cfd594776a7ee51c148af74cdd302ea1447817dab45a05a555c4ccd191c498ad4910fb96b04ecf96f5bc7604c1b553a86cda72886"}, @NFTA_DATA_VALUE={0xae, 0x1, "4f31b234a172edc0e3fe72a7fb04c02979b3a3b5e92033e1b59ae4538119cb8326511b97314741549950ff529aecd269fc04225ab8761c096de4079d05dfebca3b3bb9c6b3f8e4deaa4c647309e73263cd1af86459b3f0bb51f7bea25dd56c746606385a42ee0f408686b37c7e2a57b856f8048a1bed3bd44204cca88750b33c3486bd8f645ab9b35363361527ab89b7813acc0f88e805f3d34228184a092a7f35313c31cf0e4165163c"}]}, @NFTA_IMMEDIATE_DATA={0x228, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf7, 0x1, "bb240f6b50dcfae321178b20895dcb2961c61006b26d990f7954b31aa53b9bb6e7702f052e86f914bea37f94724c5e04139882ac3598e7c3f5c96efa518e420d15443408c248e7bd61110fede397ae32aa337fe8de1d7b48386b5b52d8e8772ffe4abefd1535da035a6e3e84302d8d028db8f384b52b1a53305cfb2795104646b77a043f78b0dc4ea842f3476110d07646f1da8b76e4802ac724d5d37a86560c66e6777094ef47c973b3d66a4d8bbefd7c6e450b6a458257c009efc756271efdbf0644cdb81dacd6fc2bc825c840166b3ef5fe767c9311bfe1c4459a8db19bc7e3d0dc4d9b0efd5072d78b6ea4f86349427489"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x6d, 0x1, "574c5f42f77b148d5e88a552267b1dec2af15b530a9b50e1d521f051fb290ede21532e52d765a64171ab03d32c579235a404869b4c09e20c583318a14a0e359fca56866faf7d291544de9a1bd8c733704464a94ca970a24063b64b5644ee1a61503e62ba1271740685"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_IMMEDIATE_DATA={0x144, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf2, 0x1, "3c9a1212c1c64cd94eedabde2b9e8267da46181b1416bd6b372fbf8c7824998d8f7eb5523b023a7cb7c1bd897b617635e66dc824d57d6b96bbda3fa14b52180b30c04bbb62a8a68b7f4b7d0c62eb445b5dc0bb9d19453fcb9e5558b6372c3acdbb6b37b2197b381d787ba386ecb05f0dd0f6b82b220b5db95e85d711e9f689c4d7f87ecc869b266dc44ceffcde2613b823dfabbe4045bac8215db79a05029624e2d90b0a10f7f81e6cc551293411e043541745a95961db9cae89dd199a3f7e62d2d9c7fd435f15807f7a07aa61cc7a23330f17f9d88b985940f3322506ce857e092fc64ef130eb6f92e00a958b6d"}, @NFTA_DATA_VALUE={0x9, 0x1, "c3a6267c04"}]}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0xe58}, 0x1, 0x0, 0x0, 0x51558210fcef2581}, 0x80) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001540), 0x8000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000001580)=0x1) syz_clone(0x80, &(0x7f00000015c0)="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", 0x1000, &(0x7f00000025c0), &(0x7f0000002600), &(0x7f0000002640)="2c889d16453dd23e1616f55420556d5e312287f67a4e291444ecd0b23d5e6dc37a870602c1e42ed7be9cde7f259ef32d9ff10be00fbd01dfa62a9e5e428d4e26db254b315c0f4a5d0a3999189261706bcd6e5f31787c790b82adb1f29ce2752bbf8c0cb268f101374ae085393f6d002860d9abce931718f78a2cb3abfc5e033d5819b4faba6f249cde658bffe68a5273294cc9cc7b8b851d83df6ef84b27394da0364d3a9f949fc6883c69f9bcc40e486026461d547f1cebecb5c868fefce6fd2cff83f19ff637edacf86a56eae96e2a1f3f1f9d2a8905059c6df8262406531daf84343e089526d96ad463") ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000002740)={'veth1\x00', {0x2, 0x0, @dev}}) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_GETSTATE(r7, 0x5603, &(0x7f0000002780)={0x0, 0x2, 0x4}) r8 = syz_open_dev$sg(&(0x7f00000027c0), 0x5, 0x6103) ioctl$SG_BLKTRACETEARDOWN(r8, 0x1276, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000002800)={0x4, 0x0, 0x7fff}) getsockopt$inet6_int(r6, 0x29, 0x5, &(0x7f0000002880), &(0x7f00000028c0)=0x4) sendmsg$DEVLINK_CMD_SB_POOL_SET(r6, &(0x7f0000002bc0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002b80)={&(0x7f0000002940)={0x240, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x4}, {0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x8ca}, {0x8, 0x13, 0x1}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0xcb6}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7f}, {0x8, 0x13, 0x86}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffff7e}, {0x6, 0x11, 0x4e4}, {0x8, 0x13, 0xffff93c8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xef0}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x4e9}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6}, {0x8, 0x13, 0x5}, {0x5}}]}, 0x240}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000002c00)={0xbb3c, 0x4, 0xea5a, 0x401, 0x9, 0x1, 0x1ff, 0x6}, &(0x7f0000002c40)={0x7fff, 0x0, 0x9, 0x14c, 0xfffffffffffffffc, 0x7, 0x0, 0x1}, &(0x7f0000002c80)={0x4, 0x6, 0x8f4, 0x8, 0x9, 0xb2a3, 0x3, 0x7fffffff}, &(0x7f0000002cc0), &(0x7f0000002d40)={&(0x7f0000002d00)={[0xfffffffffffffffb]}, 0x8}) openat2$dir(0xffffffffffffff9c, &(0x7f0000002d80)='./file0\x00', &(0x7f0000002dc0)={0x1, 0x100}, 0x18) ioctl$KVM_RUN(r6, 0xae80, 0x0) 550.415842ms ago: executing program 5 (id=2345): ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000200)={0xc41, 0x3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x50, 0x3, [{{0x9, 0x4, 0x0, 0x18, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x80, 0x8, 0x47}}}}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="050f05080087"]}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setns(0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x531c03, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0xb5, 0x0) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x402) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') setns(r6, 0x0) getsockopt$inet6_int(r5, 0x29, 0x50, 0x0, &(0x7f0000000200)) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYRES64=r4], 0x0) 449.814554ms ago: executing program 1 (id=2346): socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) r0 = syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0xa}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000080)={&(0x7f0000000000/0x4000)=nil, 0x100000001, 0x3, 0x2}) r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7fff) ioctl$TCSBRK(r6, 0x5409, 0x0) r7 = socket$isdn(0x22, 0x2, 0x3) bind$isdn(r7, &(0x7f0000000200)={0x22, 0x7f, 0x6, 0x3, 0x5}, 0x6) 390.98075ms ago: executing program 0 (id=2347): syz_open_dev$video(0x0, 0x5, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x4, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="b842068ec80f79c666b9800000c00f326635008000000f30658b9299ebf000bfaa80260fc731baf80c66b848f7288366efbafc0c66b8f5ee91dd66efbaf80c66b8c076cd8066efbafc0c66b80000000066ef0f22666466f30f09", 0x5a}], 0xaaaaaaaaaaaad59, 0x30, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000880)=0xb) fcntl$lock(r3, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e2400000009000000000000000000000000000000000600000000000000020013"], 0x98}, 0x1, 0x7}, 0x0) pread64(r7, &(0x7f0000000000)=""/165, 0xa5, 0x3) r9 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r7, 0xc1105518, &(0x7f0000001240)={{0x8, 0x6, 0x40, 0x401, '\x00', 0x4}, 0x3, 0x3, 0x40, r9, 0x8, 0x5, 'syz0\x00', &(0x7f0000000200)=['-]{}({\x00', '+\a\x00', '/dev/kvm\x00', '&\x00', '\x00', '\x00', '/dev/kvm\x00', '/dev/kvm\x00'], 0x29}) r10 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=0x6e, 0x80000) recvmmsg$unix(r10, &(0x7f0000001000)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/59, 0x3b}, {&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f0000000480)=""/125, 0x7d}, {&(0x7f0000000500)=""/253, 0xfd}], 0x4, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000740)=""/253, 0xfd}], 0x1, &(0x7f0000000940)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000000a40)}}, {{&(0x7f0000000a80)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000b00)=""/137, 0x89}, {&(0x7f0000000bc0)=""/66, 0x42}], 0x2, &(0x7f0000000c80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000000d40)=@abs, 0x8c, &(0x7f0000000e80)=[{&(0x7f0000001180)=""/140, 0x8c}], 0x1, &(0x7f0000000ec0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}], 0x6, 0x2000, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 255.29079ms ago: executing program 1 (id=2348): r0 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000005, 0x80010, r0, 0x7f25c000) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000002500)={0x1c, &(0x7f0000000040)={0x0, 0xe, 0x2, "1678"}, 0x0, 0x0}) 160.899087ms ago: executing program 4 (id=2349): r0 = openat$procfs(0xffffff9c, &(0x7f0000001640)='/proc/meminfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000003240)=[{0x0}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x2, 0x1, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8000, 0x1b6) r3 = fanotify_init(0x200, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfb, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x63}, {0x0, 0x40, 0x2}, {0x6, 0x9, 0x1, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x8, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xf, '\x00', 0xf9}, {0x5, 0x4f, 0x2, '\x00', 0x7}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0x7f, 0x0, 0x23, '\x00', 0xc}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x10}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x2, 0x48, 0xa, '\x00', 0x2}, {0x6, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x5, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0x6c}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000080)={r8, 0x6, 0x2, "66bd"}, 0xa) getpeername$l2tp(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10) fanotify_mark(r3, 0x441, 0x8000022, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r9, 0x0, &(0x7f0000000240)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioprio_get$pid(0x3, 0x0) r10 = socket$kcm(0xa, 0x922000000003, 0x11) close_range(r1, r1, 0x0) setsockopt$sock_attach_bpf(r10, 0x29, 0x24, &(0x7f0000000080), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r9}, 0x18) sendmsg$kcm(r10, &(0x7f0000000140)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x800, @loopback, 0x1, 0xfffffffe}, 0x80, &(0x7f0000000180)}, 0x0) 0s ago: executing program 4 (id=2350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002100000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = mmap$IORING_OFF_SQES(&(0x7f0000a0b000/0x4000)=nil, 0x4000, 0x5, 0x10010, r5, 0x10000000) r8 = syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r8, 0xc0745645, &(0x7f0000000000)={0x8, [0x204, 0x2, 0x3, 0x0, 0xfff, 0x8000, 0x4, 0xc7, 0x3, 0x1, 0x4, 0xd20, 0x7, 0xfff8, 0x4, 0x8, 0x7867, 0x7e27, 0xac, 0x0, 0x4, 0x5109, 0x81, 0x7, 0x0, 0xfff, 0x7fd, 0x2, 0x400, 0xcad, 0x6, 0x9, 0x7ff, 0x0, 0x1, 0x12, 0x7, 0x63, 0x7, 0xb5, 0x5, 0xd, 0x1000, 0x9, 0x3ff, 0x0, 0x4, 0xc8], 0x2}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x8, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x7ff, 0x6000, 0x1, {0x0, r9}}) cachestat(r5, &(0x7f0000000040)={0x8}, &(0x7f000009de80), 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000380)="67f367f22e0f0014a59a590000440f01c5c74424002f000000c544240234deda3eff1c24d433a3a303b50f42a507410f08c4627d35a500900000b94d0600000f32b9ff020000b800300000ba000000000f30", 0xffffffffffffffe0}], 0x1, 0x49, 0x0, 0xfffffe5f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kernel console output (not intermixed with test programs): 472 - 0 [ 465.476520][ T5996] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.495958][ T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 465.648512][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.720335][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 465.746655][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 465.755733][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.791712][ T10] usb 6-1: config 0 descriptor?? [ 466.196554][ T129] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 466.456016][ T129] usb 3-1: Using ep0 maxpacket: 8 [ 466.476567][ T129] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 466.485300][ T129] usb 3-1: config 0 has no interface number 0 [ 466.496263][ T129] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 466.515855][ T129] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 466.536174][ T129] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 466.572742][ T129] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.597735][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 466.607984][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 466.628915][T13138] netlink: 'syz.4.1799': attribute type 8 has an invalid length. [ 466.639146][ T129] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 466.653883][ T10] usb 6-1: USB disconnect, device number 27 [ 466.664344][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.683800][ T129] usb 3-1: Product: syz [ 466.690085][ T129] usb 3-1: Manufacturer: syz [ 466.695068][ T129] usb 3-1: SerialNumber: syz [ 466.726468][ T129] usb 3-1: config 0 descriptor?? [ 467.749989][T13128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.777826][T13128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.798497][T13150] nvme_fabrics: unknown parameter or missing value 'ó' in ctrl creation request [ 467.886357][T13128] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 467.892924][T13128] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 467.914466][T13156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.952517][T13156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.005946][T13128] vhci_hcd vhci_hcd.0: Device attached [ 468.071821][T13160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.101929][T13149] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 468.144142][T13160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.146114][ T5883] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 468.176152][ T5844] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 468.235952][ T5844] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 468.250877][T13153] vhci_hcd: connection reset by peer [ 468.280058][ T129] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 468.293634][ T3644] vhci_hcd vhci_hcd.2: stop threads [ 468.307110][ T129] usb 3-1: USB disconnect, device number 127 [ 468.311491][ T3644] vhci_hcd vhci_hcd.2: release socket [ 468.327239][ T3644] vhci_hcd vhci_hcd.2: disconnect device [ 468.336033][ T5883] usb 6-1: device descriptor read/64, error -71 [ 468.576723][ T5883] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 468.746056][ T5883] usb 6-1: device descriptor read/64, error -71 [ 468.866295][ T5883] usb usb6-port1: attempt power cycle [ 468.902524][T13193] binder: BINDER_SET_CONTEXT_MGR already set [ 468.923090][T13193] binder: 13191:13193 ioctl 4018620d 200000000100 returned -16 [ 469.249867][T13208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1813'. [ 469.303952][ T5883] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 469.349063][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 469.356254][ T5883] usb 6-1: config 16 has an invalid interface number: 184 but max is 0 [ 469.365000][ T5883] usb 6-1: config 16 has no interface number 0 [ 469.401547][ T5883] usb 6-1: config 16 interface 184 has no altsetting 0 [ 469.457583][ T5883] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=a7.96 [ 469.466882][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.475129][ T5883] usb 6-1: Product: syz [ 469.515317][ T5883] usb 6-1: Manufacturer: syz [ 469.523326][ T5883] usb 6-1: SerialNumber: syz [ 469.743485][T13220] geneve2: entered allmulticast mode [ 469.816255][T13199] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1814'. [ 469.847580][ T5883] kvaser_usb 6-1:16.184: error -ENODEV: Cannot get usb endpoint(s) [ 469.883929][ T30] audit: type=1326 audit(1765847086.495:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13200 comm="syz.2.1815" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ccbb8f749 code=0x0 [ 469.899757][ T5883] usb 6-1: USB disconnect, device number 30 [ 470.481921][ T30] audit: type=1326 audit(1765847087.105:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.0.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 470.537424][ T30] audit: type=1326 audit(1765847087.105:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.0.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 470.561028][ T30] audit: type=1326 audit(1765847087.185:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.0.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 470.584328][ T30] audit: type=1326 audit(1765847087.185:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.0.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 470.609746][ T30] audit: type=1326 audit(1765847087.185:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.0.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 470.668749][ T9764] hid-generic 0000:0006:0000.0024: unknown main item tag 0x0 [ 470.697715][T13234] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1818'. [ 470.717229][ T9764] hid-generic 0000:0006:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 470.775878][ T30] audit: type=1326 audit(1765847087.255:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.0.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 470.862372][ T30] audit: type=1326 audit(1765847087.265:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.0.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 470.939340][ T30] audit: type=1326 audit(1765847087.265:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.0.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 471.050474][T13236] fido_id[13236]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 471.094760][ T30] audit: type=1326 audit(1765847087.305:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.0.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 471.554551][T13240] netlink: 'syz.0.1823': attribute type 10 has an invalid length. [ 471.585081][T13240] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 471.612945][ T5883] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 471.776032][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 471.806131][ T5883] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 471.824735][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.834782][ T5883] usb 6-1: Product: syz [ 471.839386][ T5883] usb 6-1: Manufacturer: syz [ 471.863848][ T5883] usb 6-1: SerialNumber: syz [ 471.893344][ T5883] usb 6-1: config 0 descriptor?? [ 471.963430][T13255] sctp: [Deprecated]: syz.0.1826 (pid 13255) Use of int in maxseg socket option. [ 471.963430][T13255] Use struct sctp_assoc_value instead [ 472.120674][ T5883] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 031 [ 473.075944][ T9764] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 473.225991][ T9764] usb 5-1: Using ep0 maxpacket: 16 [ 473.232717][ T9764] usb 5-1: config 1 has an invalid descriptor of length 243, skipping remainder of the config [ 473.243547][ T9764] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 473.270084][ T9764] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 473.282508][ T9764] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 473.300203][ T9764] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 473.321928][ T9764] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.330868][ T9764] usb 5-1: Product: syz [ 473.335499][ T9764] usb 5-1: Manufacturer: syz [ 473.341436][ T9764] usb 5-1: SerialNumber: syz [ 473.396025][ T5844] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 473.515051][T13275] loop6: detected capacity change from 0 to 524288000 [ 473.545311][T13275] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1833'. [ 474.426140][T13238] i2c i2c-1: failure reading data [ 474.527414][ T129] usb 6-1: USB disconnect, device number 31 [ 475.175937][ T5844] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 475.337207][ T5844] usb 6-1: Using ep0 maxpacket: 16 [ 475.348013][ T5844] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.366063][ T5844] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.383405][ T5844] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 475.403798][ T5844] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 475.425338][ T5844] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 475.444474][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 475.462924][ T5844] usb 6-1: SerialNumber: syz [ 475.483175][ T5844] hub 6-1:1.0: bad descriptor, ignoring hub [ 475.495956][ T5844] hub 6-1:1.0: probe with driver hub failed with error -5 [ 475.512182][ T5844] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 475.903374][T13284] raw-gadget.2 gadget.5: fail, usb_ep_set_halt returned -11 [ 476.066737][ T5844] usb 6-1: USB disconnect, device number 32 [ 476.375889][ T5844] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 476.525877][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 476.533017][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.546348][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.567392][ T5844] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 476.581905][ T5844] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 476.656035][ T9764] usb 5-1: USB disconnect, device number 127 [ 476.708814][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.733596][ T5844] usb 3-1: config 0 descriptor?? [ 476.826092][ T5883] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 476.915156][T13332] loop4: detected capacity change from 0 to 2560 [ 476.929296][ T6046] buffer_io_error: 22941 callbacks suppressed [ 476.929313][ T6046] Buffer I/O error on dev loop4, logical block 0, async page read [ 476.949894][ T6046] Buffer I/O error on dev loop4, logical block 0, async page read [ 476.959188][ T6046] Buffer I/O error on dev loop4, logical block 0, async page read [ 476.967727][ T6046] Buffer I/O error on dev loop4, logical block 0, async page read [ 476.980995][T13335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.994991][T13331] Buffer I/O error on dev loop4, logical block 0, async page read [ 477.003015][ T9764] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 477.012923][T13335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.027218][ T6046] Buffer I/O error on dev loop4, logical block 0, async page read [ 477.037306][T13331] Buffer I/O error on dev loop4, logical block 0, async page read [ 477.101225][T13331] Buffer I/O error on dev loop4, logical block 0, async page read [ 477.127838][T13332] Buffer I/O error on dev loop4, logical block 0, async page read [ 477.136691][ T5883] usb 6-1: config index 0 descriptor too short (expected 283, got 27) [ 477.137538][T13332] Buffer I/O error on dev loop4, logical block 0, async page read [ 477.145110][ T5883] usb 6-1: config 134 has too many interfaces: 190, using maximum allowed: 32 [ 477.157855][ T9764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 477.185143][ T5883] usb 6-1: config 134 contains an unexpected descriptor of type 0x1, skipping [ 477.196203][ T5883] usb 6-1: config 134 has an invalid descriptor of length 0, skipping remainder of the config [ 477.202241][ T5844] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0025/input/input48 [ 477.218869][ T5883] usb 6-1: config 134 has 0 interfaces, different from the descriptor's value: 190 [ 477.223709][ T9764] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 477.250952][ T9764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.398912][ T5883] usb 6-1: config index 1 descriptor too short (expected 283, got 27) [ 477.408821][ T9764] usb 5-1: config 0 descriptor?? [ 477.414391][ T5883] usb 6-1: config 134 has too many interfaces: 190, using maximum allowed: 32 [ 477.414393][ T5844] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 477.437024][ T5883] usb 6-1: config 134 contains an unexpected descriptor of type 0x1, skipping [ 477.463793][ T5883] usb 6-1: config 134 has an invalid descriptor of length 0, skipping remainder of the config [ 477.474823][ T5883] usb 6-1: config 134 has 0 interfaces, different from the descriptor's value: 190 [ 477.496517][ T5883] usb 6-1: config index 2 descriptor too short (expected 283, got 27) [ 477.511246][ T5883] usb 6-1: config 134 has too many interfaces: 190, using maximum allowed: 32 [ 477.521250][ T5883] usb 6-1: config 134 contains an unexpected descriptor of type 0x1, skipping [ 477.530836][ T5883] usb 6-1: config 134 has an invalid descriptor of length 0, skipping remainder of the config [ 477.542326][ T5883] usb 6-1: config 134 has 0 interfaces, different from the descriptor's value: 190 [ 477.562975][ T5883] usb 6-1: config index 3 descriptor too short (expected 283, got 27) [ 477.572608][ T5883] usb 6-1: config 134 has too many interfaces: 190, using maximum allowed: 32 [ 477.582452][ T5883] usb 6-1: config 134 contains an unexpected descriptor of type 0x1, skipping [ 477.610345][ T5883] usb 6-1: config 134 has an invalid descriptor of length 0, skipping remainder of the config [ 477.621669][ T5883] usb 6-1: config 134 has 0 interfaces, different from the descriptor's value: 190 [ 477.634013][ T5883] usb 6-1: config index 4 descriptor too short (expected 283, got 27) [ 477.643608][ T5883] usb 6-1: config 134 has too many interfaces: 190, using maximum allowed: 32 [ 477.653345][ T5883] usb 6-1: config 134 contains an unexpected descriptor of type 0x1, skipping [ 477.668433][ T5883] usb 6-1: config 134 has an invalid descriptor of length 0, skipping remainder of the config [ 477.679202][ T5883] usb 6-1: config 134 has 0 interfaces, different from the descriptor's value: 190 [ 477.696935][ T5883] usb 6-1: config index 5 descriptor too short (expected 283, got 27) [ 477.710393][ T5883] usb 6-1: config 134 has too many interfaces: 190, using maximum allowed: 32 [ 477.731534][ T5883] usb 6-1: config 134 contains an unexpected descriptor of type 0x1, skipping [ 477.746600][ T5883] usb 6-1: config 134 has an invalid descriptor of length 0, skipping remainder of the config [ 477.763344][ T5883] usb 6-1: config 134 has 0 interfaces, different from the descriptor's value: 190 [ 477.780866][ T5883] usb 6-1: config index 6 descriptor too short (expected 283, got 27) [ 477.824053][ T5883] usb 6-1: config 134 has too many interfaces: 190, using maximum allowed: 32 [ 477.849967][ T5883] usb 6-1: config 134 contains an unexpected descriptor of type 0x1, skipping [ 477.853004][ T9764] aquacomputer_d5next 0003:0C70:F011.0026: unknown main item tag 0x0 [ 477.883807][ T5883] usb 6-1: config 134 has an invalid descriptor of length 0, skipping remainder of the config [ 477.884429][ T9764] aquacomputer_d5next 0003:0C70:F011.0026: item fetching failed at offset 6/7 [ 477.910321][ T9764] aquacomputer_d5next 0003:0C70:F011.0026: probe with driver aquacomputer_d5next failed with error -22 [ 477.938340][ T5883] usb 6-1: config 134 has 0 interfaces, different from the descriptor's value: 190 [ 477.952950][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1847'. [ 477.964824][T13339] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1847'. [ 477.964907][ T5883] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0000, bcdDevice= 0.00 [ 477.997472][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.126016][ T9764] usb 5-1: USB disconnect, device number 2 [ 478.241111][ T5883] usb 6-1: string descriptor 0 read error: -71 [ 478.251006][ T5883] usb 6-1: USB disconnect, device number 33 [ 478.339993][T13342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1848'. [ 478.410230][T13342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1848'. [ 478.880147][T13348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1850'. [ 479.341486][ T9762] usb 3-1: USB disconnect, device number 2 [ 479.625970][ T9764] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 479.786612][ T9764] usb 6-1: no configurations [ 479.791262][ T9764] usb 6-1: can't read configurations, error -22 [ 479.881129][ T9762] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 479.946382][ T9764] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 480.056072][ T9762] usb 3-1: Using ep0 maxpacket: 8 [ 480.067168][ T9762] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 480.075439][ T9762] usb 3-1: config 179 has no interface number 0 [ 480.082701][ T9762] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 480.094229][ T9762] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 480.106617][ T9762] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 480.119761][ T9762] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 480.132418][ T9762] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 480.146024][ T9764] usb 6-1: no configurations [ 480.150609][ T9764] usb 6-1: can't read configurations, error -22 [ 480.158438][ T9764] usb usb6-port1: attempt power cycle [ 480.165230][ T9762] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 480.184598][ T9762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.293147][T13357] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 480.525989][ T9764] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 480.597653][ T9764] usb 6-1: no configurations [ 480.602402][ T9764] usb 6-1: can't read configurations, error -22 [ 480.746021][ T9764] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 480.777504][ T9764] usb 6-1: no configurations [ 480.785988][ T129] usb 3-1: USB disconnect, device number 3 [ 480.786094][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 480.800835][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 480.841872][ T9764] usb 6-1: can't read configurations, error -22 [ 480.864233][ T9764] usb usb6-port1: unable to enumerate USB device [ 481.956825][ T5883] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 482.106092][ T5883] usb 3-1: device descriptor read/64, error -71 [ 482.191338][T13411] kvm: user requested TSC rate below hardware speed [ 482.481187][ T5883] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 482.526731][ T129] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 482.605933][T10993] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 482.626147][ T5883] usb 3-1: device descriptor read/64, error -71 [ 482.696968][ T129] usb 6-1: Using ep0 maxpacket: 8 [ 482.746272][ T5883] usb usb3-port1: attempt power cycle [ 482.773393][ T129] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 482.823443][T10993] usb 5-1: config 0 interface 0 altsetting 252 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 482.839751][T10993] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x84 has an invalid bInterval 129, changing to 4 [ 482.851205][ T129] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 482.865481][T13419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1868'. [ 482.874488][ T129] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 482.884593][T10993] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x84 has invalid maxpacket 60133, setting to 0 [ 482.905125][ T129] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.929864][T10993] usb 5-1: config 0 interface 0 has no altsetting 0 [ 482.997322][T10993] usb 5-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 483.018278][ T129] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 483.029182][T10993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.040482][ T129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.052212][T10993] usb 5-1: config 0 descriptor?? [ 483.078529][T10993] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 483.185980][ T5883] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 483.206596][ T5883] usb 3-1: device descriptor read/8, error -71 [ 483.243331][T13423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.256407][T13423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.266585][ T129] usb 6-1: GET_CAPABILITIES returned 0 [ 483.272076][ T129] usbtmc 6-1:16.0: can't read capabilities [ 483.455984][ T5883] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 483.477411][T13411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.488286][T13411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.498017][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 483.508843][ T5883] usb 3-1: device descriptor read/8, error -71 [ 483.627566][ T5883] usb usb3-port1: unable to enumerate USB device [ 484.995405][T13439] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1872'. [ 485.224181][ T9764] usb 6-1: USB disconnect, device number 38 [ 485.403759][ T129] usb 5-1: USB disconnect, device number 3 [ 485.642737][T13452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.661983][T13452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.679147][T13452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.707385][T13452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.758573][T13452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.796292][T13452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.106044][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 486.616326][T13479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.636583][T13479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.710119][T13482] use of bytesused == 0 is deprecated and will be removed in the future, [ 486.721756][T13482] use the actual size instead. [ 487.161912][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1889'. [ 487.174445][T13495] bridge_slave_1: left allmulticast mode [ 487.184674][T13495] bridge_slave_1: left promiscuous mode [ 487.273218][T13497] program syz.1.1888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 487.326968][ T5844] IPVS: starting estimator thread 0... [ 487.361847][T13495] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.485926][T13498] IPVS: using max 31 ests per chain, 74400 per kthread [ 487.510303][T13495] bridge_slave_0: left allmulticast mode [ 487.516103][T13495] bridge_slave_0: left promiscuous mode [ 487.522543][T13495] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.819368][T13510] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ [ 488.504173][T13522] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1893'. [ 488.966203][ T129] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 489.099253][T13536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.117627][ T129] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 489.137131][ T129] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 489.166541][T13536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.177451][ T129] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 489.178340][T13536] hub 9-0:1.0: USB hub found [ 489.187223][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.206120][ T129] usb 3-1: Product: syz [ 489.207604][T13536] hub 9-0:1.0: 1 port detected [ 489.210391][ T129] usb 3-1: Manufacturer: syz [ 489.234343][T13539] xt_l2tp: missing protocol rule (udp|l2tpip) [ 489.240882][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1899'. [ 489.250209][ T129] usb 3-1: SerialNumber: syz [ 489.265411][ T129] usb 3-1: config 0 descriptor?? [ 489.270591][T13539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1899'. [ 489.279863][T13539] netlink: 'syz.1.1899': attribute type 19 has an invalid length. [ 489.280376][T13527] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 489.295673][T13539] netlink: 'syz.1.1899': attribute type 20 has an invalid length. [ 489.296996][T13527] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 489.318361][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1898'. [ 489.485911][ T5844] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 489.615949][ T5844] usb 6-1: device descriptor read/64, error -71 [ 489.660219][T13546] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1902'. [ 489.681812][T13546] openvswitch: netlink: Flow key attr not present in new flow. [ 489.751105][T13527] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 489.758659][T13527] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 489.776096][ T5883] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 489.865937][ T5844] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 489.930144][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.951744][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.961991][ T5883] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 489.971527][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.986975][ T5883] usb 5-1: config 0 descriptor?? [ 490.005885][ T5844] usb 6-1: device descriptor read/64, error -71 [ 490.022821][T13556] input: syz1 as /devices/virtual/input/input49 [ 490.054048][T13556] program syz.1.1903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.116351][ T5844] usb usb6-port1: attempt power cycle [ 490.454606][T13557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.463404][ T5844] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 490.476243][T13557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.503904][ T5883] usbhid 5-1:0.0: can't add hid device: -71 [ 490.506805][ T5844] usb 6-1: device descriptor read/8, error -71 [ 490.526693][ T5883] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 490.541530][ T5883] usb 5-1: USB disconnect, device number 4 [ 490.591623][ T129] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 490.606889][T13561] netlink: 'syz.4.1904': attribute type 21 has an invalid length. [ 490.625188][ T129] dm9601 3-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 490.643183][T13561] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1904'. [ 490.663108][ T129] usb 3-1: USB disconnect, device number 8 [ 490.675704][ T129] dm9601 3-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 490.786946][ T5844] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 490.830213][ T5844] usb 6-1: device descriptor read/8, error -71 [ 490.888981][T13567] syzkaller1: entered promiscuous mode [ 490.894655][T13567] syzkaller1: entered allmulticast mode [ 491.303618][ T5844] usb usb6-port1: unable to enumerate USB device [ 491.787938][ T129] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 491.925905][ T129] usb 3-1: device descriptor read/64, error -71 [ 492.176792][ T129] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 492.239178][T13601] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1910'. [ 492.310386][T13601] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1910'. [ 492.350137][ T129] usb 3-1: device descriptor read/64, error -71 [ 492.356648][ T5883] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 492.466156][ T129] usb usb3-port1: attempt power cycle [ 492.528146][ T5883] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 492.543856][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.574237][ T5883] usb 5-1: config 0 descriptor?? [ 492.598244][ T5883] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 492.794668][ T5883] usb 5-1: USB disconnect, device number 5 [ 492.808032][ T129] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 492.837468][ T129] usb 3-1: device descriptor read/8, error -71 [ 493.085917][ T129] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 493.119234][ T129] usb 3-1: device descriptor read/8, error -71 [ 493.187712][T13615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.196631][T13615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.236358][ T129] usb usb3-port1: unable to enumerate USB device [ 493.364991][T13625] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 493.444206][T13629] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1917'. [ 494.652854][T13653] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 494.749317][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1924'. [ 495.095918][ T129] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 495.167593][T13663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.170146][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 495.170163][ T30] audit: type=1326 audit(1765847111.795:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.4.1927" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52e698f749 code=0xffff0000 [ 495.237729][T13662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.278742][ T129] usb 3-1: Using ep0 maxpacket: 32 [ 495.279973][T13663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.297267][ T129] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 495.297917][T13662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.305291][ T129] usb 3-1: config 0 has no interface number 0 [ 495.346002][ T129] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 495.373339][ T129] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 49455, setting to 1024 [ 495.403906][ T129] usb 3-1: config 0 interface 2 has no altsetting 0 [ 495.413653][ T129] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 495.423407][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.432059][ T129] usb 3-1: Product: syz [ 495.436693][ T129] usb 3-1: Manufacturer: syz [ 495.441304][ T129] usb 3-1: SerialNumber: syz [ 495.459141][ T129] usb 3-1: config 0 descriptor?? [ 495.492547][T13666] syzkaller0: entered promiscuous mode [ 495.514843][T13666] syzkaller0: entered allmulticast mode [ 495.673411][ T129] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 495.941533][ T129] usb 3-1: USB disconnect, device number 13 [ 495.975980][ T9764] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 495.976538][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.001710][T13676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.014941][T13676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.036131][T13676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.053609][T13676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.159531][ T9764] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 496.169131][ T9764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.177422][ T9764] usb 6-1: Product: syz [ 496.181856][ T9764] usb 6-1: Manufacturer: syz [ 496.187819][ T9764] usb 6-1: SerialNumber: syz [ 496.195456][ T9764] usb 6-1: config 0 descriptor?? [ 496.209251][ T9764] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 496.536123][T13683] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1935'. [ 496.604911][T13685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1933'. [ 496.915945][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 497.085921][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 497.094106][ T10] usb 3-1: config 0 has no interfaces? [ 497.106928][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 497.126082][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 497.134114][ T10] usb 3-1: Manufacturer: syz [ 497.148694][ T10] usb 3-1: config 0 descriptor?? [ 497.420678][T13686] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 497.536134][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 498.046207][ T9764] usb 6-1: USB disconnect, device number 43 [ 498.345273][T13713] syzkaller0: entered promiscuous mode [ 498.354099][T13713] syzkaller0: entered allmulticast mode [ 498.396454][ T9764] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 498.546159][ T9764] usb 6-1: Using ep0 maxpacket: 32 [ 498.554324][ T9764] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 498.616054][ T9764] usb 6-1: config 0 has no interface number 0 [ 498.751859][ T9764] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 498.762580][ T9764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.772634][ T9764] usb 6-1: Product: syz [ 498.779955][ T9764] usb 6-1: Manufacturer: syz [ 498.788549][ T9764] usb 6-1: SerialNumber: syz [ 498.800458][ T9764] usb 6-1: config 0 descriptor?? [ 498.815902][ T9764] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 499.075751][ T9764] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 499.124954][ T9764] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 499.628992][ T9764] usb 3-1: USB disconnect, device number 14 [ 499.665038][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 499.686132][T13730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.694933][T13730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.707295][ T5889] usb 6-1: USB disconnect, device number 44 [ 499.720499][ T5889] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 499.792103][ T5889] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 499.814719][ T5889] quatech2 6-1:0.51: device disconnected [ 501.317537][ T30] audit: type=1326 audit(1765847117.945:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13751 comm="syz.5.1949" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c0318f749 code=0x0 [ 501.441544][T13753] syzkaller0: entered allmulticast mode [ 501.469329][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.477555][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.314419][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1954'. [ 502.505423][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1957'. [ 502.536423][T13779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1957'. [ 502.826413][T13783] tipc: Started in network mode [ 502.844851][T13783] tipc: Node identity 2e78c30e8459, cluster identity 4711 [ 502.916418][T13783] tipc: Enabled bearer , priority 0 [ 502.945441][T13786] syzkaller0: entered promiscuous mode [ 502.985925][T13786] syzkaller0: entered allmulticast mode [ 503.044560][T13783] tipc: Resetting bearer [ 503.099401][T13781] tipc: Resetting bearer [ 503.156946][T13781] tipc: Disabling bearer [ 503.451714][T13794] sctp: [Deprecated]: syz.0.1962 (pid 13794) Use of struct sctp_assoc_value in delayed_ack socket option. [ 503.451714][T13794] Use struct sctp_sack_info instead [ 503.705903][ T9764] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 503.856021][ T9764] usb 3-1: Using ep0 maxpacket: 8 [ 503.863187][ T9764] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 503.874294][ T5889] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 503.882041][ T9764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.893342][ T9764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.903585][ T9764] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 503.916663][ T9764] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 503.925717][ T9764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.936069][ T9764] usb 3-1: config 0 descriptor?? [ 504.055984][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 504.062633][ T5889] usb 6-1: config 0 has an invalid descriptor of length 245, skipping remainder of the config [ 504.073453][ T5889] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 504.087794][ T5889] usb 6-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 504.096946][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.104947][ T5889] usb 6-1: Product: syz [ 504.109808][ T5889] usb 6-1: Manufacturer: syz [ 504.114525][ T5889] usb 6-1: SerialNumber: syz [ 504.121924][ T5889] usb 6-1: config 0 descriptor?? [ 504.351907][ T9764] usbhid 3-1:0.0: can't add hid device: -71 [ 504.353985][ T5883] usb 6-1: USB disconnect, device number 45 [ 504.366549][ T9764] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 504.390930][ T9764] usb 3-1: USB disconnect, device number 15 [ 504.469030][T13808] binder: 13806:13808 unknown command 1077961494 [ 504.483468][T13808] binder: 13806:13808 ioctl c0306201 200000000100 returned -22 [ 504.892731][T13822] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 504.940819][T13822] bond3 (unregistering): Released all slaves [ 504.980411][T13831] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1975'. [ 505.207385][T13836] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 505.352060][T13847] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 505.352060][T13847] The task syz.4.1974 (13847) triggered the difference, watch for misbehavior. [ 505.440708][ T5883] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 505.596131][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 505.604351][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 505.614408][ T5883] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 505.632233][ T5883] usb 6-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 505.642583][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.656278][ T5883] usb 6-1: Product: syz [ 505.662158][ T5883] usb 6-1: Manufacturer: syz [ 505.670281][ T5883] usb 6-1: SerialNumber: syz [ 505.685950][ T5889] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 505.696292][ T5883] usb 6-1: config 0 descriptor?? [ 505.708974][ T5883] redrat3 6-1:0.0: Couldn't find all endpoints [ 505.837547][ T5889] usb 3-1: config 0 has an invalid descriptor of length 90, skipping remainder of the config [ 505.848195][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 505.867734][ T5889] usb 3-1: New USB device found, idVendor=101e, idProduct=13b6, bcdDevice= 0.00 [ 505.881800][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.902730][ T5889] usb 3-1: config 0 descriptor?? [ 506.372175][T13854] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 506.385370][T13854] fuse: Bad value for 'fd' [ 506.407942][ T5889] usb 3-1: string descriptor 0 read error: -71 [ 506.419209][ T5889] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 506.435575][ T5889] usb 3-1: USB disconnect, device number 16 [ 506.755956][ T5844] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 506.927321][ T5844] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 506.937537][ T5844] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 506.947671][ T5844] usb 5-1: config 1 interface 0 has no altsetting 0 [ 506.956513][ T5844] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 506.965589][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.974509][ T5844] usb 5-1: Product: syz [ 506.978841][ T5844] usb 5-1: Manufacturer: syz [ 506.983441][ T5844] usb 5-1: SerialNumber: syz [ 506.991787][T13858] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 506.999177][T13858] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 507.630369][T13875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.658109][T13875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.696763][ T5844] rtl8150 5-1:1.0: couldn't reset the device [ 507.716676][ T5844] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 507.744823][ T5844] usb 5-1: USB disconnect, device number 7 [ 507.800479][T13880] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 507.837618][T13880] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 507.854123][T13880] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1990'. [ 508.098766][ T5844] usb 6-1: USB disconnect, device number 46 [ 508.252492][T13889] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1992'. [ 508.252694][T13887] syzkaller1: entered allmulticast mode [ 508.266174][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1992'. [ 508.402435][T13896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.411354][T13896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.515960][ T5883] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 508.666360][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 508.673970][ T5883] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 508.691183][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.708028][ T5883] usb 5-1: config 0 descriptor?? [ 508.717336][ T5883] gspca_main: sunplus-2.14.0 probing 041e:400b [ 509.116490][T13890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.132451][T13890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.158608][ T5883] gspca_sunplus: reg_w_riv err -71 [ 509.168237][ T5883] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 509.206201][ T5883] usb 5-1: USB disconnect, device number 8 [ 509.618536][T13933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.637468][T13933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.036777][ T30] audit: type=1326 audit(1765847126.665:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13940 comm="syz.1.2009" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc8e58f749 code=0x0 [ 510.185967][ T5883] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 510.355894][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 510.363147][ T5883] usb 5-1: unable to get BOS descriptor or descriptor too short [ 510.382640][ T5883] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.401469][ T5883] usb 5-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 510.425345][ T5883] usb 5-1: config 1 interface 0 has no altsetting 0 [ 510.448055][ T5883] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 510.465865][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.475922][ T5883] usb 5-1: Product: syz [ 510.480111][ T5883] usb 5-1: Manufacturer: syz [ 510.494358][ T5883] usb 5-1: SerialNumber: syz [ 510.517745][ T5883] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input50 [ 510.876299][T13953] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 510.917623][T13953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.943397][T13953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.993694][T13959] libceph: resolve '0.' (ret=-3): failed [ 511.214906][T13969] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 511.424527][T13978] program syz.2.2017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 511.730512][T13983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.803488][T13983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.819171][T13983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.827952][T13983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.843934][T13983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.888437][T13983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.244495][T13992] IPVS: sh: FWM 3 0x00000003 - no destination available [ 512.262241][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 512.306747][ T5889] IPVS: starting estimator thread 0... [ 512.476077][T13993] IPVS: using max 30 ests per chain, 72000 per kthread [ 512.808279][ T129] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 513.057656][ T5183] bcm5974 5-1:1.0: could not read from device [ 513.086074][ T129] usb 3-1: Using ep0 maxpacket: 16 [ 513.093397][ T129] usb 3-1: config 0 has an invalid interface number: 3 but max is 1 [ 513.104510][ T129] usb 3-1: config 0 has an invalid interface number: 80 but max is 1 [ 513.123276][T14001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2024'. [ 513.208912][ T5883] usb 5-1: USB disconnect, device number 9 [ 513.216383][ T129] usb 3-1: config 0 has no interface number 0 [ 513.222495][ T129] usb 3-1: config 0 has no interface number 1 [ 513.291720][ T129] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 513.334973][ T129] usb 3-1: config 0 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 513.389846][ T129] usb 3-1: New USB device found, idVendor=19d2, idProduct=0019, bcdDevice=3d.5b [ 513.403966][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.423991][ T129] usb 3-1: Product: syz [ 513.480330][ T129] usb 3-1: Manufacturer: syz [ 513.485316][ T129] usb 3-1: SerialNumber: syz [ 513.501930][ T129] usb 3-1: config 0 descriptor?? [ 513.670573][T14011] xt_l2tp: v2 tid > 0xffff: 1114244 [ 513.716000][ T5844] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 513.724862][ T129] usb 3-1: USB disconnect, device number 17 [ 513.840605][ T30] audit: type=1326 audit(1765847130.465:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14012 comm="syz.4.2028" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52e698f749 code=0x0 [ 513.894379][ T30] audit: type=1326 audit(1765847130.485:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14012 comm="syz.4.2028" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52e698f749 code=0x0 [ 513.926176][ T5844] usb 6-1: Using ep0 maxpacket: 32 [ 513.964073][ T5844] usb 6-1: config 0 has an invalid interface number: 75 but max is 0 [ 513.982898][ T5844] usb 6-1: config 0 has no interface number 0 [ 514.008961][ T5844] usb 6-1: New USB device found, idVendor=148f, idProduct=7601, bcdDevice= 2.c5 [ 514.041599][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.061850][ T5844] usb 6-1: Product: syz [ 514.071980][ T5844] usb 6-1: Manufacturer: syz [ 514.083244][ T5844] usb 6-1: SerialNumber: syz [ 514.226447][ T5844] usb 6-1: config 0 descriptor?? [ 514.680878][T14021] Can't find ip_set type /dev/kvm [ 515.099284][ T5844] usb 6-1: USB disconnect, device number 47 [ 515.306326][T14039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.339679][T14039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.374746][T14045] IPVS: sh: FWM 3 0x00000003 - no destination available [ 515.651727][T14050] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2039'. [ 515.947914][ T30] audit: type=1326 audit(1765847132.525:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 516.001492][T14056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.011547][T14056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.053335][ T30] audit: type=1326 audit(1765847132.535:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 516.080793][ T30] audit: type=1326 audit(1765847132.535:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 516.119216][ T30] audit: type=1326 audit(1765847132.535:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 516.230977][ T30] audit: type=1326 audit(1765847132.545:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 516.311704][ T30] audit: type=1326 audit(1765847132.555:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa912991667 code=0x7ffc0000 [ 516.362940][ T30] audit: type=1326 audit(1765847132.555:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 516.415698][ T30] audit: type=1326 audit(1765847132.555:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 516.480232][ T30] audit: type=1326 audit(1765847132.555:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 516.559106][ T30] audit: type=1326 audit(1765847132.555:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14051 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 518.192342][T14079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.202777][T14079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.310197][T14082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.373208][T14082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.434857][T14082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.445956][ T5883] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 518.585899][ T5883] usb 5-1: device descriptor read/64, error -71 [ 518.831532][ T5883] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 518.965893][ T5883] usb 5-1: device descriptor read/64, error -71 [ 519.236840][ T5883] usb usb5-port1: attempt power cycle [ 519.545904][ T5844] usb 6-1: new low-speed USB device number 48 using dummy_hcd [ 519.585876][ T5883] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 519.606427][ T5883] usb 5-1: device descriptor read/8, error -71 [ 519.708453][ T5844] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 519.722217][ T5844] usb 6-1: config 0 has no interface number 0 [ 519.728984][ T5844] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 519.729536][T14090] netlink: 'syz.2.2052': attribute type 11 has an invalid length. [ 519.748237][ T5844] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 519.748420][T14090] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.2052'. [ 519.768971][ T5844] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 519.779212][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.800605][ T5844] usb 6-1: config 0 descriptor?? [ 519.806333][T14088] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 519.837647][ T5844] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 519.847668][ T5883] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 519.897170][ T5883] usb 5-1: device descriptor read/8, error -71 [ 520.016612][ T5883] usb usb5-port1: unable to enumerate USB device [ 520.225878][ T5844] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 520.403922][T14103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.413549][T14103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.238242][T14111] fuse: Bad value for 'fd' [ 522.321228][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 522.331446][ T9762] usb 6-1: USB disconnect, device number 48 [ 522.437284][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880310be800: rx timeout, send abort [ 522.448183][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880577c1400: rx timeout, send abort [ 522.457887][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880310be800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 522.474148][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880577c1400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 522.505928][T14103] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 522.506074][ T5149] Bluetooth: hci4: command 0x0406 tx timeout [ 522.526380][T14103] Bluetooth: hci4: Opcode 0x0406 failed: -110 [ 522.597111][T14124] loop6: detected capacity change from 0 to 7 [ 522.607144][ T5844] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 522.616823][T14124] Dev loop6: unable to read RDB block 7 [ 522.620166][ T5844] usb 3-1: can't read configurations, error -71 [ 522.622425][T14124] loop6: AHDI p1 p2 p3 [ 522.645516][T14124] loop6: partition table partially beyond EOD, truncated [ 522.666093][T14124] loop6: p1 start 1601398130 is beyond EOD, truncated [ 522.672912][T14124] loop6: p2 start 1702059890 is beyond EOD, truncated [ 522.796183][T14127] futex_wake_op: syz.0.2064 tries to shift op by -1; fix this program [ 523.093315][T14141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2067'. [ 523.164198][T14143] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2066'. [ 523.225397][T14143] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2066'. [ 523.339705][T14145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2069'. [ 523.342847][T14152] netlink: 'syz.5.2061': attribute type 1 has an invalid length. [ 523.398816][T14155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2070'. [ 523.505720][T14160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.506305][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 523.523031][T14160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.535030][T14160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.552707][T14160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.688255][ T10] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 523.696971][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.707460][ T10] usb 5-1: config 0 has no interfaces? [ 523.713132][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 523.722889][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.733854][ T10] usb 5-1: config 0 descriptor?? [ 523.766075][ T5844] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 523.926235][ T5844] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.944593][ T5844] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 523.958363][ T5844] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 523.976182][ T5844] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 523.992042][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.005620][T14158] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 524.028714][ T5844] hub 3-1:1.0: bad descriptor, ignoring hub [ 524.041125][ T5844] hub 3-1:1.0: probe with driver hub failed with error -5 [ 524.053196][ T5844] cdc_wdm 3-1:1.0: skipping garbage [ 524.058608][ T5844] cdc_wdm 3-1:1.0: skipping garbage [ 524.070278][ T5844] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 524.076582][ T5844] cdc_wdm 3-1:1.0: Unknown control protocol [ 524.160544][T14169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.172696][T14169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.308983][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 524.315634][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 524.321995][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 524.328614][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 524.335885][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 524.342492][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 524.496233][ T5883] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 524.498015][ T5844] usb 3-1: USB disconnect, device number 19 [ 524.585966][ T5149] Bluetooth: hci4: command 0x0406 tx timeout [ 524.677491][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 524.684880][ T5883] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 524.699311][ T5883] usb 6-1: config 179 has no interface number 0 [ 524.718297][ T5883] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 524.731378][ T5883] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 524.743470][ T5883] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 524.759522][ T5883] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 524.771372][ T5883] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 524.784864][ T5883] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 524.800276][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 524.800287][ T30] audit: type=1326 audit(1765847141.425:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 524.857958][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.876289][ T30] audit: type=1326 audit(1765847141.455:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 524.880010][T14171] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 524.993816][ T30] audit: type=1326 audit(1765847141.455:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 525.076408][ T30] audit: type=1326 audit(1765847141.455:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 525.178104][ T30] audit: type=1326 audit(1765847141.455:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 525.184419][T14182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.224910][T14182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.263313][ T30] audit: type=1326 audit(1765847141.455:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 525.273055][ T5883] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input52 [ 525.321718][ T30] audit: type=1326 audit(1765847141.455:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 525.395435][ T30] audit: type=1326 audit(1765847141.455:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 525.461471][ T30] audit: type=1326 audit(1765847141.455:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 525.515688][ T30] audit: type=1326 audit(1765847141.455:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 525.542235][ T5844] usb 6-1: USB disconnect, device number 49 [ 525.542238][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 525.542389][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 525.707245][ T129] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 525.880150][ T129] usb 3-1: config 0 has no interfaces? [ 525.885684][ T129] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 525.913840][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.929434][ T129] usb 3-1: config 0 descriptor?? [ 526.090179][ T5844] usb 5-1: USB disconnect, device number 14 [ 526.224722][T14194] fuse: Unknown parameter '@' [ 526.486319][ T5844] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 526.656143][ T5844] usb 6-1: device descriptor read/64, error -71 [ 526.888353][ T129] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 526.936107][ T5844] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 527.045890][ T129] usb 5-1: Invalid ep0 maxpacket: 16 [ 527.066999][ T5844] usb 6-1: device descriptor read/64, error -71 [ 527.175892][ T129] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 527.227860][ T5844] usb usb6-port1: attempt power cycle [ 527.325862][ T129] usb 5-1: Invalid ep0 maxpacket: 16 [ 527.333848][ T129] usb usb5-port1: attempt power cycle [ 527.695920][ T129] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 527.696178][ T5844] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 527.727036][ T5844] usb 6-1: device descriptor read/8, error -71 [ 527.738410][ T129] usb 5-1: Invalid ep0 maxpacket: 16 [ 527.876018][ T129] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 527.907704][ T129] usb 5-1: Invalid ep0 maxpacket: 16 [ 527.919895][ T129] usb usb5-port1: unable to enumerate USB device [ 527.967359][ T5844] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 528.010332][ T5844] usb 6-1: device descriptor read/8, error -71 [ 528.126347][ T5844] usb usb6-port1: unable to enumerate USB device [ 528.257034][ T5883] usb 3-1: USB disconnect, device number 20 [ 528.755913][ T5844] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 528.925919][ T5844] usb 3-1: Using ep0 maxpacket: 32 [ 528.932961][ T5844] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.949149][ T5844] usb 3-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=ce.6f [ 528.967506][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.987734][ T5844] usb 3-1: Product: syz [ 528.996201][ T5844] usb 3-1: Manufacturer: syz [ 529.006118][ T5844] usb 3-1: SerialNumber: syz [ 529.019181][ T5844] usb 3-1: config 0 descriptor?? [ 529.038016][ T5844] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 529.314042][ T5844] usb 3-1: qt2_attach - failed to power on unit: -71 [ 529.331145][ T5844] quatech2 3-1:0.0: probe with driver quatech2 failed with error -71 [ 529.346124][ T5844] usb 3-1: USB disconnect, device number 21 [ 529.583181][T14266] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2101'. [ 529.941704][T14274] IPv6: Can't replace route, no match found [ 530.321474][T14280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.361813][T14280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.382588][T14280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.392714][T14280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.585947][ T5844] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 530.655911][ T5883] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 530.735897][ T5844] usb 5-1: Using ep0 maxpacket: 16 [ 530.742411][ T5844] usb 5-1: config 0 has an invalid interface number: 63 but max is 0 [ 530.751322][ T5844] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.761850][ T9764] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 530.769500][ T5844] usb 5-1: config 0 has no interface number 0 [ 530.775911][ T5844] usb 5-1: config 0 interface 63 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 530.786227][ T5844] usb 5-1: config 0 interface 63 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 530.799434][ T5844] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice=41.e6 [ 530.808557][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.818887][ T5883] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.819376][ T5844] usb 5-1: config 0 descriptor?? [ 530.831739][ T5883] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 530.843973][ T5883] usb 3-1: config 1 has no interface number 0 [ 530.850384][ T5883] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 530.862024][ T5883] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 530.873527][ T5883] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 530.883071][ T5883] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 530.894362][ T5883] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 530.918724][ T5883] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 530.929164][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.937284][ T5883] usb 3-1: Product: syz [ 530.938111][ T9764] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 530.941574][ T5883] usb 3-1: Manufacturer: syz [ 530.956142][ T5883] usb 3-1: SerialNumber: syz [ 530.961166][ T9764] usb 6-1: config 0 interface 0 has no altsetting 0 [ 530.972941][T14283] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 530.973305][ T9764] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 530.989446][ T9764] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 530.998089][ T9764] usb 6-1: Product: syz [ 531.002405][ T9764] usb 6-1: Manufacturer: syz [ 531.007316][ T9764] usb 6-1: SerialNumber: syz [ 531.014492][ T9764] usb 6-1: config 0 descriptor?? [ 531.026784][ T9764] usb 6-1: selecting invalid altsetting 0 [ 531.067978][T14281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.156297][T14281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.207472][T14283] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 531.231420][ T9764] usb 5-1: USB disconnect, device number 19 [ 531.427309][T14283] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 531.841042][T14283] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 531.852431][ T5883] cdc_ncm 3-1:1.1: bind() failure [ 532.025915][ T9764] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 532.066679][ T5883] usb 3-1: USB disconnect, device number 22 [ 532.197663][ T9764] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 532.223449][ T9764] usb 5-1: config 0 has no interface number 0 [ 532.242756][ T9764] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 532.270565][ T9764] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 532.292350][ T9764] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 532.314939][ T9764] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 532.351138][T14302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.360108][ T9764] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 532.378691][T14302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.388680][ T9764] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 532.409767][ T9764] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 532.423328][ T9764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.443033][ T9764] usb 5-1: config 0 descriptor?? [ 532.453325][T14296] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 532.470405][T14296] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 532.516705][ T9764] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 533.223155][T14326] geneve3: entered promiscuous mode [ 533.631128][ T9762] usb 5-1: USB disconnect, device number 20 [ 533.700258][ T9762] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 533.718995][ T9764] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 533.888083][ T9764] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 533.948061][ T9764] usb 3-1: config 1 has no interface number 0 [ 533.954217][ T9764] usb 3-1: config 1 interface 105 altsetting 2 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 533.990711][T14335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.002293][ T9764] usb 3-1: config 1 interface 105 has no altsetting 0 [ 534.011641][T14335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.021983][ T9764] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 534.041275][ T9764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.069516][ T9764] usb 3-1: Product: syz [ 534.075487][ T5883] usb 6-1: USB disconnect, device number 54 [ 534.080580][ T9764] usb 3-1: Manufacturer: syz [ 534.099697][ T9764] usb 3-1: SerialNumber: syz [ 534.113203][T14330] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 534.162922][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 534.162940][ T30] audit: type=1326 audit(1765847150.785:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.5.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0318f749 code=0x7ffc0000 [ 534.268989][ T30] audit: type=1326 audit(1765847150.815:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.5.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0318f749 code=0x7ffc0000 [ 534.292473][ T30] audit: type=1326 audit(1765847150.825:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.5.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f6c0318f749 code=0x7ffc0000 [ 534.316132][ T30] audit: type=1326 audit(1765847150.825:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.5.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0318f749 code=0x7ffc0000 [ 534.346049][ T30] audit: type=1326 audit(1765847150.825:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.5.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0318f749 code=0x7ffc0000 [ 534.369122][ T30] audit: type=1326 audit(1765847150.825:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.5.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6c0318f749 code=0x7ffc0000 [ 534.392683][ T30] audit: type=1326 audit(1765847150.825:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.5.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0318f749 code=0x7ffc0000 [ 534.415724][ T30] audit: type=1326 audit(1765847150.835:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.5.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f6c0318f749 code=0x7ffc0000 [ 534.480142][ T30] audit: type=1326 audit(1765847150.865:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.5.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0318f749 code=0x7ffc0000 [ 534.502954][ T30] audit: type=1326 audit(1765847150.865:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.5.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0318f749 code=0x7ffc0000 [ 534.557120][T14330] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 534.977775][ T9764] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 534.998226][ T9764] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 535.018057][ T9764] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 535.065750][ T9764] aqc111 3-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f8:c1:5c:c9:14:29 [ 535.104280][ T9764] usb 3-1: USB disconnect, device number 23 [ 535.118166][ T9764] aqc111 3-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 535.227362][ T9764] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 535.248256][ T9764] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 535.258821][ T5844] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 535.277616][ T9764] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 535.427544][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 535.458203][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 535.481765][ T5844] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 535.499564][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.519329][ T5844] usb 5-1: config 0 descriptor?? [ 535.525087][T14362] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 535.821022][T14359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.946314][T14385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2131'. [ 535.990497][T14359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.112067][ T5844] usbhid 5-1:0.0: can't add hid device: -71 [ 536.196051][ T5844] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 536.234461][ T5844] usb 5-1: USB disconnect, device number 21 [ 536.815937][ T5844] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 537.135906][ T5844] usb 5-1: Using ep0 maxpacket: 32 [ 537.142644][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 537.185843][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 537.225909][ T5844] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 537.234998][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.308758][ T5844] usb 5-1: config 0 descriptor?? [ 537.352589][ T5844] hub 5-1:0.0: bad descriptor, ignoring hub [ 537.388662][ T5844] hub 5-1:0.0: probe with driver hub failed with error -5 [ 538.051982][T14413] fuse: Bad value for 'user_id' [ 538.076152][T14413] fuse: Bad value for 'user_id' [ 538.318119][ T5844] hid-multitouch 0003:0EEF:72C4.0027: unknown main item tag 0x0 [ 538.347423][ T5844] hid-multitouch 0003:0EEF:72C4.0027: unknown main item tag 0x0 [ 538.371189][ T5844] hid-multitouch 0003:0EEF:72C4.0027: unknown main item tag 0x0 [ 538.391431][ T5844] hid-multitouch 0003:0EEF:72C4.0027: unknown main item tag 0x0 [ 538.408278][ T5844] hid-multitouch 0003:0EEF:72C4.0027: unknown main item tag 0x0 [ 538.436249][ T5844] hid-multitouch 0003:0EEF:72C4.0027: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 538.462869][T14419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2135'. [ 538.856041][ T5844] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 539.015903][ T5844] usb 6-1: Using ep0 maxpacket: 16 [ 539.022811][ T5844] usb 6-1: config 6 has an invalid interface number: 227 but max is 0 [ 539.031817][ T5844] usb 6-1: config 6 has no interface number 0 [ 539.039890][ T5844] usb 6-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 7.79 [ 539.049159][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.057368][ T5844] usb 6-1: Product: syz [ 539.061514][ T5844] usb 6-1: Manufacturer: syz [ 539.066150][ T5844] usb 6-1: SerialNumber: syz [ 539.077236][ T5844] kalmia 6-1:6.227: probe with driver kalmia failed with error -22 [ 539.210387][T14430] x_tables: duplicate underflow at hook 1 [ 539.253651][T14432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2138'. [ 539.281164][ T10] usb 6-1: USB disconnect, device number 55 [ 539.421660][T14436] vim2m vim2m.0: vidioc_s_fmt queue busy [ 539.898447][ T30] audit: type=1326 audit(1765847156.525:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14358 comm="syz.4.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e698f749 code=0x7fc00000 [ 540.065892][ T5844] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 540.225889][ T5844] usb 6-1: Using ep0 maxpacket: 16 [ 540.235456][ T5844] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 540.245714][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.254584][ T5844] usb 6-1: Product: syz [ 540.259486][ T5844] usb 6-1: Manufacturer: syz [ 540.264116][ T5844] usb 6-1: SerialNumber: syz [ 540.275581][ T5844] r8152-cfgselector 6-1: Unknown version 0x0000 [ 540.282163][ T5844] r8152-cfgselector 6-1: config 0 descriptor?? [ 540.508347][ T5844] r8152-cfgselector 6-1: Unknown version 0x0000 [ 540.524995][ T5844] r8152-cfgselector 6-1: bad CDC descriptors [ 540.543275][ T5844] r8152-cfgselector 6-1: USB disconnect, device number 56 [ 540.895946][ T5844] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 541.062175][ T5844] usb 6-1: config 0 has an invalid interface number: 46 but max is 0 [ 541.073983][ T5844] usb 6-1: config 0 has no interface number 0 [ 541.103876][ T5844] usb 6-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 541.163419][ T5844] usb 6-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 541.189385][ T5844] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 541.265842][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.295871][ T5844] usb 6-1: Product: syz [ 541.300074][ T5844] usb 6-1: Manufacturer: syz [ 541.327952][ T5844] usb 6-1: SerialNumber: syz [ 541.338900][T14453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.358650][T14453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.378310][ T5844] usb 6-1: config 0 descriptor?? [ 541.390783][T14454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2145'. [ 541.399827][T14454] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 541.421126][ T5844] ums-karma 6-1:0.46: USB Mass Storage device detected [ 541.510403][ T5844] ums-karma 6-1:0.46: probe with driver ums-karma failed with error -5 [ 541.641441][T14447] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 541.661557][T14447] kvm: requested 138285 ns i8254 timer period limited to 200000 ns [ 541.671081][T14447] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 541.692061][T14447] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 541.703686][T14447] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 541.740500][T14447] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 541.761283][ T5844] usb 6-1: USB disconnect, device number 57 [ 541.824375][ T129] usb 5-1: USB disconnect, device number 22 [ 542.204376][ T30] audit: type=1326 audit(1765847158.825:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14479 comm="syz.0.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 542.243083][ T30] audit: type=1326 audit(1765847158.825:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14479 comm="syz.0.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 542.270791][ T30] audit: type=1326 audit(1765847158.855:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14479 comm="syz.0.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa91298df90 code=0x7ffc0000 [ 542.298684][T14481] kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 542.307118][T14481] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 542.317896][T14481] kvm: requested 102247 ns i8254 timer period limited to 200000 ns [ 542.326206][T14481] kvm: requested 126552 ns i8254 timer period limited to 200000 ns [ 542.337733][ T30] audit: type=1326 audit(1765847158.855:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14479 comm="syz.0.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 542.503843][ T30] audit: type=1326 audit(1765847158.855:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14479 comm="syz.0.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 542.546834][ T30] audit: type=1326 audit(1765847158.855:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14479 comm="syz.0.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 542.592693][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2152'. [ 542.612266][T14490] openvswitch: netlink: Flow actions attr not present in new flow. [ 542.637165][ T30] audit: type=1326 audit(1765847158.855:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14479 comm="syz.0.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 542.697975][ T30] audit: type=1326 audit(1765847158.865:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14479 comm="syz.0.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 542.768904][ T30] audit: type=1326 audit(1765847158.865:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14479 comm="syz.0.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 542.946138][ T5844] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 543.086519][ T5844] usb 6-1: device descriptor read/64, error -71 [ 543.326018][ T5844] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 543.475919][ T5844] usb 6-1: device descriptor read/64, error -71 [ 543.523509][T14509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.542899][T14509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.630220][ T5844] usb usb6-port1: attempt power cycle [ 543.966388][T14529] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 544.007344][ T5844] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 544.066510][ T5844] usb 6-1: device descriptor read/8, error -71 [ 544.148045][T14513] netlink: 'syz.4.2158': attribute type 3 has an invalid length. [ 544.156731][T14513] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2158'. [ 544.306864][ T5844] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 544.349623][ T5844] usb 6-1: device descriptor read/8, error -71 [ 544.366040][ T9762] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 544.467563][ T5844] usb usb6-port1: unable to enumerate USB device [ 544.518209][ T9762] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 544.528900][ T9762] usb 3-1: config 0 interface 0 has no altsetting 0 [ 544.538072][ T9762] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 544.548204][ T9762] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 544.560419][ T9762] usb 3-1: Product: syz [ 544.564689][ T9762] usb 3-1: Manufacturer: syz [ 544.570870][ T9762] usb 3-1: SerialNumber: syz [ 544.586887][ T9762] usb 3-1: config 0 descriptor?? [ 544.784706][ T9762] usb 3-1: selecting invalid altsetting 0 [ 545.684696][T14565] fuse: Bad value for 'group_id' [ 545.711460][T14565] fuse: Bad value for 'group_id' [ 546.006965][ T129] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 546.195928][ T129] usb 5-1: Using ep0 maxpacket: 16 [ 546.294625][ T129] usb 5-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 546.304109][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.312587][ T129] usb 5-1: Product: syz [ 546.317104][ T129] usb 5-1: Manufacturer: syz [ 546.334566][ T129] usb 5-1: SerialNumber: syz [ 546.383541][ T129] usb 5-1: config 0 descriptor?? [ 546.408536][ T129] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 546.900253][T14565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.924098][T14565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.670561][ T5883] usb 3-1: USB disconnect, device number 24 [ 547.839848][T14588] trusted_key: encrypted_key: insufficient parameters specified [ 547.862702][T14588] netlink: 'syz.2.2175': attribute type 10 has an invalid length. [ 548.072893][T14588] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 548.366343][ T9762] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 548.375436][T14601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2180'. [ 548.454321][T14606] loop9: detected capacity change from 0 to 7 [ 548.465350][T14606] Dev loop9: unable to read RDB block 7 [ 548.471070][T14606] loop9: unable to read partition table [ 548.477467][T14606] loop9: partition table beyond EOD, truncated [ 548.485103][T14606] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 548.525906][ T9762] usb 6-1: Using ep0 maxpacket: 32 [ 548.578809][ T9762] usb 6-1: config 4 has an invalid interface number: 41 but max is 0 [ 548.593600][ T9762] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 548.604597][ T9762] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 548.620087][ T9762] usb 6-1: config 4 has no interface number 0 [ 548.630136][ T9762] usb 6-1: config 4 interface 41 has no altsetting 0 [ 548.643890][ T9762] usb 6-1: New USB device found, idVendor=1740, idProduct=9705, bcdDevice=d6.9f [ 548.655428][ T9762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.683806][ T9762] usb 6-1: Product: syz [ 548.691851][ T9762] usb 6-1: Manufacturer: syz [ 548.700193][ T9762] usb 6-1: SerialNumber: syz [ 548.826057][ T5883] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 548.935821][ T9762] usb 6-1: USB disconnect, device number 62 [ 548.979611][ T5883] usb 3-1: config 0 has an invalid interface number: 82 but max is 0 [ 548.987804][ T5883] usb 3-1: config 0 has an invalid descriptor of length 23, skipping remainder of the config [ 549.003336][ T5883] usb 3-1: config 0 has no interface number 0 [ 549.015208][ T5883] usb 3-1: too many endpoints for config 0 interface 82 altsetting 64: 244, using maximum allowed: 30 [ 549.034290][ T5883] usb 3-1: config 0 interface 82 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 244 [ 549.059956][ T5883] usb 3-1: config 0 interface 82 has no altsetting 0 [ 549.073598][ T5883] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 549.101803][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.127568][ T5883] usb 3-1: config 0 descriptor?? [ 549.358990][ T5883] usb 3-1: string descriptor 0 read error: -71 [ 549.390696][ T5883] iowarrior 3-1:0.82: no interrupt-in endpoint found [ 549.401513][ T5883] usb 3-1: USB disconnect, device number 25 [ 549.412095][ T129] pwc: send_video_command error -71 [ 549.444636][ T129] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 549.453836][ T129] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 549.508034][ T129] usb 5-1: USB disconnect, device number 23 [ 549.823619][T14624] fuse: Bad value for 'fd' [ 549.966686][T14621] veth2: entered promiscuous mode [ 549.971975][T14621] veth2: entered allmulticast mode [ 550.915898][T10993] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 551.040430][T14642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.064462][T14642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.066222][T10993] usb 5-1: Using ep0 maxpacket: 16 [ 551.108713][T10993] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 551.147633][T10993] usb 5-1: config 0 has no interface number 0 [ 551.157337][T10993] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 551.187641][T10993] usb 5-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 551.202217][T10993] usb 5-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 551.245936][T10993] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 551.285034][T10993] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 551.346154][T10993] usb 5-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 551.354174][T10993] usb 5-1: Product: syz [ 551.373286][T10993] usb 5-1: Manufacturer: syz [ 551.386732][T10993] usb 5-1: SerialNumber: syz [ 551.408478][T10993] usb 5-1: config 0 descriptor?? [ 551.437792][T14636] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 551.605347][T14650] create_pit_timer: 6 callbacks suppressed [ 551.605417][T14650] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 551.655432][T14650] kvm: requested 82971 ns i8254 timer period limited to 200000 ns [ 551.685368][T14650] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 551.727537][T14650] kvm: requested 31009 ns i8254 timer period limited to 200000 ns [ 551.762325][T10993] usb 5-1: USB disconnect, device number 24 [ 551.788479][T14650] kvm: requested 66209 ns i8254 timer period limited to 200000 ns [ 551.816900][T14655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.840313][T14650] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 551.874517][T14655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.882944][T14650] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 551.905019][T14650] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 551.914061][T14655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.923028][T14655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.931288][T14650] kvm: requested 98057 ns i8254 timer period limited to 200000 ns [ 551.940873][T14650] kvm: requested 14247 ns i8254 timer period limited to 200000 ns [ 551.950414][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 551.950431][ T30] audit: type=1326 audit(1765847168.575:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.2.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccbb8f749 code=0x7ffc0000 [ 552.007474][ T30] audit: type=1326 audit(1765847168.575:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.2.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f6ccbb8f749 code=0x7ffc0000 [ 552.031275][ T30] audit: type=1326 audit(1765847168.575:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.2.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccbb8f749 code=0x7ffc0000 [ 552.054474][ T30] audit: type=1326 audit(1765847168.605:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.2.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6ccbb8f749 code=0x7ffc0000 [ 552.077164][ T30] audit: type=1326 audit(1765847168.605:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.2.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccbb8f749 code=0x7ffc0000 [ 552.100784][ T30] audit: type=1326 audit(1765847168.605:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.2.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6ccbb8f749 code=0x7ffc0000 [ 552.138506][ T30] audit: type=1326 audit(1765847168.605:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.2.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccbb8f749 code=0x7ffc0000 [ 552.161757][ T30] audit: type=1326 audit(1765847168.605:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.2.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6ccbb8f749 code=0x7ffc0000 [ 552.187971][ T30] audit: type=1326 audit(1765847168.605:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.2.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccbb8f749 code=0x7ffc0000 [ 552.248411][ T30] audit: type=1326 audit(1765847168.605:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.2.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6ccbb8f749 code=0x7ffc0000 [ 552.361428][T14666] pim6reg1: entered promiscuous mode [ 552.376732][T14666] pim6reg1: entered allmulticast mode [ 552.516240][ T9762] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 552.633553][T14679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.655621][T14679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.667376][T14679] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2204'. [ 552.684765][T14679] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2204'. [ 552.706111][ T9762] usb 3-1: Using ep0 maxpacket: 32 [ 552.713302][ T9762] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.731644][ T9762] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 552.765552][ T9762] usb 3-1: config 0 interface 0 has no altsetting 0 [ 552.782637][ T9762] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 552.812281][ T9762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.836562][ T9762] usb 3-1: config 0 descriptor?? [ 552.888266][T14675] netlink: 'syz.4.2203': attribute type 9 has an invalid length. [ 553.322070][ T9762] corsair-cpro 0003:1B1C:0C10.0028: item fetching failed at offset 2/5 [ 553.333843][ T9762] corsair-cpro 0003:1B1C:0C10.0028: probe with driver corsair-cpro failed with error -22 [ 553.523804][T14702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2209'. [ 553.553219][T14702] loop6: detected capacity change from 0 to 524288000 [ 553.574838][T14661] input: syz1 as /devices/virtual/input/input53 [ 553.966531][ T9762] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 554.131283][ T9762] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 554.158777][ T9762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.172218][ T9762] usb 6-1: Product: syz [ 554.179965][ T9762] usb 6-1: Manufacturer: syz [ 554.192846][ T9762] usb 6-1: SerialNumber: syz [ 554.210057][ T9762] usb 6-1: config 0 descriptor?? [ 554.433301][ T9762] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 554.446093][T14720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2214'. [ 554.871224][T14726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.882388][T14726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.281496][ T5844] usb 3-1: USB disconnect, device number 26 [ 555.449440][T14737] loop4: detected capacity change from 0 to 7 [ 555.478307][ T5958] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 555.483676][ T5958] loop4: partition table partially beyond EOD, truncated [ 555.493177][ T5958] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 555.537014][T14737] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 555.542352][T14737] loop4: partition table partially beyond EOD, truncated [ 555.550259][T14737] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 555.608388][ T5958] udevd[5958]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 555.656710][T14742] macsec1: entered allmulticast mode [ 555.658573][ T5958] udevd[5958]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 555.662208][T14742] bond_slave_0: entered allmulticast mode [ 555.682158][T14742] bond_slave_0: left allmulticast mode [ 555.873352][ T9762] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 555.899660][ T9762] usb 6-1: USB disconnect, device number 63 [ 556.735857][T10993] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 556.764180][T14784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.787241][T14784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.909627][T10993] usb 6-1: Using ep0 maxpacket: 32 [ 556.939209][T10993] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 556.968525][T10993] usb 6-1: config 0 has no interface number 0 [ 557.004039][T10993] usb 6-1: config 0 interface 89 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 557.036628][T14784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.045149][T10993] usb 6-1: config 0 interface 89 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 557.069743][T14784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.091088][T10993] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice= 4.be [ 557.127744][T14784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.157474][T10993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.165508][T10993] usb 6-1: Product: syz [ 557.190407][T14784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.210275][T10993] usb 6-1: Manufacturer: syz [ 557.214914][T10993] usb 6-1: SerialNumber: syz [ 557.277778][T10993] usb 6-1: config 0 descriptor?? [ 557.286635][T14777] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 557.318043][T10993] kvaser_usb 6-1:0.89: error -ENODEV: Cannot get usb endpoint(s) [ 557.370691][T14801] vivid-008: disconnect [ 557.523943][T10993] usb 6-1: USB disconnect, device number 64 [ 557.908069][T14815] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2241'. [ 557.984510][T14816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.003261][T14816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.105381][T14799] vivid-008: reconnect [ 558.412343][T14826] fuse: Bad value for 'user_id' [ 558.422129][T14826] fuse: Bad value for 'user_id' [ 558.532639][ T129] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 558.820122][ T129] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 558.836923][ T129] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.887006][ T129] usb 3-1: config 0 has no interfaces? [ 558.905964][ T129] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 558.976684][T14843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2247'. [ 559.036089][ T9764] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 559.064832][T14848] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.2249' sets config #2 [ 559.084588][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.146571][ T129] usb 3-1: config 0 descriptor?? [ 559.215842][ T9764] usb 5-1: Using ep0 maxpacket: 16 [ 559.378069][ T9764] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 559.481608][ T9764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 559.577223][ T9764] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 559.665988][ T9764] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.675955][ T9764] usb 5-1: Product: syz [ 559.680629][ T9764] usb 5-1: Manufacturer: syz [ 559.686252][ T9764] usb 5-1: SerialNumber: syz [ 559.704628][ T9764] usb 5-1: config 0 descriptor?? [ 559.717683][ T9764] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 559.731073][ T9764] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 560.322914][ T9764] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 560.341413][ T9764] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 560.586311][T14858] syzkaller0: entered promiscuous mode [ 560.591842][T14858] syzkaller0: entered allmulticast mode [ 561.064186][T14863] vlan2: entered promiscuous mode [ 561.088598][T14863] syz_tun: entered promiscuous mode [ 561.702041][T14867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.748851][ T5844] usb 3-1: USB disconnect, device number 27 [ 561.762692][T14867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.866139][ T9764] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 561.874233][ T9764] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 561.888835][ T9764] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 561.921009][ T9764] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 561.932021][ T9764] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 561.950504][ T9764] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 562.909221][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.915689][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.143298][T14899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2260'. [ 563.164455][T14899] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 563.173955][T14899] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2260'. [ 563.183430][T14899] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 563.295996][ T129] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 563.455940][ T129] usb 3-1: Using ep0 maxpacket: 32 [ 563.545622][T14912] hsr0: entered allmulticast mode [ 563.550811][T14912] hsr_slave_0: entered allmulticast mode [ 563.559170][ T129] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 563.569568][T14912] hsr_slave_1: entered allmulticast mode [ 563.579945][ T129] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 563.635435][ T129] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 563.656093][ T129] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 563.684361][ T129] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 563.694193][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.743451][T10993] usb 5-1: USB disconnect, device number 25 [ 563.766177][ T129] usb 3-1: Product: syz [ 563.770378][ T129] usb 3-1: Manufacturer: syz [ 563.795850][ T129] usb 3-1: SerialNumber: syz [ 563.822507][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 563.950514][ T129] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input54 [ 564.046193][ T129] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 564.068514][ T129] (id 0x00) [ 564.082672][T14920] binder_alloc: 14917: pid 14917 spamming oneway? 1 buffers allocated for a total size of 4096 [ 564.133731][T14920] binder_alloc: 14917: pid 14917 spamming oneway? 2 buffers allocated for a total size of 5120 [ 564.178352][ T129] rc_core: IR keymap rc-imon-pad not found [ 564.184348][ T129] Registered IR keymap rc-empty [ 564.189955][T10993] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 564.202257][ T129] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 564.230838][ T129] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 564.277414][ T129] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 564.311018][ T129] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input55 [ 564.333329][ T129] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:28> initialized [ 564.358157][T10993] usb 5-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 564.385957][T10993] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 564.405900][T10993] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 564.414967][T10993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.468559][T10993] usb 5-1: config 0 descriptor?? [ 564.584044][T14927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.613287][T14927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.627025][T14927] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2269'. [ 564.726247][T14916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.735088][T14916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.895890][ T5844] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 565.045863][ T5844] usb 6-1: Using ep0 maxpacket: 16 [ 565.054482][ T5844] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 565.064012][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.072341][ T5844] usb 6-1: Product: syz [ 565.076582][ T5844] usb 6-1: Manufacturer: syz [ 565.081215][ T5844] usb 6-1: SerialNumber: syz [ 565.089237][ T5844] usb 6-1: config 0 descriptor?? [ 565.096876][ T5844] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 566.361069][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 566.361115][ T30] audit: type=1326 audit(1765847182.975:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.0.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 566.392064][ T30] audit: type=1326 audit(1765847182.975:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.0.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa91298df90 code=0x7ffc0000 [ 566.418594][ T30] audit: type=1326 audit(1765847182.975:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.0.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa91298df90 code=0x7ffc0000 [ 566.442183][ T30] audit: type=1326 audit(1765847182.985:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.0.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 566.470241][ T30] audit: type=1326 audit(1765847182.985:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.0.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 566.493422][ T30] audit: type=1326 audit(1765847182.985:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.0.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 566.518415][ T30] audit: type=1326 audit(1765847182.985:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.0.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 566.543742][ T30] audit: type=1326 audit(1765847182.985:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.0.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 566.568026][ T30] audit: type=1326 audit(1765847182.985:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.0.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91298f749 code=0x7ffc0000 [ 567.128203][T10993] usb 5-1: string descriptor 0 read error: -71 [ 567.164545][T10993] usb 5-1: USB disconnect, device number 26 [ 567.407051][T14944] imon:send_packet: task interrupted [ 567.414827][T14944] imon:send_packet: packet tx failed (-512) [ 567.431647][T14944] imon:vfd_write: send packet #5 failed [ 567.537493][ T9764] usb 3-1: USB disconnect, device number 28 [ 567.768744][ T5844] usb 6-1: clie_3_5_startup: get config number failed: -71 [ 567.837432][ T5844] visor 6-1:0.0: probe with driver visor failed with error -71 [ 567.897238][ T5844] usb 6-1: USB disconnect, device number 65 [ 568.244215][T14978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2282'. [ 568.426873][ T129] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 568.608908][ T129] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 205, changing to 11 [ 568.631654][ T129] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41863, setting to 1024 [ 568.678147][ T129] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 568.725887][ T129] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 568.745903][ T129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.777342][ T129] usb 6-1: config 0 descriptor?? [ 569.175740][T14991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.185985][T14991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.211281][ T129] plantronics 0003:047F:FFFF.0029: reserved main item tag 0xd [ 569.248820][ T129] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 569.770684][T15009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.793355][T15007] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 569.806586][T15009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.830957][T15007] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 569.878251][T15009] sit0: entered promiscuous mode [ 569.883897][T15009] netlink: 'syz.0.2288': attribute type 1 has an invalid length. [ 569.891802][T15009] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2288'. [ 569.905443][T15009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.930791][ T30] audit: type=1800 audit(1765847186.555:593): pid=15006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2287" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 569.931100][T15009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.858427][T15018] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 571.093898][T15028] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2291'. [ 572.705857][ T5883] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 572.860206][ T5883] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 572.893331][ T5883] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 572.928845][ T5883] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 572.955851][ T5883] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 572.976978][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 573.006012][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 573.051986][ T5883] usb 5-1: language id specifier not provided by device, defaulting to English [ 573.120855][ T5883] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 573.135136][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.165223][ T5883] usb 5-1: Manufacturer: 躔煟祚肂濬즰 [ 573.204163][ T5883] usb 5-1: config 0 descriptor?? [ 573.225981][T15044] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 573.256473][ T5883] hub 5-1:0.0: bad descriptor, ignoring hub [ 573.265321][ T5883] hub 5-1:0.0: probe with driver hub failed with error -5 [ 573.277406][ T5883] input: 躔煟祚肂濬즰 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input57 [ 573.494945][T15044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.507249][T15044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.559322][ T9764] usb 5-1: USB disconnect, device number 27 [ 573.559406][ C0] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -19 [ 576.545342][T15107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2315'. [ 576.736308][T15113] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2317'. [ 576.879693][T15120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.893437][T15120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.085921][ T129] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 577.249700][ T129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.269646][ T129] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 577.289596][ T129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.320452][ T129] usb 5-1: config 0 descriptor?? [ 577.744999][ T129] lg-g15 0003:046D:C222.002A: unbalanced delimiter at end of report description [ 577.759328][ T129] lg-g15 0003:046D:C222.002A: probe with driver lg-g15 failed with error -22 [ 577.829315][T15137] netlink: 'syz.0.2324': attribute type 12 has an invalid length. [ 577.839196][T15137] netlink: 'syz.0.2324': attribute type 29 has an invalid length. [ 577.847274][ T5883] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 577.854920][T15137] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2324'. [ 577.864368][T15137] netlink: 'syz.0.2324': attribute type 1 has an invalid length. [ 577.921151][ T129] IPVS: starting estimator thread 0... [ 577.946222][T15118] netlink: 'syz.4.2318': attribute type 15 has an invalid length. [ 578.015902][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 578.025897][T15140] IPVS: using max 29 ests per chain, 69600 per kthread [ 578.086572][ T5883] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 578.106047][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.114070][ T5883] usb 3-1: Product: syz [ 578.119368][ T5883] usb 3-1: Manufacturer: syz [ 578.124145][ T5883] usb 3-1: SerialNumber: syz [ 578.136593][ T5883] usb 3-1: config 0 descriptor?? [ 578.152217][ T5883] gspca_main: se401-2.14.0 probing 047d:5003 [ 578.554379][ T5883] gspca_se401: Wrong descriptor type [ 578.771799][ T5883] usb 3-1: USB disconnect, device number 29 [ 578.942419][T15149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.951238][T15149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.336074][T15159] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2330'. [ 579.637903][ T5883] usb 6-1: USB disconnect, device number 66 [ 579.738546][T15173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2334'. [ 579.836543][T10993] usb 5-1: USB disconnect, device number 28 [ 580.102673][T15188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.122216][T15188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.146294][T15188] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2337'. [ 580.166118][ T5883] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 580.327558][ T5883] usb 6-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 580.339867][ T5883] usb 6-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 580.366001][ T5883] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 580.381964][ T5883] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 580.398140][ T5883] usb 6-1: Manufacturer: syz [ 580.405657][ T5883] usb 6-1: SerialNumber: syz [ 581.244317][T15200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.259499][T15200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.293004][T15179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2335'. [ 581.358145][ T5883] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 581.368323][ T5883] usb 6-1: USB disconnect, device number 67 [ 581.445885][ T5889] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 581.595912][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 581.602627][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.613944][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.623866][ T5889] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 581.633097][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.643869][ T5889] usb 3-1: config 0 descriptor?? [ 581.856071][ T5889] kye 0003:0458:5016.002B: control desc unexpectedly large [ 581.867206][ T5889] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.002B/input/input59 [ 581.952781][ T5889] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.002B/input/input60 [ 582.040260][ T5889] kye 0003:0458:5016.002B: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 582.262522][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2346'. [ 582.375955][ T5889] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 582.538392][ T5889] usb 6-1: unable to get BOS descriptor set [ 582.545562][ T5889] usb 6-1: not running at top speed; connect to a high speed hub [ 582.555547][ T5889] usb 6-1: config 1 interface 0 has no altsetting 0 [ 582.566828][ T5889] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 582.576470][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.584512][ T5889] usb 6-1: Product: syz [ 582.589141][ T5889] usb 6-1: Manufacturer: syz [ 582.593764][ T5889] usb 6-1: SerialNumber: syz [ 582.918009][T15232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.928753][T15232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.195354][T15233] [ 583.197735][T15233] ============================================ [ 583.203929][T15233] WARNING: possible recursive locking detected [ 583.210277][T15233] syzkaller #0 Tainted: G L [ 583.216276][T15233] -------------------------------------------- [ 583.222553][T15233] syz.4.2350/15233 is trying to acquire lock: [ 583.228624][T15233] ffff88807948cd38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcbc/0x1e10 [ 583.239630][T15233] [ 583.239630][T15233] but task is already holding lock: [ 583.246990][T15233] ffff88807948cd38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19c0 [ 583.256899][T15233] and the lock comparison function returns 0: [ 583.262971][T15233] [ 583.262971][T15233] other info that might help us debug this: [ 583.271028][T15233] Possible unsafe locking scenario: [ 583.271028][T15233] [ 583.278470][T15233] CPU0 [ 583.281753][T15233] ---- [ 583.285022][T15233] lock(&dev_instance_lock_key#20); [ 583.290311][T15233] lock(&dev_instance_lock_key#20); [ 583.295604][T15233] [ 583.295604][T15233] *** DEADLOCK *** [ 583.295604][T15233] [ 583.303764][T15233] May be due to missing lock nesting notation [ 583.303764][T15233] [ 583.312078][T15233] 2 locks held by syz.4.2350/15233: [ 583.317266][T15233] #0: ffffffff8f311b48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19c0 [ 583.326327][T15233] #1: ffff88807948cd38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19c0 [ 583.336623][T15233] [ 583.336623][T15233] stack backtrace: [ 583.342512][T15233] CPU: 0 UID: 0 PID: 15233 Comm: syz.4.2350 Tainted: G L syzkaller #0 PREEMPT(full) [ 583.342540][T15233] Tainted: [L]=SOFTLOCKUP [ 583.342547][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 583.342565][T15233] Call Trace: [ 583.342575][T15233] [ 583.342584][T15233] dump_stack_lvl+0x189/0x250 [ 583.342609][T15233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.342628][T15233] ? __pfx__printk+0x10/0x10 [ 583.342655][T15233] ? print_lock_name+0xde/0x100 [ 583.342685][T15233] print_deadlock_bug+0x279/0x290 [ 583.342707][T15233] __lock_acquire+0x2540/0x2cf0 [ 583.342731][T15233] ? __netdev_update_features+0xcbc/0x1e10 [ 583.342753][T15233] lock_acquire+0x117/0x340 [ 583.342769][T15233] ? __netdev_update_features+0xcbc/0x1e10 [ 583.342797][T15233] __mutex_lock+0x187/0x1350 [ 583.342815][T15233] ? __netdev_update_features+0xcbc/0x1e10 [ 583.342836][T15233] ? stack_depot_save_flags+0x422/0x850 [ 583.342864][T15233] ? __lock_acquire+0x6b6/0x2cf0 [ 583.342881][T15233] ? kmem_cache_free+0x197/0x620 [ 583.342897][T15233] ? __netdev_update_features+0xcbc/0x1e10 [ 583.342919][T15233] ? ethnl_default_notify+0x8a9/0xb20 [ 583.342944][T15233] ? ethnl_netdev_event+0xe2/0x160 [ 583.342966][T15233] ? notifier_call_chain+0x19d/0x3a0 [ 583.342987][T15233] ? __pfx___mutex_lock+0x10/0x10 [ 583.343004][T15233] ? bond_fix_features+0x191/0x1d0 [ 583.343027][T15233] __netdev_update_features+0xcbc/0x1e10 [ 583.343054][T15233] ? __pfx___netdev_update_features+0x10/0x10 [ 583.343077][T15233] ? cfg80211_netdev_notifier_call+0x1e5/0x1400 [ 583.343096][T15233] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 583.343112][T15233] ? __wake_up_common_lock+0x190/0x1f0 [ 583.343136][T15233] ? consume_skb+0xce/0xf0 [ 583.343153][T15233] ? netlink_broadcast_filtered+0xf55/0x1000 [ 583.343173][T15233] ? __lock_acquire+0x6b6/0x2cf0 [ 583.343194][T15233] netdev_compute_master_upper_features+0x8eb/0xab0 [ 583.343225][T15233] ? __pfx_netdev_compute_master_upper_features+0x10/0x10 [ 583.343254][T15233] bond_netdev_event+0x748/0xf80 [ 583.343275][T15233] ? __pfx_bond_netdev_event+0x10/0x10 [ 583.343295][T15233] ? inetdev_event+0x454/0x15b0 [ 583.343315][T15233] ? igmp_netdev_event+0x7c/0x750 [ 583.343339][T15233] notifier_call_chain+0x19d/0x3a0 [ 583.343362][T15233] netdev_features_change+0x85/0xc0 [ 583.343378][T15233] ? __pfx_netdev_features_change+0x10/0x10 [ 583.343393][T15233] ? __pm_runtime_resume+0x9d/0x180 [ 583.343412][T15233] dev_ethtool+0x1541/0x19c0 [ 583.343439][T15233] ? __pfx_dev_ethtool+0x10/0x10 [ 583.343470][T15233] ? dev_load+0x21/0x1f0 [ 583.343487][T15233] dev_ioctl+0x392/0x1150 [ 583.343505][T15233] sock_do_ioctl+0x22c/0x300 [ 583.343528][T15233] ? __pfx_sock_do_ioctl+0x10/0x10 [ 583.343555][T15233] sock_ioctl+0x576/0x790 [ 583.343576][T15233] ? __pfx_sock_ioctl+0x10/0x10 [ 583.343600][T15233] ? __fget_files+0x3a0/0x420 [ 583.343622][T15233] ? __fget_files+0x2a/0x420 [ 583.343642][T15233] ? bpf_lsm_file_ioctl+0x9/0x20 [ 583.343661][T15233] ? __pfx_sock_ioctl+0x10/0x10 [ 583.343688][T15233] __se_sys_ioctl+0xfc/0x170 [ 583.343714][T15233] do_syscall_64+0xfa/0xf80 [ 583.343733][T15233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.343752][T15233] ? clear_bhb_loop+0x60/0xb0 [ 583.343770][T15233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.343792][T15233] RIP: 0033:0x7f52e698f749 [ 583.343809][T15233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.343825][T15233] RSP: 002b:00007f52e781f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 583.343845][T15233] RAX: ffffffffffffffda RBX: 00007f52e6be6270 RCX: 00007f52e698f749 [ 583.343858][T15233] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000006 [ 583.343872][T15233] RBP: 00007f52e6a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 583.343888][T15233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.343899][T15233] R13: 00007f52e6be6308 R14: 00007f52e6be6270 R15: 00007f52e6d0fa28 [ 583.343917][T15233] [ 584.447113][T10993] usb 3-1: USB disconnect, device number 30 [ 585.165229][ T5889] usb 6-1: USB disconnect, device number 68 [ 588.517808][ T24] kworker/1:0 (24) used greatest stack depth: 15768 bytes left