last executing test programs: 2m24.990379038s ago: executing program 4 (id=47): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) unshare(0x24020400) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x3453c0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000014c0)={r1, 0x0, 0x0}, 0x20) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async) r5 = dup(r4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async) sendto$inet6(r6, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_mreq(r6, 0x29, 0x1c, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000040)=@x86={0x5, 0x3, 0x1, 0x0, 0x4, 0x2, 0x7, 0x66, 0x4, 0x2, 0x8, 0xff, 0x0, 0x8, 0x9ab6, 0x40, 0xaa, 0x7, 0x8, '\x00', 0x5, 0x2}) (async) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_freeze_timeout', 0x82802, 0x88) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r8) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) (async) ioctl$PPPIOCGL2TPSTATS(r8, 0x40047459, 0x0) (async) syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r7, 0x0, {0x0, 0x0, 0x0, 0x3, 0x4000000000001001, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) 2m24.322499023s ago: executing program 4 (id=48): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x20}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) 2m24.079138635s ago: executing program 4 (id=49): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x20000002}, 0x40800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000006140)=[{{&(0x7f0000000580)=@abs={0x1, 0x0, 0x9}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000440)="1f43", 0x2}, {&(0x7f0000000600)="f1725299df5509173287344751a17dee693b92537137c55a60e4230d11734cc2ae6c8d9a81978b05d4", 0x29}, {&(0x7f0000000ec0)="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", 0xfb}, {&(0x7f0000002280)="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", 0x1000}, {&(0x7f0000000fc0)="f46a515755ddbdea2f125d93c6ca5a6d313938838102fe724ec2d409002ac3b10111ea518bdc562b18a1412e3600ef4d99e45b7f73671d96e8f125badfa9eb13d64f2061dc1cf2163018ea01e99329d806f4d89ca88e3d6559b62a544351fa3fa2c7e52df79b804be999df344315d825e0165cd5e9da08539833b8f78d0f7778d98580c15ca23252d4eb17b979ac6f5fae9cf5a3541503c7195bc0feead9ed1b8a1edf0cab0156bf17fef4a876003f715d42af83e8fc1e1d83e38c4a5ede6b27044809582aed7bd564d56a9f8edc3daae12ec322441f490aa2525e4c", 0xdc}, {&(0x7f00000010c0)="e2a05ed3efed509aef06eb51536b1dfb5dd8a1d1071676bf91390cd2b6130a9ef9e179367a1fb1b291cd021560845b55861dd8d9ef1042a2d2131d1d0995fa845cc9f89d8959a97ea89ec39dcdd962eeb0343d3a6f346719e104efac6dd1b45bf37115bdc10aedaea27ba9c1cc8b06c9fbc5e882add5ca02653d44763d34e70b4ad68052eff4c04dc9b3356f923a8e4370133d881dc2431e30ceb5c8d5574706c54d5f61932d4ee31e536cc345a4bdc7", 0xb0}, {&(0x7f0000001180)="ab49c1d40e5030c3e8ae1a303ed05df97a0e628e0b2830a8b406b1c2ec9c843d215757ae4d5733e506a659b77d7de1623488a80b1b88fb53d28964751f5d48184c5db06f0cd4e2d64e1666bbfa7ec8a4c7133094259304aeb667af1fb284fc6341ab72fcff6feef946c57787b758fe083142c2a7511c74b086b8986bbe7338703ae5ad63d2651fe4a6a9ce84de8314bc78168c437d3445a38976b3de364361b65077982a57ef70fe29ee266127be22f5134bc5001a4b0a6f045dca857a5017563c73c1c22f0df1", 0xc7}], 0x7, &(0x7f0000003a00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x20, 0x1, 0x1, [r2, r6, r6, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r6, r6, r5]}}], 0x120, 0x8000}}, {{&(0x7f0000000900)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003600)=[{&(0x7f0000003280)="b035f98b588a851448cfa932b09980f23e502096a2a2ec56be6146f0bda23eedaa67906e2f080f4107b4a12dae73b344034110958b2e139839916eab5d8b3855424ddd46196032f40acccaabbc02b943c31039b42d66cd008b4637", 0x5b}, {&(0x7f0000003300)="dcff8b95daa2f888b3eed2e74f9a9931126f39c8ab7620350e29d196c1d1a7167372137fbdeec3610c964180735d7af321c0c2ae5107fd09f6884387283844912865d2298fc66eb37b999b8cf8f781db6f77eb6e513a0017052181bb434d4c9a47b1bfcecf50493dd0efc0d56742bcc2bb272039cca60c46d111ce250cdf885381793789126492df3447bd976937f4d06c07fa9c27947dd4672da2c16e4ea1859f34ed57fbb78b4b683374053e8651ecbc830b", 0xb3}, {&(0x7f0000000640)}, {&(0x7f00000007c0)="a8c4b5142dda", 0x6}, {&(0x7f00000033c0)="864f2ce07306bb6458917c63fad9172edc6dc387bf0e135272211b3a6a86d79298dcb8f1f399b99d4c9ad6e83ab7715f591f4d758d70b10500446678f0f8ca3e685d8f9e43a7ecd119ac5de90dc7ffc41ad85254d00937363ebc1499a3a29728f1732454bc6eae400000dcab123a4c4a03d6416baf37241edfbd9e43979464d8452b1bf4c4b68734fce3e6124cec81e805fab657d30400000000000000348c89e0967cb48547af42405c5039de92d2369048071d655952985701083f8bfb97bffd163b1d22475035ecb0c38b", 0xcc}, {&(0x7f00000034c0)="2add3c74c129dca661f393a71105dcd75a1c988b275f94a34ace743905102cd4cc59fe0cfd318bf62ce43a447702a7757459239cc17881825bdf518fd519cf7c50c7c0aff5ddf2cce9c294995c226aa96ac3bcf0cf1efada045d20ed850c49dc91b393777b812a90b255adf0ce245c12229452aba5001284f9d4aa76171171eb098e88f4324130feab325f9d088b4cb4a92cab46825ddf4b3eeae0eac20c57e79a6e0209af83cf07e8d196c739374b8f8e98e11c5bcbe12c2feba9695b4651d8", 0xc0}, {&(0x7f0000003580)="e0485a91b7127b33685fc628eb0c7edf9daedf86e5a2cc888bff4c53a4c5518c0d9ce9937181d9012ef8505204e6b54d36ca7f72ef9419cb5f8233acbc596d4f1e382618cf93bd14e9071cc91093536c03e274a57542edec8b28ec7553c3c86ed28b3f65b6240611c2859f58de949b284f553b027bb6014b7c003abdcf96", 0x7e}], 0x7, &(0x7f0000005fc0)=[@rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r1, r2, r0, r4, r6, 0xffffffffffffffff, r4, r4]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r1, r5, 0xffffffffffffffff, r3, r4]}}, @cred={{0x1c}}], 0x150, 0x801}}], 0x2, 0x8000) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000380)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$DRM_IOCTL_VERSION(r7, 0xc0406400, &(0x7f0000000480)={0x8, 0x4, 0x4, 0x1000, &(0x7f0000001280)=""/4096, 0x0, 0x0, 0x0, 0x0}) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000001180), 0x0, 0x0) madvise(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x64) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000ac0)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', 0x0, &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000680)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', 0x0, &(0x7f0000000380)='\x10.%{\x00\x00\x00\x00\x18Jm\xc5\x823KU\xdd\xf5\xfa\xb5\x85\x16\xe8U?3VA[u\xaa\x036\x01\x7fr\"\xb1\x8a\xd1\x8e\xfd\xa1X\xdf\xe3\xe4\x1e\xa0\xec\x92w\xff\x8d\x1c\x12\xc93\xc9\xcf\xdf \x83\x824|\xa8\x7f5}\xd6\xd3\xad-\xd9\x1dU\xb0\b\xfc\xe9N\x00\"7)\xf2\xff\x00\xbe@\x87+\xe5\xdb1\x0e\x1c<\x86\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000000a80)='::-$[]#:{\x00']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, 0x0) 2m22.934899553s ago: executing program 4 (id=54): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003aa000000aa03"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x0, 0x2, 0x36, {0x36, 0x10, "193d1b19cc01a71ab3a70c22b9ccc9e2316c8da4370e2c457bbe5c3340484b41358cc1adf1a70c2925af5b19ca29ef87076ae9c0"}}, &(0x7f0000000300)={0x0, 0x3, 0x4b, @string={0x4b, 0x3, "5dffcf7d4b78149e326074836b4b1d9f94400efbb9668be145a91b2605e5869bbbfb2601111793981357160e9e315e89335f52de036b5f0428f21ca9127c6d000a45362e07d22d2523"}}}, &(0x7f00000002c0)={0x34, &(0x7f0000000140)={0x40, 0x17}, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x1}, 0x0, &(0x7f0000000240)={0x40, 0xa0, 0x4, 0x4a}, &(0x7f0000000280)={0xc0, 0xa2, 0x2f, "e33deae47a7ecf973d1a10cc84f988b66433b13c0e259ba947dccf30fa8492122a8c46861c07b253af07398a070030"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000003c0)={0x14, &(0x7f00000000c0)={0x20, 0x7, 0x2, {0x2, 0x2b}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000400)={0x20, 0x3a, 0x66, "3b68e085cc01796c5e68d0a6fdea4f66c7fc70b6e417ed43f5b96f2a229cacd87dc667f097edd32d1b21e548cbc1d2345cb30a8877c4ee65a9271c5c74d739fae51d4a12796fee6ea8657b5d3e4cda373231b6a67c8c2cfa4cd67353844dcf064f89adb516a0"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000500)={0xc0, 0x5, 0x6, "56eeb425ba47"}, &(0x7f0000000540)}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2m20.208831317s ago: executing program 4 (id=58): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000380)={0x2a, 0x3, 0x4001}, 0xc) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="126e05fd00000000000001090224000100000000090400000503465526a29119a38f11700002000921000000012205000905810308000024ff"], 0x0) r2 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) process_mrelease(r3, 0x700000000000000) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f00000003c0)={0x40, 0xd, 0x5, {0x5, 0x11, "42a009"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4028084}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x4, {0xa, 0x4e24, 0x3, @mcast1, 0x6}}}, 0x32) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0x2a, 0x2, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x1000002, 0x4) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$kcm(r8, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) sendmsg(r8, &(0x7f0000000200)={&(0x7f0000000000)=@ieee802154={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 2m19.822810669s ago: executing program 4 (id=60): r0 = userfaultfd(0x80001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, 0x0) r1 = dup3(r0, r0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket(0x10, 0x3, 0x9) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r9, r10, 0x0, 0x7fffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001580), 0xe9, 0x0, &(0x7f0000001400)="2109f80f4d65ab3f894d176a54832f8a0f4bab0066f14d9f8f2d26343418e457f8db9195a96f501cc2dcb98bf59587f1e06654495ea97f447a44bccbeaf6028efc4c957edd3ae19a9095fe7ccadd8ca4fbe48c26118827fb095dbfdaa33ffe1bb1ad2e9516a04ba4a3052d969b75ebdaf5739a8a045713351a646bd5fc31767aeb7c6f41d750b3ac24a334df63fcb9e96ebde91bc9163b7a4560fe30862ba3b33a40ce367223a42e89b32e025b3ccaa0d780d39ee81c30c014e43f38440367ebd9a7e98177a40780ecaa5b38dc37f1355e7e188cd26301ad22e547b1e1309c2c17e08111a1d1d8585b"}) 2m19.261614467s ago: executing program 32 (id=60): r0 = userfaultfd(0x80001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, 0x0) r1 = dup3(r0, r0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket(0x10, 0x3, 0x9) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r9, r10, 0x0, 0x7fffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001580), 0xe9, 0x0, &(0x7f0000001400)="2109f80f4d65ab3f894d176a54832f8a0f4bab0066f14d9f8f2d26343418e457f8db9195a96f501cc2dcb98bf59587f1e06654495ea97f447a44bccbeaf6028efc4c957edd3ae19a9095fe7ccadd8ca4fbe48c26118827fb095dbfdaa33ffe1bb1ad2e9516a04ba4a3052d969b75ebdaf5739a8a045713351a646bd5fc31767aeb7c6f41d750b3ac24a334df63fcb9e96ebde91bc9163b7a4560fe30862ba3b33a40ce367223a42e89b32e025b3ccaa0d780d39ee81c30c014e43f38440367ebd9a7e98177a40780ecaa5b38dc37f1355e7e188cd26301ad22e547b1e1309c2c17e08111a1d1d8585b"}) 8.783743344s ago: executing program 5 (id=572): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x6, "cc17fc47a9ae"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="4010050000008000000fad"], 0x0, 0x0, 0x0, 0x0}) 4.994719538s ago: executing program 2 (id=591): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) r1 = socket$inet6(0xa, 0x5, 0x0) (async) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_0\x00', 0x10) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0xfffffff9}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_macvtap\x00', 0x10) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) (async) listen(r2, 0x5b00) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x0, 0x1cb}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) r6 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000c00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r6, &(0x7f0000000e40)={0x2c, &(0x7f0000000c40)={0x20, 0x5, 0x92, {0x92, 0x10, "229292b857f57437b485baaa8be0d266e18a3d472ac71cb348092b9310a62580be999c04e7a2340b17e85bff4a999d959053194624c6c5725d2a0f0d0f2c47a0e8570869218b1f8f07eb70831b4c40087da8a8f4b690376c8033517ab604d1b151002716c3c34836d3742251e67a068882d70904ae5bd3fad0ec7fb2e78a25a8e1aee6da02e71be80d2c274345e0ac6b"}}, &(0x7f0000000d00)={0x0, 0x3, 0x6d, @string={0x6d, 0x3, "c110573772882134b9898b6d3f0f4eff04a93ac3c0ae846cae20aaa313e02aa5389ae4226d7390b3e8669d4d23966be0f1b4fa342affce600e05d2835b7e6fb52bc9364031e999222800eea06f1356208a62fcbb36c9b66a0358f4806b034dbf2b50306c78cad19c412b4d"}}, &(0x7f0000000d80)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x0, 0x3}]}}, &(0x7f0000000dc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x7f, 0x1, "aec781dc", "1f94161f"}}, &(0x7f0000000e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xef, 0x8, 0x1, 0xb1, 0x5, 0x4b7, 0x1}}}, &(0x7f0000001340)={0x84, &(0x7f0000000e80)={0x20, 0x1, 0xf7, "cd1b9356e44a82e073603bad0fa249b1b7148bed9dd499ceb72fbf880672caf0b34b2e138fc1b96ba2fbb3f0db2399208df8ea45c84e1e07eab40b708bb871f4aff95f776fb3ca222d3288c2e50e8a9065266d6a0502374927932f34ff41d43c461a3def180d94e3a9c6ea797f05f6aa7614a6876e559cc4ec8b75302e8db3ea40f53c2b57e18bc2359d1d1ce89f61bc12b6ae203be3881be9df06de05780ff37d12db726489c1387693c842be01bda12b7032836c410620f7bfeb43282e35be3a0053e2329993f40b5e5f73e3506815da9119c8af06ab5e3b737cc6133449471bbc30038bbdc4fdc69bb15b7d0e989b4dd49dd1476fd7"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000001040)={0x20, 0x0, 0x8, {0x400, 0x10, [0xf0]}}, &(0x7f0000001080)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000010c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000001100)={0x40, 0xb, 0x2, "8413"}, &(0x7f0000001140)={0x40, 0xf, 0x2, 0x101}, &(0x7f0000001180)={0x40, 0x13, 0x6, @remote}, &(0x7f00000011c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000001200)={0x40, 0x19, 0x2, "23d9"}, &(0x7f0000001240)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001280)={0x40, 0x1c, 0x1}, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001300)={0x40, 0x21, 0x1, 0x3}}) io_uring_enter(r3, 0x47ba, 0xa25d, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_usb_connect$cdc_ecm(0x2, 0x77, &(0x7f0000003e00)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109026500010101200409040005030206000a052407000005"], 0x0) (async) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x105000, 0x0) write$dsp(r7, &(0x7f00000001c0)="c7154bd9b82a6fba0344a2fef497aa210ff976026d06ef2506386f1d0e641d6c916494", 0x23) (async) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) (async) write$binfmt_aout(r9, &(0x7f00000003c0)={{0xcc, 0x7, 0x0, 0x2eb, 0x13a, 0x2, 0x16c, 0xb}, "17bf340a36570313", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x828) (async) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000280)={0x0, @sdr={0x32315559, 0x4}}) 4.899388104s ago: executing program 5 (id=592): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000bc0)={0x3c8, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x5a, 0x3, "879c89d470af2a0b141432fb118dc38a227a00c827aa0d7b566f5a1567fbf8a14f7df139010bfe2ae1ac31aa3d6bea66cb6b4357039e070862337dff02d3591b6766cd552c14263d88b435730155807bcb525736e075"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1000000}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x742}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4401}]}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcd0}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @remote, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xba0f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6051}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x4800}, 0x8801) recvmmsg$unix(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/184, 0xb8}, {&(0x7f0000000380)=""/242, 0xf2}, {&(0x7f0000001d40)=""/4087, 0xff7}], 0x3}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 4.897256881s ago: executing program 2 (id=593): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r3 = socket$unix(0x1, 0x3, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) syz_usb_disconnect(r0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = epoll_create(0x1) r6 = epoll_create1(0x0) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)) close(0x4) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r8, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x0, 0x0) 4.710684164s ago: executing program 5 (id=595): arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, 0x0) mmap(&(0x7f0000737000/0x1000)=nil, 0x1000, 0xb635773f07ebbee4, 0x11, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0001000001, 0xfa11, 0xd}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00400095"], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xff4f, 0xffffffffffffff4f, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xeb) sendmmsg$alg(r3, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000001c00)="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", 0xffe}, {&(0x7f00000004c0)="2013d207c5b00fd12c1b4f666d91fa3095e7525d7b38e15402692726beff1160019c6c0a51c9d5c3", 0x28}], 0x2, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000010}], 0x1, 0x20049001) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b80)=""/4095, 0xfff}, {&(0x7f00000002c0)=""/39, 0x27}], 0x2}, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r7, @ANYBLOB="0000000200000000280012000c000100766574"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 4.550442964s ago: executing program 3 (id=597): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) (rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) (async, rerun: 32) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000380)=0x3) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f0000000500), 0x1, 0x0, 0x49}}, {{&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)="804bad5ae95a62a86731135a0d22744ba2b30e9771df9f8888174f00b802f1ad4c7b7265a4a2a25316f0f9676cf0792cd06202a731744ce25bcfe4c05ce7e467e5d2eee38c2c28dfe48ab4d19408191fb784a386a20b828a94dc106b5958887b7f7c605262301950d594f10535d52bbffa56fba7521f434a72c1364b"}, {&(0x7f0000000140)="e219b2223472535c1ce1a903c4bc28261a49ac5253de2b54d5906c60cc0bf66a52300444460fd6df9091637bcdf2a34b2abd51430afe1a114b9f607427c50aa8887d903106101249af8015d436660e984012929d8522c0d385c0259926c1bd5a9e39128a22c3368a0b931dea509d7a202dfca4fef7b3caad6ee21b07a31dad79b6563d2563b6746160f97603c8c9db6f53b7037bf643ee120c71a2fea3f10b353432a06ef0e12f5c69afed926a01d24dfc4e476aa06577c1e6ed6afc700c87fd3fbb3389438619dc8c5ace7166987ec49338f142"}, {&(0x7f0000000240)="a1e0aeb7fc8dcfbd9cb2554d1e777072a6b9c785d82c009cdf20437960a0b8802acc47537ac7f8e3f0c1804fee9355e2cab6bc01a163a4952112bfe77131e71d28a50c44beff242e1c992f250671f6b93f87cbf89aad01e09febbf2b6400bfd28268aa85a182e9a212239422572eaf9e2a965a97cbfdc0308ef8bf4f1dbc482c158864e60da8c3cd33b8638cac7f8f983c08a859108c6ecf6512b3e223e07ab6b6f73e34c0c001b96328186efc5188e9c134c183fa97ddd900c25d37a69966efd1f7d036102b6e4c96d3c4405f387aed817579e628"}, {&(0x7f0000000340)="36abd00405113ae48e19b43efb0642a50259ead4886dac160116be8ed491c827ee12f2908bec63d96696daa604ce9cd1fb44dfe54c2ca7f77d0912c1120aaf43093f6663e4905610fb2ed11685912ef14a2c9bb5df04435ad341bc41bae7b77210c12382f62007a1c52585a1c2fd4b88fc06e5adcafd5e0ffd0c2fc01652083d4dd31ed3aba87d7943d364db64f3068a5b1f681f7dc730d92258fc9c8ad65714610c7990caa94df2e99c5791e3f14e9513a8abe283900fa548f63167aacad1e9e87c64b5df8baae36ecd7408251b83d9219617f72933b65a47475ab902b2634de4207a5b79fb6b9a34609536abbfa186627e528e3d"}, {&(0x7f00000005c0)="9f510da56c7639078ca86661c581f94d72429b130de99a169370bd5a27c848c4f022379f8e998162d2fffde8cb3c375984e431c532f23f41de444f17f44260c43a600cde6fcda90c24b2475bdc8f1ab904efac11640315e4773ce0d454c6bfb279aa1c638187637cee99730556447c0440c1abb9b2c76eb5b1ccf4adc67c39e42d20f3f7075a7c0f1b34f828fb5fd3fff0abc42c4de510a5f0a3213c4a1c1a24320b593c086490e6aa9e99c8c035475a"}, {&(0x7f0000000680)="776383b948d6e15c68231f8c18a8a69ef8f487876fa7d28f1d146bad384a543bf067cff8ed8318a26a27d644e96b39c50eb627fb23c5e1c17bf7e80539c2f1cdfb3ceb5476707943d189289a96308ff860346cf0307f22ce704b86e3c23804381b4e30446dc0f03413e0551a36551a9bab9f7cb9ff294752e13ba17fffbb2e56f7609053e48beb6dfa395326f98e46672b5d10cc40043b7bf6b15b3232bc0b961c09de1a3fdfe8f2a793567d"}, {&(0x7f0000000440)="d5d4ed1ff84c904840e5e68eaa4ecc2ee8186ac32c66d5d86dfc73025b7d1afe50804a7aee5dc7a35d80992956a07a07c7f8c5a42b7753fa1a4454a2575008026cd636fc2919e4560705cda12c15530322decd3756da12455478cd03901b9c61ac675f1bf5ca09fa6453882bc0513d2d4760f63f1084768d7f5a1b727b"}, {&(0x7f0000000500)="155143700c46c1a1eb4d13a54f87bdd0152a01bcb256422d013f4328c22892bf8d58d29400b583e9090d7bd71a83328820dc52820103d82a0552005a2b2cb96a6ce3e520192cea24a6149e8b398803c922c1c62356db96403e7b14f1fcc64716e858aac3dd37040646e6f6a5ee5b5a237c13ebff972ebe57cab9"}, {&(0x7f0000000740)="d183c9b0039343e5a6e846"}], 0x0, &(0x7f0000000840)=[@ip_tos_int={{0x0, 0x0, 0x1, 0x1}}, @ip_retopts={{0x0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x0, 0x41, 0x1, 0x3, [{@rand_addr=0x64010101, 0x4}, {@local, 0xece0}]}, @noop, @timestamp_addr={0x44, 0x0, 0xa8, 0x1, 0x2, [{@local, 0x81}]}]}}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x8}}]}}, {{&(0x7f00000008c0)={0x2, 0x4e22, @multicast1}, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000900)="4baabd4908d0dd471b5e2fcdd1a696fea72ad0c20fee7231244fba724e2bb96eb57ab9ee726b5609a662375315fce9e2de36692dc98193160c1d8f92a25cf5dbf6c2758a8367933f36f1db8bdcd797df522d2c07efc329d0811564daf2a9d5684819bdae927681f45bd3b2de0d9d448c8fcdeae275a4c2c9d8d9e9c2461bbc58bc36641a2b"}, {&(0x7f00000009c0)="122444ff394db047d7d00e903b1fea5384b17fdc"}, {&(0x7f0000000fc0)="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"}, {&(0x7f0000000a00)="1cb923b9f33690a1c4e0129529712233a296e1ae7478d6b87206b5e5ef8f229977287d918f099b87d36c4274594bc0e21d9928d97c2841bcb219d0fc4e087c067d51fe02351fc47898d3bb4f745f7756bb3be8fb9d5e55a56d915c7fb837ec654935679ff6c03d4295aa365644836653604633ca7dd6cd461976971a34ec0fd39d9b0d0a419c00bf2f4b06767c5abccb141a5a1d0a1a7d1370b4463e7fe4b56ff29ef5d28399b62cc7d1"}, {&(0x7f0000000ac0)="c4599596efc084a617708e6eab837d4c2cfec865b56f2c996e1cf88f85110dd1837e5c00242e7a0740600e82ad7964bf3c75abdf9af1f8d1b322643c707384bafcd0019b8e221cdbe5fb652eca52125febf79d9e1d4110123f6f8bf237b6da61afcb5c050fdd1f717a83f74b6220738d779bd6927e0a5c9b68"}], 0x0, &(0x7f0000000bc0)=[@ip_tos_u8]}}], 0x2, 0x4004) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.301846235s ago: executing program 3 (id=600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf254400000008000300", @ANYRES32, @ANYBLOB="0800a100050000000800ae083e925000080026001b1700000a0018000303030303030000"], 0x40}, 0x1, 0x0, 0x0, 0x4048880}, 0x0) 4.153054686s ago: executing program 3 (id=601): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315f9b10102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000000)=@ethtool_gfeatures}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) mq_open(&(0x7f0000000040)='wlan0\x00', 0x800, 0x100, &(0x7f00000000c0)={0xa, 0x0, 0x7, 0x2}) 3.79372464s ago: executing program 0 (id=604): openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.681595315s ago: executing program 0 (id=606): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000600)={0xf}, 0x1) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe00000100000000", @ANYRES64], 0x24}}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xc0) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x3d, 0x8a, 0x8, 0x2770, 0x9120, 0x6c77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0xb0, 0xe2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@dellink={0x28, 0x11, 0x1, 0x70bd2b, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x408}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) (async, rerun: 64) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000000)={0xc, r2}) (rerun: 64) ioprio_set$pid(0x1, 0xffffffffffffffff, 0x4004) (async) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f00000003c0)={0x28, 0x2, r2, 0x0, &(0x7f0000001300)="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", 0x1000, 0x800000008000}) 3.38255614s ago: executing program 1 (id=607): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r6, 0x3516, 0xc2de, 0x8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000001}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r14 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r11, 0x4, &(0x7f0000000300)=r14, 0x1) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r11, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r11, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r14, {0x4}}, './file0\x00'}) 3.38014788s ago: executing program 5 (id=608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x8340}) signalfd(r2, &(0x7f0000000000)={[0x2]}, 0x8) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe88"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.14235853s ago: executing program 5 (id=609): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r1], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000001880)=[{&(0x7f00000005c0)='~', 0x1}], 0x1) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xf, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000001980)) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r6 = socket(0xb, 0x3, 0x2) sendto(r0, &(0x7f0000000600)="f614a88b711dd0944a4d8d551ffa5104a403a4fe70c10faa2703606fb9f1d7265b56936da7310dccc69dc2c9109524af8700136e6003963b3976c81183da05c3409e412a0311c3fa95c2152ebe71a7e179284cfe578774874c0a5862aafab0115c2b61acebe3aec5b7c33af2fb73b2487710fa7feaacddd57acdff9e03425951eeb7f030ae0e36d2aeaba58041ea6729a674e94a804b55227aee1dc9d2662df2fb", 0xa1, 0x50, &(0x7f0000000140)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x80) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080), 0x4) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = syz_io_uring_setup(0x1238, &(0x7f0000002840)={0x0, 0x80fb, 0x80, 0xffffffff, 0xab9}, &(0x7f0000000940)=0x0, &(0x7f0000000980)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000580)=@IORING_OP_SENDMSG={0x9, 0x67, 0x0, r7, 0x0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)="86183a609a367fc7d1e1be953361d8bbca64ce9b3d4e40e70e0a427385a7cd95194d0ffd1f20ac8279a58bf2e7a73485bf6c7e1fc3f35b0ee1c5496efd8852701ac4474c013264d62f8f4d2d1d68b668285c4450a00746522667cb1ddf57b562ed32d846eb340178b3ef75016855acc8e1fb8e5c8d25cbdb3b7b5e471807d86a42a7ee8574fbb43bdbecc862cd6df8944cf188a39d0ff1bbc1d3b7112e074b7f196e3bf23a4d3be15b02", 0xaa}, {&(0x7f0000000400)="a1a65a457a33f9f81b72d4eb33487363aa7778852bb73b1aea6fa9bdc43d3000ce12a2791b75e678d0ff179b83bb4e64836ac7c1f905de6700e82b4b113e17ce75648239edfa5aeb2f6b21679d4db7cf761c003d715acb533d7ceb27cd2178d6b4510064ea662d3ae7085dce8debf5773b92ef7c20419d59e41f6605deed1baa074756352cb78ad65a2a882726820b871e514bdd835d695aa3cccadff44e888c5e5c1dd06c9eea0deaa645776394dbc1a1487c4fd11579dbb2c54ce56bdf9ad2b6bfb615baacbdf4d81217e7ff8aa498307d1dcda80f9717745ab42be90000000000", 0xe2}, {&(0x7f0000000300)="636d4139aaf48f8ad01882dcf5746149d7f8fb6e1e0a117c77d3dfaef1ebcf1ab4bd7f59246ec9bb0638570061f0ee2c4c347b5d4195b675853749729dffe94e0004333e797c00aaa6f756cdb469596389713c8caef6c1d7cb1ba4f92357afbf0e6aea3539", 0x65}, {&(0x7f0000000500)="653f8bf62c01b713524ce5bc027580995fccb4bc0cc10fd36d5cd097226477053b4c97e9b48bdf4096ed152344cc53b6468add6d4fff2b439537c918776565988f6e3a98e5", 0x45}, {&(0x7f00000028c0)="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", 0x100b}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000000140)="ff39695c1342d9614060588f626cfaf8fd749f2518523b989bb0486690371256ea7d1f29fba557a84efe", 0x2a}, {&(0x7f0000000780)="66b7dce6a1113cd5c7fc58d34aa9e593763d4cfa56b3ea804115a770da937d24a2e8c7b00f25bc29d352d80188b84cbfddd7487c976318abac7d9518aeada0f2133039bebf036010ad75b9acc053bb22304b10b6a3172d28c8ff014d71a5a34eb7ab78da5606aa2da258f4f753199a3b9a826f3b66bada408a9d3a24e29c7a682dd791e5d1c2a08731bf96dc30c885061b5c9bab7aec3897cc19497f1202003569cbf4574234cae346d7aaebeb4c1e2f4a72458aaaf707ce56d8b9907ccda32a4d000000", 0xc4}, {&(0x7f0000000380)="34ce7d5bfb00e65adec4a9f1e2ed9d085958e5ad68df8dc98a16bc52a83708efad8d617e957475d974d87867923373279a19bc3e11617effc8fd1250b2c78b9a30e708c156bcd861de33019c9fdc228ca0893f80d822c025b31d2f687e2e85ecde", 0x61}], 0x9, &(0x7f0000000880)=[{0xa0, 0x88, 0x7, "d5e9fde0856b8bc7a486de0c4785152d32b5bf6f38e45016cd5d645940cd30a5365868881ea7d471a48279676856d8d6a27be0003cb1528984c0ccbfb918b29fe8c42d12409dd7897391dc541be10bb6ab3c4754a4e81a98f8cc0e577c7cd6e783a06e35d3218e2b12bc89c22d9d0c4a46e63626fa401da38eb105683a7f8f0e021147b8d61dc33c686a"}], 0xa0}, 0x0, 0x2000c0f0, 0x1}) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002700), 0x2, 0x0) read$FUSE(r11, &(0x7f00000039c0)={0x2020}, 0x2020) io_uring_enter(r8, 0x47bc, 0x0, 0x0, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r12, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB='\x00\x00'], 0x14}}, 0x0) write(r6, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800020000000000", 0x24) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000240)=0xff) write$binfmt_register(r5, &(0x7f0000000400)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x8, 0x3a, 'L%', 0x3a, '\x8d\xa5\x12O\x9dv\xe0\x8f\xd5\x89H@\x8e\x1f\xf8\xc8\x05\xc9\xa5&i,\xfc\x9a@\xb9\xee\xd9\x94,\xcd\xef\b\xa3\x0f\x97j\xdb)/\xed`p\x16\xe9\x9c\xf1T\xba\x11\xff\x87\x88m\x95\f\x8e:\xec\x81{\x90\x183\x1d\xd2\xf0H\xfd0A\xd1\'\xef\xbd\x15\xdc\xb9+\xee\xb2\x7f\xff\xc7\xa2rO]Ux\xd7Uyt\x80\xb61\xe7\xa2f\v\xd9\x82\b\xadX8\xab\x9a\xc2fZF\x9e\xb2\x11E\xe3j\xc5\xf0J?\'\xe9\x8a\x8c\xd1,\xa7\xbc\xf7', 0x3a, './file0', 0x3a, [0x46, 0x50]}, 0xaf) 2.181580746s ago: executing program 1 (id=610): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffff}}, 0x24) r1 = syz_io_uring_setup(0x106, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) syz_emit_ethernet(0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff000000000000886411000000008657"], 0x0) sendmsg$inet(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x480d0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.863530655s ago: executing program 1 (id=611): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf254400000008000300", @ANYRES32=r1, @ANYBLOB="0800a100050000000800ae083e925000080026001b1700000a0018000303030303030000"], 0x40}, 0x1, 0x0, 0x0, 0x4048880}, 0x0) 1.813638524s ago: executing program 1 (id=612): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@empty, 0x59eda7cd4ea6ed12, 0x0, 0x30, 0x0, [{@multicast1}, {@empty}, {@broadcast}]}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="11900300000000001c00128009000100626f6e64000000000c0002800800130001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000000)="dd23f9e9597f43c9a9239656d50ae528", 0x10, 0x0, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000080)={0x2812, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x3, 0x1, 0x8, 0x1}, {0x200, 0xf1, 0xfd, 0xffffff59}, {0x9, 0x4, 0xa6}, {0xf000, 0x0, 0x4e, 0x7}, {0x3, 0x3, 0x7, 0x4}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0x10, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x2}}}]}, 0x3c}}, 0x20000000) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r13, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x48c, 0x0, 0x7fffffffffffffff}]}) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r12, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r12, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008001) 1.634091651s ago: executing program 1 (id=613): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="b9800000c035000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555515c4c1b1d24900660f60c50f2055660fae3ab8000001000f23d80f21f835400000e00f23f8edc744240000000080c7442402f8ff0000c7442406000000000f01d1", 0x66}], 0x1, 0x44, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x82, 0x0, 0x0) inotify_init() (async) inotify_init() openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x6}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x136, 0x6, 0x8, 0x6, 0x3, 0x8, 0x4, 0x10001, 0x8001, 0x2, 0x1, 0x10, 0xffff, 0xa9f, 0xfffffc00, 0x7, 0x80, 0x0, 0x2, 0x4ac, 0x200, 0x5, 0x7, 0x200, 0x9, 0x7fffffff, 0x0, 0xf, 0x2dacdd9d, 0x3ff, 0xd, 0x7e6f, 0xfff, 0x1, 0x69b, 0x401, 0x2, 0x8, 0x0, 0x2, 0x7, 0x5f, 0x3, 0x9, 0x0, 0x21c7d591, 0x9, 0x40, 0xc, 0x1000, 0xfffffff9, 0x1, 0x1, 0x10, 0x7, 0x7fff, 0x8, 0x8, 0x9, 0x4, 0xc, 0x9, 0x5, 0x6, 0x5, 0xbf25, 0x1, 0x8000, 0x8, 0x8, 0x80, 0x0, 0xa0000, 0x8, 0x7fc, 0x3, 0x6, 0x1000, 0x7, 0x700, 0x3, 0x640c, 0x21, 0xffffff0f, 0xb, 0x40, 0x0, 0x9, 0xef26, 0x7f, 0x8000, 0x8, 0x10000, 0x8, 0x6, 0x0, 0xe3, 0x6, 0x8, 0x7fff, 0x7, 0x9da4, 0x7fff, 0x7533, 0x82, 0x0, 0x10001, 0x923, 0x8, 0x2, 0x7fffffff, 0xb, 0x3, 0x8, 0x3, 0x9ec8, 0xfffff803, 0x101, 0xd, 0x3ff, 0x8708, 0x7a7a, 0x8, 0x6, 0x89, 0xd81, 0x3b, 0x7ff, 0x10, 0x200, 0xc1, 0x8, 0x5, 0x6, 0x990, 0x7fffffff, 0x10, 0x6, 0x2, 0x80000000, 0x40, 0xfff, 0x800, 0x1, 0x9, 0x4, 0x8, 0x7fff, 0x8001, 0x6, 0xe0f4, 0x5, 0x40, 0xfffffe00, 0xf3dd, 0x5, 0x0, 0x88a7, 0x2cc, 0x8c6a, 0x9, 0x3ff, 0x4, 0x0, 0x158c000, 0xc, 0x9bd, 0x4, 0x8, 0x6, 0x4, 0x9, 0x42d, 0xffff0001, 0xffffff81, 0x0, 0xb, 0x373, 0x401, 0x7fa, 0x5, 0x8d4, 0x3, 0x2, 0x800, 0x6, 0x4, 0x7f, 0x7fff, 0x6, 0x2, 0x7846, 0x2, 0x100, 0xd, 0x2, 0x4, 0x7fffffff, 0x3, 0xec, 0x6, 0x1, 0xf0, 0x6, 0x586, 0x7ee7, 0x81, 0x200, 0x8001, 0x7, 0x0, 0x1, 0x1000, 0xc1f5, 0xd2, 0x4, 0x8, 0x2, 0xffffffff, 0x5, 0x8f, 0x1, 0x5, 0x9, 0x4, 0x1ff, 0x10000, 0x10, 0x9f3, 0x8, 0x5, 0x6, 0x7fffffff, 0x5, 0x9, 0x0, 0xc0e, 0x7, 0x3, 0x3, 0x50602f54, 0x5, 0x3, 0x5, 0x4, 0x7, 0x5, 0x200, 0x5, 0xff, 0x6, 0x7fff, 0x0, 0xf]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r10, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xdd}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r11 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x800, 0x1, 0x40000333}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x10c, &(0x7f00000000c0)=0xfffffffc, 0x0, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x101040, 0x0) (async) r14 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x101040, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r14) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r11, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.632157272s ago: executing program 2 (id=614): unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000040)={0x2, 0xf3}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000080)={0x2, 0x3}, 0x2) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000440)=""/119, 0x77}, {&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000600)=""/157, 0x9d}, {&(0x7f00000006c0)=""/124, 0x7c}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000900)=""/176, 0xb0}], 0x7, &(0x7f0000000a40)=""/102, 0x66}, 0x1}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x940d, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000180)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @loopback, 0x15, 0x3, 'sh\x00', 0x0, 0x0, 0x70}, 0x2c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$media(&(0x7f00000000c0), 0x4, 0x8002) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a000100feffffff00010000e0000002fffc00000000000000000000fc01000030b8d7b101ee59b4000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000100000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000b007f000000"], 0x140}}, 0x844) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0xc, 0xfffffffd}, {@loopback, 0x4e20, 0x10000, 0xc, 0x9}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000b80)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.535054824s ago: executing program 3 (id=615): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x2}) (async) r1 = gettid() (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000080)="99", 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/time\x00') (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000003440)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000180)="f221f7", 0x3}], 0x1}}], 0x1, 0x0) shutdown(r5, 0x1) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x5, 0x8, 0x7, 0x4, 0xd}, 0x14) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@gettaction={0x20, 0x5a, 0x1, 0x470bd2c, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0xd4) (async, rerun: 64) connect$can_bcm(r3, &(0x7f0000000200), 0x10) (async, rerun: 64) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async, rerun: 64) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x5, 0x32f, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "54d53db8fc80bb00"}}, 0x48}}, 0x0) (async, rerun: 64) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000000)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x0, 0x0) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async, rerun: 64) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.409053617s ago: executing program 3 (id=616): r0 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x2e, 0x0, &(0x7f00000064c0)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.271543467s ago: executing program 1 (id=617): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000040)=0x6, 0x4) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, &(0x7f0000000240)={0x62bbd6896264b57a, 0xc, 0xe4, {0xe4, 0x2d, "65c84b8264e6090ee0034bfa525e628525f786134e8439a11bcc1634a855762e68b0fef5038f1c66953a3c7bb46b7dd81e189c20360d3c2498541528259368e55905582fcf5be3b253deed0c41abc2f37618effc37301cc88f4b8c5dfc45352311e8617a62aeb33612ac857eb2f23040a1cec140999fea1377b1a18af1ffb09bfe4a45931178ca70fa4ada8bfca7c0093dae4a8f95d36cca9ccd6e6e0f2910b824610df41aaea9a99fccd15afeb3018d987511eb6fe7af310c7d2e816648b2393226e962c891a2dd79c00736545cfd129451701087da78278ae1232cef602333be5a"}}, &(0x7f0000000340)={0x0, 0x3, 0xb1, @string={0xb1, 0x3, "e61bfaf654c408450f788cee07d937959aed3b3814083b3047c12c32b154f32ed6096375d67e14df919227d9588d4774b279eff5e39b5f685967cc1b2f548c1be1d26e1220c6c2f173adc98bdf2143560644990bda1b588d840907cc159aa2718be84f44b5da1614b48bfdc4130eb836a7859a8a1b897de9fec82e3246ec7a0d9f8a5191a19edfceba650de8256199994445ddac0eff7528ae6e2ae72f56fb13fd47bfa4283677c9d879b36fb2fb3d"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000400)={0x0, 0xb, 0xd2, "0939cab8a011a3e48837c14d7e283b58b87ed7f4a1346d2be450b0a6215811330fddc0f20834c79d692839bae98dc699af5b3d4c4d585f5f04dfdcaf2a2110fcc4d0f26e2282ed103a4fc3311c7b63bc26d9c61a0030b26bf57a04f93d5ce78fc2455fcb62c39d19815e24fb65a0092eaa16e0996679641a5ec93f8906c108b3a2413e3e20d79d6176414f851b0f8694e4648ab6054dbb24a605a3df4a2de252a62096716e95ef1c07a8b24026009a904bccc6337f5b0cdb597bcf06797dd67f28f917c717abd195dc79ec020ef54f4181cb"}, &(0x7f0000000040)={0x0, 0xa, 0x1, 0xf0}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x0, 0x5, {0x3, '\x00/~'}}, &(0x7f00000005c0)={0x20, 0x1, 0x1, 0x7f}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, [{0xf1, &(0x7f0000000140)=@string={0xf1, 0x3, "c4d247ac2d7c3c3d3cd4b81a56ef43dd83c2c1451441e2888542fb00c4e737ea910eca008880c2357d2e88186d156274123448f287ab85ca28ddb4256d682c1edd0f84dda470de26526aed29bfaa34e4344707171ac9b1236e7017f6aa8abd45f78acd5f13f5b1f31fca79bdfdf1500a5902ba1f3ba7d27136539373c5f875bbaa7be59efca887522c0e7cab54bf6a94aa5b622e1623d3d0f947a461188f00348f499770ff253ff1f74d6e03d33d8593cc29afde49491cc03558480177658ba638a35ab6e8f3c0752730758bc8e8b1f7ac252472805eb326b2b61ec7c8343629e96be9b694e4dd1c58b934881a4174"}}, {0x75, &(0x7f00000000c0)=@string={0x75, 0x3, "c47f98a8572bfe1e3cb0f1108a6a0e7460325c3435d2501d5426c023a968853f61b0d993b720cb7478aa7756a6b2f2fe199ba1c2110d0ae28da96b0ff197a10d0af6e2a724a8413d96a73152460a911a9bfd7f60dbe02c40c7eadd03d19da0a3220630e9b378796b644fc4b6ef9fb1f0804ba5"}}]}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x4, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000740)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 827.784046ms ago: executing program 3 (id=618): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000680)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000300)=""/220, 0xdc}, 0x1000}, {{&(0x7f0000000140)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/209, 0xd1}, {&(0x7f0000000400)=""/5, 0x5}], 0x2, &(0x7f0000000600)=""/109, 0x6d}, 0xb}], 0x2, 0x61, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) shutdown(r2, 0x0) (async) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400b04000000ec"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400b04000000ec"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="6d36a98590c971e4006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="6d36a98590c971e4006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect$uac1(0x3, 0xb9, &(0x7f0000000700)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x0, 0x80, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff9, 0xa}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0xc, 0x6, "dace7e0c60"}, @processing_unit={0x8, 0x24, 0x7, 0x4, 0x4, 0xf7, 'F'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x2, 0x6, 0x0, "c3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x59, 0x4, 0xd5, {0x7, 0x25, 0x1, 0xc0, 0x3, 0x886}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x1, 0x7, 0x1, "6c94e2"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x84, 0x3, 0x1, 0x80, "", "1962"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x89, 0x4}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x3, 0x3, 0xd, 0x9, "7ceaa3", "c9a554"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x10, {0x7, 0x25, 0x1, 0x0, 0x8, 0xa}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x8, 0xed, 0x3, 0x10, 0x3}, 0x35, &(0x7f00000002c0)={0x5, 0xf, 0x35, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0xc, 0x321}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x6, 0x8, 0x7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0xe, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x25, "fc9ca61ffb2165509f4bffac56027742"}]}, 0x7, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x406}}, {0x7a, &(0x7f0000000800)=@string={0x7a, 0x3, "f79976789999cf43620fe8baa07be390db83e42dc297dc3555f821548f41b45f7fadc2e9e67b4af71a7bc36e5ddf8fa4b0fd89708298590a95935245783ee95b43c8a12b978dd65ce6124615d0702d27ac7ff8a45fb9b280dd33759e8abd971bac7c4f5a4a5be404ba7b1352ce6f4bda7600587bceb0fdeb"}}, {0xd2, &(0x7f0000000880)=@string={0xd2, 0x3, "c3fda67837f30a23c368ea55ff5d9e34b042b4819d6db2b30c139405ab75950b51ed493407d6c32f0f9931003a1b3e6dc3ac2b43e183533b8858bdf2a3a6da7bddcf79e7a4fc83350d0546ef3dc9228e45973d58a542831c668f42e46ea7dff99f2bb9dc9a03712714a4c8ca07b5b408c5f9d4c958b1b8a119cc16a5ba83a6bfd27a4087eb93500b9935418c132b11cd6e7b53cfcb14541aac3c0fc81f7dfd54a046e734019d28932886d64ee3440f619e049f2b0b5c9143db356ad9b24159428f48d3b89a2de52b7e1291e0cadb8fbe"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x413}}]}) (async) r6 = syz_usb_connect$uac1(0x3, 0xb9, &(0x7f0000000700)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x0, 0x80, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff9, 0xa}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0xc, 0x6, "dace7e0c60"}, @processing_unit={0x8, 0x24, 0x7, 0x4, 0x4, 0xf7, 'F'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x2, 0x6, 0x0, "c3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x59, 0x4, 0xd5, {0x7, 0x25, 0x1, 0xc0, 0x3, 0x886}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x1, 0x7, 0x1, "6c94e2"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x84, 0x3, 0x1, 0x80, "", "1962"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x89, 0x4}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x3, 0x3, 0xd, 0x9, "7ceaa3", "c9a554"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x10, {0x7, 0x25, 0x1, 0x0, 0x8, 0xa}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x8, 0xed, 0x3, 0x10, 0x3}, 0x35, &(0x7f00000002c0)={0x5, 0xf, 0x35, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0xc, 0x321}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x6, 0x8, 0x7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0xe, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x25, "fc9ca61ffb2165509f4bffac56027742"}]}, 0x7, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x406}}, {0x7a, &(0x7f0000000800)=@string={0x7a, 0x3, "f79976789999cf43620fe8baa07be390db83e42dc297dc3555f821548f41b45f7fadc2e9e67b4af71a7bc36e5ddf8fa4b0fd89708298590a95935245783ee95b43c8a12b978dd65ce6124615d0702d27ac7ff8a45fb9b280dd33759e8abd971bac7c4f5a4a5be404ba7b1352ce6f4bda7600587bceb0fdeb"}}, {0xd2, &(0x7f0000000880)=@string={0xd2, 0x3, "c3fda67837f30a23c368ea55ff5d9e34b042b4819d6db2b30c139405ab75950b51ed493407d6c32f0f9931003a1b3e6dc3ac2b43e183533b8858bdf2a3a6da7bddcf79e7a4fc83350d0546ef3dc9228e45973d58a542831c668f42e46ea7dff99f2bb9dc9a03712714a4c8ca07b5b408c5f9d4c958b1b8a119cc16a5ba83a6bfd27a4087eb93500b9935418c132b11cd6e7b53cfcb14541aac3c0fc81f7dfd54a046e734019d28932886d64ee3440f619e049f2b0b5c9143db356ad9b24159428f48d3b89a2de52b7e1291e0cadb8fbe"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x413}}]}) syz_usb_control_io$uac1(r6, &(0x7f0000000c40)={0x14, &(0x7f0000000b00)={0x0, 0xe, 0xe1, {0xe1, 0x21, "68baa388b9e3d71fc62ae1ee72c82e4068650bd77fb6c88557b3f38e5f731878604f09068af519600c1b1e54a42901661307617deca10dff410b5e28810d15ed7cacf7867baef149d146fc5ae3aff70efa59242b114918e41e608ede9f70fac7e457c81387c23b16604e274881f5bbeedbd98c05d16419afa229688dea37a148de108436fbb0b175aedb543bddd8507bf7ae9a06e8bd2757a02a1ae77da75f6f4c8c76bbf5fd4e88c361bce3cf6c3293b7f8c231b3429ef6bd6314989ad053ec46817ce6b90c3a4d6eda19412ee1743d708b63d8d210f8ad62bf932e93d364"}}, &(0x7f0000000c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}}, &(0x7f0000000ec0)={0x44, &(0x7f0000000c80)={0x0, 0x9, 0x4f, "01eca17845243dcefc3f64a8cd46cfbdd4371470f24b25b1535a9f4b5f41a94f35ee7fd35f9a8d240a719222c6b8b1ebfd65e2154a1bcbcff1ddeaa33cbaa3f8dde06371076075dd8b4c7c50a8f90b"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x1a}, &(0x7f0000000d80)={0x20, 0x81, 0x3, "db8a35"}, &(0x7f0000000dc0)={0x20, 0x82, 0x1, "b6"}, &(0x7f0000000e00)={0x20, 0x83, 0x3, "5089c9"}, &(0x7f0000000e40)={0x20, 0x84, 0x2, "0fbb"}, &(0x7f0000000e80)={0x20, 0x85, 0x3, "57d664"}}) lremovexattr(0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000f40), 0x10800, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000f80)={0xc}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000f80)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f00000010c0)={0x28, 0x5, r8, 0x0, &(0x7f0000001080)="d4c4135a2544b0c1c2ef5534d4ed0b86932cde8a57797e8c949f6d3539d4b57e67b4fbca92aff599af8f0b8bdcfa631914d8b27c", 0x34, 0x80}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000200)='bridge0\x00') (async) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000200)='bridge0\x00') 742.343933ms ago: executing program 2 (id=619): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002e00), 0x400, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002e00), 0x400, 0x0) poll(&(0x7f0000003080)=[{r2, 0x40}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x10}], 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1834b7f7d900"/24], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 554.922273ms ago: executing program 2 (id=620): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x5b, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r4, 0x601, 0x80000, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r5 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x95f5, 0x10100, 0x0, 0x89}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x8000, 0x45) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xb20b351acf8c34cb, 0x42) r9 = syz_io_uring_setup(0x498, &(0x7f0000000540)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r13, 0x80386433, &(0x7f0000000200)=""/20) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r13, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', r8, 0x0, 0x1, {0x0, r12}}) io_uring_enter(r5, 0x207a98, 0x363, 0xc, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000600)={0x1, 0x0, [{0x490, 0x0, 0x3}]}) 552.701414ms ago: executing program 0 (id=621): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000b80)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 453.432257ms ago: executing program 0 (id=622): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf254400000008000300", @ANYRES32=r1, @ANYBLOB="0800a100050000000800ae083e925000080026001b1700000a0018000303030303030000"], 0x40}, 0x1, 0x0, 0x0, 0x4048880}, 0x0) 380.514225ms ago: executing program 0 (id=623): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000002200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@delchain={0x1f80, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x10, 0xe}, {0xfff3, 0x8}, {0x6, 0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x19c4, 0x2, [@TCA_CGROUP_ACT={0x19c0, 0x1, [@m_police={0x1844, 0x19, 0x0, 0x0, {{0xb}, {0x818, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x5, 0x7, 0x61e, 0x2, 0x5, 0x81, 0x6, 0x8000, 0x2, 0x0, 0x10, 0x400, 0xb, 0x6, 0x5b2, 0xa, 0x8, 0x5b6e, 0x33f9, 0x0, 0x449b459e, 0x0, 0x81, 0xe, 0x800, 0x9, 0x0, 0x0, 0x0, 0x6, 0x4, 0xff, 0x8, 0x4800000, 0x0, 0x9, 0x22, 0x58b4, 0x5, 0x8, 0xb607, 0x0, 0x7, 0x401, 0x100, 0xa4, 0x7fffffff, 0x0, 0xfffff2e1, 0x6, 0x8, 0x80000001, 0x1, 0x3, 0x2000, 0x7fff, 0x3, 0x4, 0x0, 0x70fb, 0x101, 0x9, 0x4, 0x0, 0x400, 0x8, 0xfffff800, 0x8, 0x3, 0xa, 0x9, 0xfffffc4a, 0x8, 0x9, 0x2, 0x0, 0x8, 0x9, 0x3, 0x7, 0x5, 0x3, 0x9, 0xfffffff7, 0x87a, 0x31, 0x5, 0xff, 0x8, 0x7bc, 0x6, 0x9, 0xfffffff8, 0x6, 0x7f, 0x80000001, 0xceec, 0x9, 0x7f, 0x4, 0xb, 0xfffffc00, 0x1c00, 0x5, 0xff, 0xf, 0x81, 0x100, 0x81, 0x1, 0x1, 0x9, 0xe0, 0x6, 0x1, 0x200, 0xffff8001, 0x8, 0x3, 0x3, 0xc, 0x1a3e, 0x1, 0x9, 0x0, 0x401, 0x2, 0x1000, 0x8, 0xfffffff7, 0x856, 0xffffff01, 0x7, 0xffffffff, 0xa, 0x7, 0xc8, 0x7, 0xff, 0x101, 0x8, 0x8001, 0xefb, 0xd, 0x0, 0x4, 0x80000000, 0xe, 0x8, 0x2, 0x3, 0x2, 0x401, 0x101, 0xbc, 0x5, 0x2, 0x400, 0xf91, 0x817, 0x3, 0x1, 0x7ff, 0x8, 0xf0b, 0x101, 0x4, 0x125229ca, 0x4, 0x4, 0x8, 0x3, 0x7, 0x6, 0x5, 0xffffffff, 0x7, 0x8, 0x51a4, 0xf7, 0x3, 0x6, 0x1fa, 0x1, 0x7fffffff, 0x0, 0x800, 0x8000, 0x1, 0x1000, 0x2, 0x8, 0x3, 0xfffffff3, 0x6, 0x8, 0x4, 0x4, 0x2, 0x6, 0x2, 0x10001, 0xc14, 0xfffffff7, 0x6, 0xffffff80, 0x9, 0x5, 0x2, 0x0, 0x74, 0x7, 0x3, 0xe, 0x1b, 0x5, 0xc, 0xab872d24, 0x6, 0x54, 0x401, 0xc, 0xbfc, 0x3, 0xfffffa5f, 0x77ed, 0x7, 0x101, 0x5, 0x535, 0x3, 0x0, 0x5, 0x4, 0x1531, 0x0, 0xf, 0x2, 0x6, 0x2b1, 0xc89, 0x7, 0x6, 0x0, 0xbf, 0x4, 0xfffffff9, 0x9, 0x400, 0x7fffffff, 0x96, 0xffffff7f, 0xda6, 0xd80, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3303}, @TCA_POLICE_RATE={0x404, 0x2, [0x8f9, 0xb, 0x80, 0x5, 0x8, 0x1, 0x6, 0x734, 0x9, 0x7, 0xb7, 0x3, 0x7, 0x80000001, 0xfffffff0, 0x7, 0x77, 0xffffffff, 0x5, 0xf, 0x4, 0x4, 0x10001, 0x1, 0x5, 0x9, 0x8, 0xdd5, 0x7, 0xc, 0x6, 0xfffffffc, 0xb50a, 0x9, 0x8, 0x5, 0x3c, 0x3, 0x9, 0x4, 0x1, 0x400, 0x8, 0x6b, 0x678, 0x7, 0x8, 0x6, 0xb, 0x1, 0xe, 0x5, 0x5, 0x40, 0x5, 0x5, 0x4, 0x6, 0x8, 0x5, 0x3, 0xe00a, 0x8, 0xe2, 0x0, 0x4, 0xbe4, 0x9, 0x0, 0x7, 0x3, 0x0, 0x1, 0x1, 0x2, 0xff, 0x558, 0xfff, 0x4, 0x3ff, 0x5, 0x86f7, 0x0, 0x6, 0x259ba200, 0x4c, 0x5, 0x6, 0x10, 0x6, 0x2, 0x761, 0x1, 0x2ff922c, 0xcd8, 0x80, 0x4, 0x80000001, 0x5, 0x9e8, 0x3, 0x3, 0x4, 0xfffffffa, 0x0, 0x3, 0x4, 0x9, 0xf, 0x4, 0x2, 0x4, 0xfffffff9, 0x4, 0x1, 0x1, 0x5, 0x2, 0x1, 0x4, 0xfffffffe, 0x3, 0x5, 0xfffffffb, 0x0, 0x1, 0x8, 0xffffff63, 0xff, 0xc, 0x1, 0x3, 0xb, 0x80, 0x5, 0xff, 0x1, 0x172, 0x5, 0x1b77, 0x7, 0x38, 0x3, 0xffff, 0x8000, 0x5, 0x3, 0x1, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x6, 0x4, 0x8a, 0x5, 0x100, 0x3, 0x2, 0x5b8, 0x2, 0x7, 0x8000, 0x7626, 0x9, 0x7, 0x9, 0x1000, 0x8000, 0x0, 0x4, 0x5, 0x7, 0x0, 0x6, 0x8, 0x69a, 0xf, 0x4d6, 0x0, 0x5, 0x2, 0x0, 0x101, 0x5, 0xffffffff, 0x100, 0x1, 0x4, 0x9, 0x400, 0x80000001, 0xf600000, 0x8, 0x5, 0xfffff17b, 0x3ff, 0xa9b, 0x4, 0x100, 0x4000, 0x5, 0x8, 0x10, 0x4, 0x3776, 0x8cee, 0x8464, 0xa, 0x8, 0x6, 0x10001, 0x1, 0x10, 0x1c8, 0x3, 0xa72, 0x7, 0x4, 0x3, 0x4, 0x8, 0x7, 0x0, 0xffffffe0, 0x9, 0x80000001, 0x1, 0x5, 0x8, 0x8, 0x9, 0x2, 0x6, 0x2, 0x6, 0x7, 0x0, 0x4, 0x6, 0x5ea5, 0x1078, 0x94, 0x5, 0x6, 0x5, 0x2, 0x40, 0xd, 0x4, 0x4, 0x9, 0x7f]}]]}, {0x1004, 0x6, "9a1e0e6e94ec701b2b34711e7b445d59e52bde9b37b1840e708c6552f69ca44b6a9d54d37553e74ab9d77a734a53518e279004e9ddbe71a38e2cc7e78f0be6adff7b9106bf15c6725e197ff1820c7199394b12d5e2d5e85de6adc8edc7405c3df3cc9356f5741d75f6874f5f02fe5dc8ed2bfdba19c34d13f175599413158fde91c7c1b9e731b09e39d384b0dcc3216041a960ad0feb864c251d910f7f4ca834956b64cc0955ef71463132bf00b9b274b44f6f9e64bd0a6bb09216f41fbd9ce2b963758ff39c6db05e5e55ad1ac427c1d9301c1bdbc1ce1e954464236de5cea7be48286e0130488f1560ea8e92f9ca773aa07bbfdf70df4f96b28b718021b2a12d54188c53308b448334cdfa7617d1e94af4ace3ef34dfce7cedefc57fec03cb78d4aec0927db418428b3f9369409c529cc9a02298fd785b9b54dd98e223b51daf72cdd59b874752047adeb2064c6eb55b3177495cd9e57296b3ee104fbeae6894af0a9a89173bb7d05b50bf655c592c3b0f21001f474c6d39bc5de67bec3d81cd6a435c27789c6e0670a99bc9ec171a27d13359a3cb1e28627e68be3f4d0a6e0ab8b3cddfac4103aebf86ecf0bad7ffca45b43dd00fbf4306c0e37f123ce2fdb167464fd15b22c732ba7980bed8c3056b17ee71275c1ad6bfae96e56218e7c8b00f2a2c8b0b74fff026ea461e185b636c1c45788e5b1d01e7f297cf2f0658ed5227014995bb1fba1be55d2619972b088c77cb8b8bb955a46b95a94c43d544cc171ce80b7e0dcb8055fd90adb60a9e426a4e253d75b95d4c79036c5b8345c76b2202dc5b26c3fdab8d02c452b0f385f13c7b8975ac1ec1ec9bf10b4d76a33a09d469a00c36cdf411a607d16954ad179493734a424b0e26ac4335ae465c0aa7c4ca90e3975407910644b430a83acc7b6511d153201b991c2a9acd5738a6b0991695b8d7f36f693d7d41e16febcbb0e743b91d8e96a2c80928b076ad4d2c4df8cbcb5e9ca9b1ee85b5cb5620e57d6f05cf28af2260131f6e133c8c4e8c964db754cc2dd0d5a3d7fb53aa445e72a88478287110bd3a1712579a1d82366993c74df1cfd0e84fcd7ecc63331ab29789e17b0d3dc1c665079f26d04d31da7de3b679e46b0206be28f869b403c143c4106a961dfd3337c4cd4c2b60c4b921fe9284b25d8b92bc266ebd4972ac6391fe554ebc020b9dc2bbcc0613935e197444736395b3465508dda63762442169ec8165478d85fd814c8f40169b71ff96cc515558798f694234dcc0ff26693783c91786f85c448e6bb27c95cc622d5a224d12cbf0ea2ad7dfa7efa762eb20a479805e851566f4480d0234cd55dcd43030f2bea97a187bf3c4b717aede7fda83003512aa867934daed5ebbf0fd5bbf72293c9bd2bbf1d23a6b0c49d8af8d7484e6281879ae68de26008674a1c1ff5dd112039dc0b3f283e125de9de659160559a36f27246bc61837830db95f8cc2d3241799c4d46bde2c74831197c12966598ac7b29855a7bbe5fb5a732d1b42ce296299a6a5dcf832462d275fc3d0414c1c87af003f17eee81e79d10b4b818bbf30654433c004ae3b0e290de75776ecc02f79bb3f8edb9f6b212a11e09396fbdbcdd9cab52f57a914a4a2e68cca9d0c96f06e9043825bf49ae3de8e7fa9961d4c9f6ca4df4d5c4e647f476ac7d9409278f02f1e74fe0651e226a66154530d684e8612b0c6f701bf1e3a5ee8193801c26683db0299476cc00eacef3d060225d58ac3103147911d524b44c4be84b2c382049f73a2d177684d2003a48e8b27e2f5d92842dc1fcec813c4fd96fdf3f6dedf3f403f41fdce4ea7f7aba16fbb8165f081c67b06f19c741c369276d32dbfa8e4428e2944fc1734d93a07dc96e324b72f3da3e6d95449e60cfb8712cc2f16051695786dc10c4f295520a357ea6177d627dc6a9ebd18940764e0b8ee6120d8c94eeff34b17dcbca280bb79cfef73eff79dbc0e60533823445583d72330d0088bffafde8f1d8fc69aedc711d8d9ab5917c86c5baa908ed6070e5126769ab4ee67df90f902fea2359b1851701d092593df5425d609a462e7619b04287bae3efb8b70ad70f0fe322b3e8f451cbbab785a4e9d33661aa854ef9fe55078ee241ac6024c3ec246da49ce897a96d9af773b197e25af5ec1c1b59d675278f8e24c7d3389cd157ea2c23aa4e42e080c0b9832c14bbab36f7132ffa6496623ea6f58876a5fe5cb04c6b0199b22ee51117fd48f1ebd03a3b4b766dfcfd226ac7572e8dfbcd345a3c1890ef1cdf74eea22889940d1d80474678b705fcd021bd902c8358748d0ec2d350d0ee43dffcd7c173cfc1b7f658b21130ae5dcb12881ad2ffce18734195df746d513ec8dcaff3b7f31975eec4a5a28127835c26bbfcc34f439389d7c9b64e5f30aaacfa5c5f02ccaf781e636792610f63d35bfa7e3d6277a7d05619c7fa0839e9149323e86ccbd2e395c42d4f6673e873ba62e89d55333e70348761566e58ea2f65e2bafe43ac92e066ecdb0e44eebab662627a51deefadd4376507bacf716de7d36bfbbef49791e59379f8b9cd854282e68b93c63036966f425d13483b23e8e720b796b6758131328765aad3feaa8db360e4236ed6e3215d0048652a0c1a3175689dd471cf3295003fe0fc1b1ad6ee69ea8ddb9e0bc4c811f7b8f1fb01745b4a8883fad74fac77a7284b6ed3951b2a83bfeaa5959355ff2eb69bcc364a71a4b5807fc118b628889c6e0063f635601dd20295dd29ac6874e4b61ad6303e0d396d38585ecc1e0708bdf9baf73a378ce84b1233ed60aa5a81b2c185ab08469195b0e1af261279e4ff76af1f458393bafe4f2ca6c76940aa4e15f0a64ced4a645cda4ca6cc8779c650cc0aea28dded3403832853432be356040c9bb5c35907547eda9095bc2be6e5e17e7690a2fcfd1cd1f82e01d2157f372f5cd98322bfc4a4845266194f8cba81f24126d7f1fd1b6185837c6fb1851b7d00137423c5cf97eadefb57fdcccb18448e18d0b1d05784f1f65d90c27459a95eb0b9c8132998fc72c10a9d94dc1e8e8c8571a523cdbda6487b6e6a82f881497e437d2f9ef16d204567959559acd47aa47dfc77a8779c7085cd1b137d6cf3737d8fb71a59cd98407188bec11f7552184e80fe88c32866877475f07325288089ae239c167e48060d1addb9296603ea487bce4184897c03ca67c2441eacb1ae3d4ce4cd8f2250eb6318284f8de583775cf89d578bef6af29fdb8be0367362c94ab919f455e2b3ef2c3c74be3022bf922ea0057c2aff1d65ba06b852368b03f99e5e9db1d480689cf53705f69b51ea4ee1422ab510f6d29923ad184eb54ea694cff8f226c8882e6045f590fb66276df531ae6d66f05f321abe4291315dd25f9baab618c58dd86cafc8e2e9c9b98c8168f13b445423c0ccf71e4ef5b786215b1c5514fbd7ceb86c08d18f3fac15f1396e027aa0cad2da72f017ae08d879c8b883b7ac017e34ecc283a6a20b35b8f7ff3c26088dbfa81674e87f2edb734c9cbd8116d06088b77ace39ead2bf0e746dfc682cf1454be78541dd11379e9da3cefba74047aa74ed40cfc6856f1d42b3dfc567d6c5e942cde318964b70ea2ae55b0f2fdfd1dd5372622f98ffd938c438853f70c0537703af4d2ceb6c048786e21d9369ecb062c6f1c60763f75fc79a015cad8dee9dc53cd11a140c57e376229d52bb2af92f582b6b6dd41cfd807764f581c6106b10b50d10f1560ba45988b95eb953414b35aaf92cc3a8396f3d2d31c71a0e36718c248f5620d569bcaaeb17db9b91f0a010881dd74670819ba2916bc0c5be159e476612afc0b5777a6702ac1bc78644eb128e24fea8aa1adae6a950d64683c0c835c4d22005444775acff9bf82d41989ae6b245c2d1bf715b3039690818bb3c0d9c5205ac85386472564129816cef35e6606e74ead8f2721288cd33e750a3765bbe34122d64dd304c428a30c020d338e5568d03ac9b8b5907d42fab4a6aad277e50d05626aac8a71d75c9abe95115c92ee3ff9d71f7532a0639cdb0ecf607dbd5bb01e7407dc9c1cbc993d646c2fadadac36b545f21f577148032f41820ca18239686e40ac65073e88960bdd8584b10d975150affd4d082481907b8ec0e4b81f140b1c5f84a295240179f53ccdb03ac850f4df91fcecdca90c2917669b5da7342dad5a914b9efa43ea3f146aa776a7e0e907e2e9ade310b7d0b6278c389ccb7f348898e7420b3586d7c17f73325d22e76e0fb42ba9ca50d3a6f76b918799642d3df3ae6169fc8cdb050e7bf9a53250051097410ce088e09f3a1f2671acadaf1b0973b314f6dd90a201b5146fcafd45b126d2c690effe883e257783328bf6cf9416306251a11840a87e3476c47f7ebc3f7dee987d0f4d4b389dc743e19e5c932ba643fd712c3c4645194d7718fe8ad4823803fef2800445f20e90c47b60c2ad190b416393777b840f7feab285f2750a9e9f0f9f9462a6f404d214da94317d90b745088c4581cc03c86df9ff9d67f6838325417b39c0fae10a207b190b06a68f23a5a4c1f1333cb15be16f53ed914e0d3a2aaf63106f8c6ed24b618e6d87087c59eb3ad9f2ff0d9d55505c4b12216db07fd9e41a6421c6a22858abdef11315c53baab705173800661b815774244ba7a46535bfd123c9721547051bcb8854868c357b72c13e1738ff870f65e1e3ea11fb6043ebc39e9e978a3e0c97c278d7070ac90e73f4c7e43376e20e1e370607a57f7dff3a8c906c982ef4ab14c4f84f333f96049e4961d09594709caf605ab092bbfa328d92ab00535e6ed2ed8bec2235ef8f657a25d4405409091ab29cc78893510281db7b2c4c2c0c01527a9f5930c4ecf0aca5710941ed17cb606dd370a58d0f7ff63edfabbab36c67654808cefde5b4df3344b683165c179da45edf853bb3543b5a5aeab4118badf95f11b0d6fa33d046a299ef107676cbf669563e14f1391614aa3ce9d63f08321ee6cbea0bf7da8cc58bf6449e06b7eba4a14ee7aca24dde16308a48010314aa734598bd1082f3dcd21390501cc1c3b500861a8672fffc67753c5e5c6e2127f0d03d37f1197fb69030e8dbd305a9d31e62008b0bf4d6faef79d9c39e9e9235071cd979afbfa06bd2bc71ae9cf68cf9743302270e6a2a9f394f2d46aa29e9b134cf90c3210c075fadc56de6a2898890f55f24e65d55ea68e715612b0a14d3c8922e819ee528bd58276733e42d1c458cd58a36c93e1ed7ec036ade442280578c25b493a44e72cd39b9b6c2f4b00be701f986b4dd600659d267ece3313736875b4f262e69d93f48e8cd5f7dbdee6130969a2de41296a34b04d27055422d52b66b7a9e0b44eb709181f05b1c37826ba242d19f18e56852027b5db206062f0499e8c20b1fbb5aed53317184baf27c7c3eb5708be399864f5e8f2d068176a1c0a92f96006114870d7a7b5652b016505c7cbe7d402c884913862f356a14033ff4cc4cfc760ddf7d1e0a9b369930dedad69ef95088734e9dfb6645d1087b42d16568a2417a4fcdaf63f0b6d4b4c2ef84c162e939443471a60b1e03c0f1b13184402013cf01f7e65f345df531f58956f3ee4849aba04cb8a4eccd3cd527a2c0749ab57380809ffac18e521682080827a6f316ecfdc263f3fefe048833eb44559fb05f4570cb733fc9833b4861cd660806778a906569d8cb3062d399eb4e3bf8ea3b8e3c98eda8836bc66737f47e15c74b6f3fce36da0bdfb590fea101e79afce23d1e0ea936e820b46638b75a90f6bc894560b086666afe4195a1a76dcbdfa5a6"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0x6c, 0x1e, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x1ff, 0x8001, 0xffffffffffffffff, 0x2, 0x8}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x9d5, 0x10000000, 0x6, 0xffffffff}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x6, 0x6, "db36"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x10c, 0x15, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xcb1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x9}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xfff2}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0xfff1}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0x2}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}]}, {0xa5, 0x6, "b0d7b4d0443e897e6f07ea89cd07d725a21994e23337ba85549f2a12cdc43e82b11331444210bafa38edac3812058fd2354ff549746997bc4bc5fcc7905e3b2e6ec3105a1fe3df51de6d6c59a1f51e945cd44f2fa780bdaf1c49985b3a8c09c2bf1d03dc1be3ba2ab6aadc27637bdb646694e6ffc53a1155f71948ad0c78037a10b683ae0a21e6d166e69ee993ff937e73d8d9d3b7f8de892aa87489a7a31ea3d5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x5}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_basic={{0xa}, {0x578, 0x2, [@TCA_BASIC_EMATCHES={0x150, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x3fc, 0x2, 0x7ff}, {0x2, 0x1, 0x1, "9a"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0xfffe}, {0x2, 0x6f91, 0x9, 0x5, 0x8, 0x2, 0x2}}}, @TCF_EM_META={0x88, 0x3, 0x0, 0x0, {{0x2400, 0x4, 0xe8fa}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x6, 0x2}, {0x6, 0x7, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7e, 0xcc, 0x1}, {0x3, 0xfe}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x80, 0x4, 0x2}, {0xe3c8, 0x0, 0x1}}}, @TCA_EM_META_LVALUE={0x6, 0x2, [@TCF_META_TYPE_VAR="f002"]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="d1a94a87ad6abd83b6"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3d1a, 0xd8}, {0xd2c, 0x0, 0x86d82bac01864ce4}}}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_VAR="ad0a944d95ed39", @TCF_META_TYPE_VAR="830a7962"]}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="8e3c33d980813c", @TCF_META_TYPE_VAR="549ee9ac62766fc36aa5", @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x5}, {0x8000, 0x9, 0xe, 0x5}}}, @TCF_EM_IPT={0x78, 0x3, 0x0, 0x0, {{0x7, 0x9, 0x7fa1}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x50, 0x5, "302858ab3cb7c2d9dec59b1954d1519da649e686757cfc0cff4bf4358fedc13e199b25b710660fa2f0f68f63458e00f67a2c099861a085b34c6c9a401ee2258307a5c1e98696d30172b0393a"}]}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xe, 0x8}}, @TCA_BASIC_POLICE={0x41c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0xa23c, 0xba89, 0xb8f, 0xac1, 0x0, 0xe, 0xf9, 0x2, 0x401, 0x8, 0x3, 0x1, 0x1, 0x3, 0x3, 0x2, 0x9, 0x7fffffff, 0xc6, 0x0, 0xc0, 0xa, 0x2, 0x80000000, 0xfffff6f0, 0x7, 0x1, 0x3fc000, 0x4, 0x4, 0xffff0000, 0x3, 0x80, 0x4, 0x69, 0xb5454d3, 0x4, 0x5, 0x3f6, 0x9, 0x9, 0x3, 0x4, 0xdc, 0x1, 0x5, 0x0, 0x3, 0x9, 0x5, 0x4, 0x50895f24, 0x1000, 0xe46, 0x92, 0x4, 0x7, 0x1000, 0x4, 0x8000, 0x3ff, 0x6, 0x7ff, 0x8, 0x4, 0x5, 0x26, 0x10000, 0x1, 0x5, 0x80000000, 0x3, 0x4, 0xfff, 0x6, 0x4, 0x0, 0x4, 0x7ff, 0x4, 0x4, 0x2, 0xdd, 0x9, 0x8, 0x10, 0x2, 0x12, 0x4, 0xd, 0x3, 0x3ff, 0x3, 0x800, 0x8, 0x10001, 0x5, 0x1ff, 0x4, 0x400, 0x10, 0x0, 0x1, 0x3, 0x7bc3, 0x8, 0xb, 0x4, 0x8, 0x437, 0xa, 0xb, 0x34, 0x9000000, 0x3, 0x0, 0x81, 0xc, 0x8c, 0x80000000, 0x1, 0x5, 0x7, 0x76a, 0x9, 0x3, 0x8, 0xff, 0x6b9, 0x401, 0x6, 0xec, 0x9, 0x4, 0xb2, 0x400, 0x46fd, 0x4, 0x80, 0x3, 0x2, 0x3, 0xf7, 0x0, 0x8, 0x1000, 0x1000, 0x6, 0x100, 0x7, 0x5, 0x6, 0x8, 0x7, 0xc, 0x4, 0xb, 0x7f, 0x6, 0x4, 0x3, 0x1, 0x9, 0x5, 0x1, 0x5, 0x400, 0x26, 0x5, 0x8001, 0x1, 0xd, 0xbdb2, 0x8000, 0x9, 0x9, 0x3, 0x0, 0x8, 0x80, 0x0, 0x10000, 0x7, 0x6, 0xb, 0x10001, 0xa8, 0x9, 0x3ff, 0x40, 0x0, 0xd1, 0xfffffff8, 0x2, 0xffff, 0x4, 0x3, 0x92e9, 0xffffffff, 0xfffffffc, 0xf78f, 0x4, 0x5, 0x8, 0x0, 0xffff, 0x6, 0x9, 0x9, 0x3b3, 0x6, 0x4, 0xffffffff, 0x5, 0x5, 0x7, 0x0, 0x0, 0x6, 0x100, 0x3a800000, 0x5, 0x80000000, 0xc9e, 0x9, 0x114d, 0x5, 0x4, 0x6, 0x7, 0xe, 0x1, 0x0, 0xf, 0x55fc, 0x7, 0x9, 0xfffffff9, 0x8, 0x3, 0x4, 0x8, 0xfffffffd, 0xfff, 0x9, 0x7ff, 0x7d4, 0x7, 0x4, 0xb02, 0x1, 0x401, 0x8, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x600000}, @TCA_POLICE_RATE64={0xc}]}]}}]}, 0x1f80}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002240)=ANY=[@ANYBLOB="88000000190020002abd7000fddbdf251c100004fe0100090009000008000400", @ANYRES32=r1, @ANYBLOB="0800010000000000140012000f0031cf34f556bd8c9eb57d2379153a05001a000500000008000400", @ANYRES32=r2, @ANYBLOB="14990400000025fdbbf84ea3f086b608273272b005001a0001000000140012001f007beba7b19d6c46f1d2abbb2d353808000400260a4219408d623485ffc74061324b5172dd295e4b52f3e92328a73cc92673d7540234e686e4f903bac1c9c6b5a216fed37b6acd54d7dc7356faf4", @ANYRES32=r3, @ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x4008884) 380.160352ms ago: executing program 2 (id=624): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x12}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = socket$kcm(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x8907, 0x0) recvmsg$kcm(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r6, &(0x7f00000001c0)=""/4098, 0x1002) fsmount(r6, 0x0, 0x86) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 254.954233ms ago: executing program 0 (id=625): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, {0x0, r8}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_UNLINKAT={0x24, 0x5, 0x0, r4, 0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r8}}) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f7680009050100000401ff070800070305"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYRESDEC=r2, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000040)=r11, 0x4) sendmsg$inet(r13, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r15 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r15) close(r15) r16 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r16, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r16, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r16, &(0x7f0000000380)={0x0, 0xfffffffffffffd2b, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r18 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r18, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r17, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) bind$packet(r15, &(0x7f0000000080)={0x11, 0x0, r17, 0x1, 0x86, 0x6, @multicast}, 0x14) r19 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r19, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x24, r14, 0x200, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4000013) 0s ago: executing program 5 (id=626): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9, 0xed}, 0x20) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000c00)='./binderfs/binder1\x00', 0xc02, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x13, r2, 0xc8eae000) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x40, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f00000002c0)}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x2, 0x4a090) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_open_procfs$userns(0x0, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) kernel console output (not intermixed with test programs): acket: 32 [ 128.179668][ T5911] usb 3-1: config 255 has an invalid interface number: 62 but max is 0 [ 128.192297][ T5911] usb 3-1: config 255 has no interface number 0 [ 128.198708][ T5911] usb 3-1: config 255 interface 62 has no altsetting 0 [ 128.260170][ T5911] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=55.37 [ 128.278971][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.300759][ T10] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 128.301547][ T5911] usb 3-1: Product: syz [ 128.314318][ T5911] usb 3-1: Manufacturer: syz [ 128.338570][ T5911] usb 3-1: SerialNumber: syz [ 128.346092][ T10] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 128.355106][ T10] usb 6-1: can't read configurations, error -22 [ 128.369821][ T985] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 128.376627][ T10] usb usb6-port1: unable to enumerate USB device [ 128.399516][ T5911] sr9700 3-1:255.62: probe with driver sr9700 failed with error -22 [ 128.532158][ T985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.543371][ T985] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 128.552602][ T985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.575586][ T5911] usb 3-1: USB disconnect, device number 10 [ 128.606650][ T985] usb 1-1: config 0 descriptor?? [ 129.038410][ T985] logitech-hidpp-device 0003:046D:C086.0001: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.0-1/input0 [ 129.549539][ T10] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 129.700787][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 129.742167][ T10] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 129.769184][ T10] usb 3-1: config 95 has no interface number 0 [ 129.792869][ T10] usb 3-1: config 95 interface 1 has no altsetting 0 [ 129.823981][ T10] usb 3-1: string descriptor 0 read error: -22 [ 129.841743][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 129.871114][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.121932][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.141209][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.193051][ T10] usb 3-1: USB disconnect, device number 11 [ 130.495549][ T30] kauditd_printk_skb: 182 callbacks suppressed [ 130.495566][ T30] audit: type=1326 audit(1769972438.576:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6600 comm="syz.5.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33c99aeb9 code=0x7ffc0000 [ 130.571377][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.631901][ T30] audit: type=1326 audit(1769972438.606:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6600 comm="syz.5.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33c99aeb9 code=0x7ffc0000 [ 130.705783][ T30] audit: type=1326 audit(1769972438.606:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6600 comm="syz.5.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fe33c99aeb9 code=0x7ffc0000 [ 130.759766][ T30] audit: type=1326 audit(1769972438.606:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6600 comm="syz.5.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33c99aeb9 code=0x7ffc0000 [ 130.833995][ T30] audit: type=1326 audit(1769972438.606:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6600 comm="syz.5.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33c99aeb9 code=0x7ffc0000 [ 131.084211][ T30] audit: type=1326 audit(1769972438.606:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6600 comm="syz.5.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe33c99aeb9 code=0x7ffc0000 [ 131.163235][ T30] audit: type=1326 audit(1769972438.606:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6600 comm="syz.5.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33c99aeb9 code=0x7ffc0000 [ 131.186918][ T30] audit: type=1326 audit(1769972438.616:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6600 comm="syz.5.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33c99aeb9 code=0x7ffc0000 [ 131.258626][ T30] audit: type=1326 audit(1769972438.616:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6600 comm="syz.5.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe33c99aeb9 code=0x7ffc0000 [ 131.535044][ T30] audit: type=1326 audit(1769972438.616:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6600 comm="syz.5.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33c99aeb9 code=0x7ffc0000 [ 131.707081][ T6612] netlink: 104 bytes leftover after parsing attributes in process `syz.3.141'. [ 131.956109][ T6617] netlink: 27 bytes leftover after parsing attributes in process `syz.3.143'. [ 132.173201][ T873] usb 1-1: USB disconnect, device number 18 [ 132.391437][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 132.444315][ T6622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.478502][ T6621] xt_connbytes: Forcing CT accounting to be enabled [ 133.142079][ T6640] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 133.179452][ T798] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 133.340122][ T798] usb 2-1: Using ep0 maxpacket: 16 [ 133.356879][ T798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.391034][ T798] usb 2-1: New USB device found, idVendor=01ac, idProduct=0000, bcdDevice= 1.00 [ 133.394223][ T985] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 133.415450][ T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.458796][ T798] usb 2-1: config 0 descriptor?? [ 133.639413][ T985] usb 3-1: Using ep0 maxpacket: 32 [ 133.662708][ T985] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 133.700314][ T798] usbhid 2-1:0.0: can't add hid device: -71 [ 133.717575][ T798] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 133.734272][ T985] usb 3-1: config 0 has no interface number 0 [ 133.760113][ T798] usb 2-1: USB disconnect, device number 4 [ 133.773150][ T985] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 133.834108][ T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.928567][ T985] usb 3-1: Product: syz [ 133.945712][ T985] usb 3-1: Manufacturer: syz [ 133.957428][ T985] usb 3-1: SerialNumber: syz [ 134.015164][ T985] usb 3-1: config 0 descriptor?? [ 134.074280][ T985] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 134.236522][ T985] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 134.302270][ T6665] netlink: 27 bytes leftover after parsing attributes in process `syz.3.154'. [ 134.322352][ T985] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 134.528136][ T6669] binder: BINDER_SET_CONTEXT_MGR already set [ 134.599495][ T6669] binder: 6666:6669 ioctl 4018620d 200000000100 returned -16 [ 134.929486][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 135.131233][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.166153][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 135.169665][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.180443][ T985] usb 3-1: USB disconnect, device number 12 [ 135.230643][ T10] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 135.260732][ T985] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 135.273641][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.322235][ T985] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 135.396932][ T985] quatech2 3-1:0.51: device disconnected [ 135.427546][ T10] usb 4-1: config 0 descriptor?? [ 135.689596][ T5911] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 135.878520][ T5911] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 135.893041][ T6673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.901661][ T5911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 135.901696][ T5911] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.928746][ T985] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 135.942005][ T5911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 135.951675][ T6673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.957527][ T5911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 136.035303][ T5911] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 136.045215][ T5911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 136.057027][ T5911] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 136.071929][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 136.082786][ T5911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 136.095628][ T5911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 136.111722][ T985] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 136.122509][ T985] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 136.132931][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.145190][ T5911] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 136.153700][ T5911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 136.165565][ T5911] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 136.194497][ T985] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 136.205884][ T5911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 136.221197][ T5911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 136.239391][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 136.247933][ T5911] usb 1-1: string descriptor 0 read error: -22 [ 136.256863][ T24] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 136.266073][ T24] usb 6-1: config 0 has no interface number 0 [ 136.272731][ T5911] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 136.288941][ T24] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 136.301659][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.310428][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.318646][ T24] usb 6-1: Product: syz [ 136.336509][ T24] usb 6-1: Manufacturer: syz [ 136.351741][ T5911] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 136.362791][ T24] usb 6-1: SerialNumber: syz [ 136.392011][ T24] usb 6-1: config 0 descriptor?? [ 136.446189][ T24] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 136.660793][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 136.677937][ T24] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 136.689838][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 136.721573][ T24] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 136.789214][ T10] usb 4-1: USB disconnect, device number 9 [ 136.906982][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 13 [ 137.150971][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 137.152559][ T798] usb 6-1: USB disconnect, device number 7 [ 137.227625][ T985] stv0680 3-1:4.0: Could not get descriptor 0200 [ 137.268115][ T798] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 137.346261][ T798] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 137.390150][ T798] quatech2 6-1:0.51: device disconnected [ 137.433274][ T985] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 137.459384][ T985] stv0680 3-1:4.0: last error: 2, command = 0x23 [ 137.476713][ T6722] netlink: 27 bytes leftover after parsing attributes in process `syz.1.166'. [ 137.515333][ T985] usb 3-1: USB disconnect, device number 13 [ 138.093753][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.101079][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.147361][ T6726] netlink: 44 bytes leftover after parsing attributes in process `syz.2.167'. [ 138.157125][ T6726] netlink: 'syz.2.167': attribute type 6 has an invalid length. [ 138.171603][ T6726] netlink: 'syz.2.167': attribute type 5 has an invalid length. [ 138.199316][ T6726] netlink: 'syz.2.167': attribute type 4 has an invalid length. [ 139.625262][ T24] usb 1-1: USB disconnect, device number 19 [ 140.014999][ T6748] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 140.390135][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.179'. [ 140.414844][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 140.414863][ T30] audit: type=1326 audit(1769972448.496:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147799aeb9 code=0x7ffc0000 [ 140.537525][ T30] audit: type=1326 audit(1769972448.496:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f147799aeb9 code=0x7ffc0000 [ 140.605771][ T30] audit: type=1326 audit(1769972448.496:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147799aeb9 code=0x7ffc0000 [ 140.628221][ T30] audit: type=1326 audit(1769972448.496:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f147799aeb9 code=0x7ffc0000 [ 140.652894][ T30] audit: type=1326 audit(1769972448.496:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147799aeb9 code=0x7ffc0000 [ 140.699735][ T6772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.181'. [ 140.733847][ T30] audit: type=1326 audit(1769972448.496:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f147799aeb9 code=0x7ffc0000 [ 140.757522][ T30] audit: type=1326 audit(1769972448.496:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147799aeb9 code=0x7ffc0000 [ 140.787786][ T6771] netlink: 140 bytes leftover after parsing attributes in process `syz.1.180'. [ 140.809909][ T6771] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 140.819703][ T30] audit: type=1326 audit(1769972448.496:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147799aeb9 code=0x7ffc0000 [ 140.842372][ T9] IPVS: starting estimator thread 0... [ 140.851227][ T30] audit: type=1326 audit(1769972448.496:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f147799aeb9 code=0x7ffc0000 [ 140.883272][ T30] audit: type=1326 audit(1769972448.496:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147799aeb9 code=0x7ffc0000 [ 140.983653][ T6776] IPVS: using max 27 ests per chain, 64800 per kthread [ 141.399388][ T24] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 141.542990][ T6789] netlink: 27 bytes leftover after parsing attributes in process `syz.1.185'. [ 141.583545][ T24] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 141.602112][ T24] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 141.642498][ T24] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 141.675725][ T24] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 141.721351][ T24] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 141.746661][ T24] usb 4-1: Manufacturer: syz [ 141.764562][ T6794] team0: Device gtp0 is of different type [ 141.770460][ T24] usb 4-1: SerialNumber: syz [ 142.004189][ T24] yealink 4-1:36.0: invalid payload size 0, expected 16 [ 142.025644][ T24] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input9 [ 142.045914][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 142.053961][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 142.062239][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 142.069579][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 142.076878][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 142.083941][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 142.091040][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 142.098036][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 142.105103][ C1] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 142.127056][ T24] usb 4-1: USB disconnect, device number 10 [ 142.209715][ T798] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 142.383499][ T798] usb 6-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 142.404036][ T798] usb 6-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0x5A, changing to 0xA [ 142.431979][ T798] usb 6-1: config 48 interface 0 altsetting 98 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 142.466139][ T798] usb 6-1: config 48 interface 0 altsetting 98 endpoint 0xA has invalid wMaxPacketSize 0 [ 142.493668][ T798] usb 6-1: config 48 interface 0 has no altsetting 0 [ 142.511512][ T798] usb 6-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 142.525777][ T798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.534884][ T798] usb 6-1: Product: syz [ 142.539697][ T798] usb 6-1: Manufacturer: syz [ 142.544413][ T798] usb 6-1: SerialNumber: syz [ 142.572287][ T6806] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 142.875256][ T798] usb 6-1: USB disconnect, device number 8 [ 143.013511][ T6833] input: syz1 as /devices/virtual/input/input10 [ 143.469369][ T985] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 143.629710][ T985] usb 3-1: Using ep0 maxpacket: 8 [ 143.668299][ T985] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 143.685365][ T6853] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 143.686798][ T985] usb 3-1: config 2 has no interface number 0 [ 143.709391][ T985] usb 3-1: config 2 interface 31 has no altsetting 0 [ 143.726852][ T985] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 143.727815][ T6853] team0: Device ipvlan2 is already an upper device of the team interface [ 143.745942][ T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.776551][ T6856] netlink: 27 bytes leftover after parsing attributes in process `syz.3.198'. [ 143.791468][ T985] usb 3-1: Product: syz [ 143.804531][ T985] usb 3-1: Manufacturer: syz [ 143.816021][ T985] usb 3-1: SerialNumber: syz [ 144.069041][ T985] ch9200 3-1:2.31: probe with driver ch9200 failed with error -71 [ 144.108005][ T985] usb 3-1: USB disconnect, device number 14 [ 144.485598][ T6872] netlink: 'syz.3.204': attribute type 1 has an invalid length. [ 144.669356][ T5911] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 144.974085][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 144.987613][ T5911] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 144.996075][ T5911] usb 2-1: config 0 has no interface number 0 [ 145.004510][ T5911] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 145.013830][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.029476][ T5911] usb 2-1: Product: syz [ 145.035565][ T5911] usb 2-1: Manufacturer: syz [ 145.050175][ T5911] usb 2-1: SerialNumber: syz [ 145.075089][ T5911] usb 2-1: config 0 descriptor?? [ 145.123779][ T5911] smsc95xx v2.0.0 [ 145.413473][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.208'. [ 145.528995][ T5911] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 145.589994][ T5911] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 145.646764][ T6890] netlink: 27 bytes leftover after parsing attributes in process `syz.5.210'. [ 146.514877][ T5911] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 146.529740][ T5911] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 146.659503][ T873] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 146.836867][ T873] usb 6-1: Using ep0 maxpacket: 32 [ 146.854662][ T873] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 146.863230][ T873] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 146.889142][ T873] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 146.929899][ T873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 146.950474][ T873] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 146.969447][ T873] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 146.996889][ T873] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 147.017252][ T873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.052700][ T873] usb 6-1: config 0 descriptor?? [ 147.298053][ T6899] netlink: 168 bytes leftover after parsing attributes in process `syz.5.212'. [ 147.322586][ T873] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 147.589132][ C1] usblp0: nonzero read bulk status received: -71 [ 147.600417][ T873] usb 6-1: USB disconnect, device number 9 [ 147.617531][ T6899] usblp0: removed [ 147.744036][ T985] usb 2-1: USB disconnect, device number 5 [ 147.867189][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 147.878737][ T6925] tc_dump_action: action bad kind [ 148.980977][ T6932] netlink: 27 bytes leftover after parsing attributes in process `syz.5.221'. [ 150.180567][ T5920] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 150.379374][ T5920] usb 6-1: Using ep0 maxpacket: 16 [ 150.384774][ T5920] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 150.384796][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.384810][ T5920] usb 6-1: Product: syz [ 150.384822][ T5920] usb 6-1: Manufacturer: syz [ 150.384833][ T5920] usb 6-1: SerialNumber: syz [ 150.389375][ T5920] r8152-cfgselector 6-1: Unknown version 0x0000 [ 150.389412][ T5920] r8152-cfgselector 6-1: config 0 descriptor?? [ 150.903172][ T6960] ksmbd: Unknown IPC event: 4, ignore. [ 151.142332][ T6965] netlink: 27 bytes leftover after parsing attributes in process `syz.3.233'. [ 151.348311][ T5920] r8152-cfgselector 6-1: USB disconnect, device number 10 [ 152.709813][ T5920] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 152.896716][ T5920] usb 6-1: Using ep0 maxpacket: 32 [ 152.913424][ T5920] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 152.937546][ T5920] usb 6-1: config 0 has no interface number 0 [ 152.960260][ T5920] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 152.977324][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.991764][ T5920] usb 6-1: Product: syz [ 152.995994][ T5920] usb 6-1: Manufacturer: syz [ 152.996310][ T6985] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 153.002667][ T5920] usb 6-1: SerialNumber: syz [ 153.021750][ T5920] usb 6-1: config 0 descriptor?? [ 153.034274][ T5920] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 153.170538][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 153.192886][ T6995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.241'. [ 153.256258][ T5920] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 153.278961][ T5920] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 153.341856][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 153.362569][ T7001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.242'. [ 153.392952][ T10] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 153.420649][ T10] usb 4-1: config 0 has no interface number 0 [ 153.460647][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 13 [ 153.482795][ T10] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 153.513926][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 153.523307][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.550963][ T10] usb 4-1: Product: syz [ 153.561712][ T10] usb 4-1: Manufacturer: syz [ 153.568399][ T10] usb 4-1: SerialNumber: syz [ 153.592424][ T10] usb 4-1: config 0 descriptor?? [ 153.598379][ T6989] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 153.667583][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 153.669614][ T985] usb 6-1: USB disconnect, device number 11 [ 153.713572][ T985] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 153.728175][ T985] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 153.748145][ T985] quatech2 6-1:0.51: device disconnected [ 153.880520][ T10] asix 4-1:0.188: probe with driver asix failed with error -71 [ 153.924646][ T10] usb 4-1: USB disconnect, device number 11 [ 153.971952][ T7006] netlink: 32 bytes leftover after parsing attributes in process `syz.0.243'. [ 154.000720][ T7007] netlink: 32 bytes leftover after parsing attributes in process `syz.0.243'. [ 154.279551][ T7014] netlink: 27 bytes leftover after parsing attributes in process `syz.2.245'. [ 154.493333][ T7016] netlink: 48 bytes leftover after parsing attributes in process `syz.5.246'. [ 156.128712][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.251'. [ 156.180303][ T7036] netlink: 'syz.5.251': attribute type 8 has an invalid length. [ 156.254093][ T7040] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.252'. [ 156.549318][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 156.741411][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.843740][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.853971][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.873474][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.882863][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.993190][ T10] usb 4-1: config 0 descriptor?? [ 157.444448][ T7052] »»»»»»: renamed from vlan0 (while UP) [ 157.518855][ T10] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 157.560670][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 157.837801][ T5920] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 157.972987][ T5911] usb 4-1: USB disconnect, device number 12 [ 158.033353][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 158.064029][ T5920] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 158.083316][ T5920] usb 3-1: config 0 has no interface number 0 [ 158.237785][ T5920] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 158.254014][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.262297][ T5920] usb 3-1: Product: syz [ 158.266566][ T5920] usb 3-1: Manufacturer: syz [ 158.295824][ T5920] usb 3-1: SerialNumber: syz [ 158.352580][ T5920] usb 3-1: config 0 descriptor?? [ 158.384477][ T5920] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 158.618207][ T5920] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 158.679841][ T5920] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 158.792901][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 13 [ 158.806366][ T9] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 158.994701][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.011762][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 159.029730][ T5920] usb 3-1: USB disconnect, device number 15 [ 159.087406][ T5920] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 159.102903][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 159.138140][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 159.150234][ T5920] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 159.171309][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 159.193276][ T5920] quatech2 3-1:0.51: device disconnected [ 159.233730][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.263227][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.283084][ T9] usb 6-1: Product: syz [ 159.290382][ T9] usb 6-1: Manufacturer: syz [ 159.295031][ T9] usb 6-1: SerialNumber: syz [ 159.324864][ T7062] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 159.344556][ T9] cdc_mbim 6-1:1.0: skipping garbage [ 159.619665][ T7062] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 159.628424][ T7062] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 160.383962][ T7078] input: syz0 as /devices/virtual/input/input13 [ 160.465534][ T7078] syz.0.264 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 160.669880][ T7062] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 160.694879][ T7062] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 160.715445][ T9] cdc_mbim 6-1:1.0: setting tx_max = 48 [ 160.800327][ T9] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 160.833076][ T9] wwan wwan0: port wwan0mbim0 attached [ 160.881697][ T9] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, f2:cb:db:ea:68:4e [ 160.964192][ T9] usb 6-1: USB disconnect, device number 12 [ 161.002463][ T9] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 161.160914][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 161.229410][ T5920] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 161.459355][ T5920] usb 4-1: device descriptor read/64, error -71 [ 161.675750][ T7098] netlink: 20 bytes leftover after parsing attributes in process `syz.5.269'. [ 161.741748][ T5920] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 161.749551][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 161.889468][ T5920] usb 4-1: device descriptor read/64, error -71 [ 161.910973][ T9] usb 2-1: config 253 has an invalid descriptor of length 59, skipping remainder of the config [ 162.059878][ T5920] usb usb4-port1: attempt power cycle [ 162.133881][ T9] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 162.195310][ T9] usb 2-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 162.233896][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.247672][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 162.273789][ T9] usb 2-1: SerialNumber: syz [ 162.459455][ T5920] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 162.494999][ T5920] usb 4-1: device descriptor read/8, error -71 [ 162.514083][ T7092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.529104][ T7092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.555261][ T9] usb 2-1: bad CDC descriptors [ 162.582629][ T9] usb 2-1: USB disconnect, device number 6 [ 162.739528][ T5920] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 162.771853][ T5920] usb 4-1: device descriptor read/8, error -71 [ 162.880782][ T5920] usb usb4-port1: unable to enumerate USB device [ 165.339476][ T985] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 165.524073][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 165.559385][ T985] usb 4-1: Using ep0 maxpacket: 8 [ 165.576014][ T985] usb 4-1: unable to get BOS descriptor or descriptor too short [ 165.598550][ T985] usb 4-1: config 8 has an invalid interface number: 79 but max is 0 [ 165.614354][ T985] usb 4-1: config 8 has no interface number 0 [ 165.626192][ T985] usb 4-1: config 8 interface 79 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 165.647828][ T985] usb 4-1: config 8 interface 79 has no altsetting 0 [ 165.672042][ T985] usb 4-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 165.681863][ T985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.690124][ T985] usb 4-1: Product: syz [ 165.702290][ T985] usb 4-1: Manufacturer: syz [ 165.708490][ T985] usb 4-1: SerialNumber: syz [ 165.716001][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 165.732106][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 165.750441][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 165.781483][ T9] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 165.792466][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.848691][ T9] usb 2-1: Product: syz [ 165.874969][ T9] usb 2-1: Manufacturer: syz [ 165.894304][ T9] usb 2-1: SerialNumber: syz [ 165.928493][ T9] usb 2-1: config 0 descriptor?? [ 165.942155][ T7148] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 165.978472][ T9] usb 2-1: ucan: probing device on interface #0 [ 165.998724][ T9] usb 2-1: ucan: invalid endpoint configuration [ 166.050155][ T9] usb 2-1: ucan: probe failed; try to update the device firmware [ 166.160785][ T985] usb 4-1: bad CDC descriptors [ 166.194892][ T9] usb 2-1: USB disconnect, device number 7 [ 166.206302][ T985] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 166.315782][ T985] snd-usb-audio 4-1:8.79: probe with driver snd-usb-audio failed with error -2 [ 166.367119][ T985] usb 4-1: USB disconnect, device number 17 [ 166.428269][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.79/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.006252][ T7188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.184898][ T7203] fuse: Bad value for 'rootmode' [ 169.909343][ T798] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 170.119302][ T798] usb 6-1: Using ep0 maxpacket: 8 [ 170.147631][ T798] usb 6-1: config 128 has an invalid interface number: 213 but max is 1 [ 170.242575][ T798] usb 6-1: config 128 has an invalid interface number: 52 but max is 1 [ 170.280264][ T798] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 170.324274][ T798] usb 6-1: config 128 has no interface number 0 [ 170.354689][ T798] usb 6-1: config 128 has no interface number 1 [ 170.378909][ T798] usb 6-1: config 128 interface 52 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 170.421971][ T798] usb 6-1: config 128 interface 213 has no altsetting 0 [ 170.438509][ T7233] fuse: Bad value for 'fd' [ 170.448805][ T798] usb 6-1: config 128 interface 52 has no altsetting 0 [ 170.460467][ T798] usb 6-1: New USB device found, idVendor=12d1, idProduct=d4ef, bcdDevice=7d.e1 [ 170.470171][ T798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.715428][ T798] usb 6-1: Product: syz [ 170.719722][ T798] usb 6-1: Manufacturer: Ђ [ 170.724420][ T798] usb 6-1: SerialNumber: syz [ 170.839315][ T5920] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 170.941327][ T798] option 6-1:128.213: GSM modem (1-port) converter detected [ 171.018694][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.081784][ T798] usb 6-1: USB disconnect, device number 13 [ 171.098133][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 171.136505][ T798] option 6-1:128.213: device disconnected [ 171.149571][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 171.197047][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.253602][ T5920] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.364176][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.376247][ T5920] usb 3-1: config 0 descriptor?? [ 171.754937][ T7237] loop5: detected capacity change from 0 to 7 [ 171.762685][ T7237] Dev loop5: unable to read RDB block 7 [ 171.768445][ T7237] loop5: unable to read partition table [ 171.780546][ T7237] loop5: partition table beyond EOD, truncated [ 171.800534][ T7237] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 171.849622][ T7229] openvswitch: netlink: IPv6 tunnel dst address is zero [ 171.881544][ T5920] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 171.906830][ T5920] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 172.481773][ T7250] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 172.508184][ T7250] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 172.545057][ T7250] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 172.566642][ T7250] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.585488][ T7250] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 172.613298][ T7250] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 172.621648][ T7250] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 172.638480][ T7250] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 172.670104][ T7250] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 172.683679][ T7250] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 172.692162][ T7250] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 172.702833][ T7250] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 172.715738][ T7250] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.722978][ T7250] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 172.746404][ T7250] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 172.999325][ T5911] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 173.232212][ T5911] usb 4-1: no configurations [ 173.236999][ T5911] usb 4-1: can't read configurations, error -22 [ 173.370071][ T5911] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 173.531054][ T5911] usb 4-1: no configurations [ 173.536036][ T5911] usb 4-1: can't read configurations, error -22 [ 173.545327][ T5911] usb usb4-port1: attempt power cycle [ 173.902923][ T5911] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 173.935643][ T5911] usb 4-1: no configurations [ 173.945824][ T5920] usb 3-1: USB disconnect, device number 16 [ 173.952068][ T5911] usb 4-1: can't read configurations, error -22 [ 174.099323][ T5911] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 174.153125][ T5911] usb 4-1: no configurations [ 174.163100][ T5911] usb 4-1: can't read configurations, error -22 [ 174.180078][ T5911] usb usb4-port1: unable to enumerate USB device [ 174.489445][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.569589][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.659316][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.717134][ T985] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 174.729337][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.735462][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 174.869364][ T985] usb 3-1: Using ep0 maxpacket: 8 [ 174.877981][ T985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.897353][ T985] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 174.916998][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.943011][ T985] usb 3-1: config 0 descriptor?? [ 174.999586][ T5949] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 175.165126][ T5949] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 175.187930][ T985] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 175.199352][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.199382][ T5949] usb 2-1: Product: syz [ 175.199399][ T5949] usb 2-1: Manufacturer: syz [ 175.199415][ T5949] usb 2-1: SerialNumber: syz [ 175.221948][ T5949] usb 2-1: config 0 descriptor?? [ 175.474076][ T5949] usb 2-1: Firmware version (0.0) predates our first public release. [ 175.491604][ T5949] usb 2-1: Please update to version 0.2 or newer [ 175.505527][ T7273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.533552][ T7273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.604429][ T873] usb 3-1: USB disconnect, device number 17 [ 175.881898][ T5949] usb 2-1: USB disconnect, device number 8 [ 176.201464][ T5920] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 176.209742][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 176.380208][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 176.389729][ T985] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 176.418134][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.456818][ T5920] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 176.486284][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.517620][ T5920] usb 4-1: config 0 descriptor?? [ 176.585537][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 176.595687][ T985] usb 3-1: Using ep0 maxpacket: 32 [ 176.631113][ T985] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.649612][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 176.676127][ T985] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.696819][ T985] usb 3-1: config 0 interface 0 has no altsetting 0 [ 176.714279][ T985] usb 3-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00 [ 176.729499][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 176.744066][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.766145][ T985] usb 3-1: config 0 descriptor?? [ 176.819441][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 176.825574][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.001930][ T7298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.012919][ T7298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.053090][ T5920] usbhid 4-1:0.0: can't add hid device: -71 [ 177.059130][ T5920] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 177.469926][ T5920] usb 4-1: USB disconnect, device number 22 [ 177.572748][ T985] evision 0003:320F:5041.0004: collection stack underflow [ 177.602491][ T985] evision 0003:320F:5041.0004: item 0 1 0 12 parsing failed [ 177.666122][ T7311] bond1: entered allmulticast mode [ 177.686211][ T985] evision 0003:320F:5041.0004: probe with driver evision failed with error -22 [ 177.699845][ T7311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.803785][ T10] usb 3-1: USB disconnect, device number 18 [ 178.591983][ T7334] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.692546][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.708267][ T7334] netlink: 'syz.5.328': attribute type 10 has an invalid length. [ 178.739622][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 178.739757][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 178.757048][ T7334] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.781570][ T7334] bond0: (slave team0): Enslaving as an active interface with an up link [ 178.809539][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.809719][ T5911] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 178.897017][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.906320][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 178.924612][ T24] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 178.944468][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.961573][ T24] usb 3-1: Product: syz [ 178.976118][ T24] usb 3-1: Manufacturer: syz [ 178.982429][ T24] usb 3-1: SerialNumber: syz [ 178.996646][ T24] usb 3-1: config 0 descriptor?? [ 179.011177][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 179.020219][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 179.048814][ T5911] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.085139][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 179.094562][ T5911] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.140292][ T24] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 179.159982][ T24] usb 3-1: media controller created [ 179.166075][ T5911] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.179482][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.189485][ T5911] usb 2-1: Product: syz [ 179.193729][ T5911] usb 2-1: Manufacturer: syz [ 179.238062][ T5911] usb 2-1: SerialNumber: syz [ 179.298194][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.528092][ T5911] usb 2-1: 0:2 : does not exist [ 179.567230][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'. [ 179.576501][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'. [ 179.646398][ T24] DVB: Unable to find symbol mt352_attach() [ 179.662629][ T5911] usb 2-1: USB disconnect, device number 9 [ 179.736275][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.924448][ T24] DVB: Unable to find symbol nxt6000_attach() [ 179.948789][ T24] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 179.987552][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 180.017916][ T24] dvb-usb: schedule remote query interval to 1000 msecs. [ 180.050252][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 180.084961][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 180.123701][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 180.192890][ T24] usb 3-1: USB disconnect, device number 19 [ 180.529409][ T5911] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 180.543562][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 180.736547][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 180.767720][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.781688][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.792707][ T5911] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 180.802636][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.840297][ T5911] usb 2-1: config 0 descriptor?? [ 180.858056][ T5911] hub 2-1:0.0: USB hub found [ 180.995090][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 181.098889][ T5911] hub 2-1:0.0: 1 port detected [ 181.189417][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 181.201202][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.268368][ T24] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 181.348967][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.386363][ T24] usb 4-1: config 0 descriptor?? [ 181.756357][ T5911] hub 2-1:0.0: activate --> -90 [ 181.882390][ T24] sony 0003:054C:024B.0005: hiddev0,hidraw0: USB HID vff.fb Device [HID 054c:024b] on usb-dummy_hcd.3-1/input0 [ 181.909022][ T24] sony 0003:054C:024B.0005: failed to claim input [ 182.062772][ T24] usb 4-1: USB disconnect, device number 23 [ 182.168026][ T5911] usb 2-1-port1: config error [ 182.209504][ T873] usb 2-1: USB disconnect, device number 10 [ 182.287750][ T7370] fido_id[7370]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 182.963720][ T7388] netlink: 388 bytes leftover after parsing attributes in process `syz.2.343'. [ 183.140733][ T7384] bond2: option ad_user_port_key: invalid value (48502) [ 183.147841][ T7384] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 183.220585][ T7384] bond2 (unregistering): Released all slaves [ 183.407052][ T7387] bond1: entered promiscuous mode [ 183.559376][ T5949] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 183.569692][ T873] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 183.719316][ T5949] usb 2-1: Using ep0 maxpacket: 32 [ 183.740043][ T5949] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 183.748268][ T5949] usb 2-1: config 0 has no interface number 0 [ 183.762416][ T873] usb 6-1: Using ep0 maxpacket: 32 [ 183.770436][ T873] usb 6-1: config 0 interface 0 has no altsetting 0 [ 183.777904][ T5949] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 183.789270][ T873] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 183.809310][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.817454][ T5949] usb 2-1: Product: syz [ 183.839302][ T5949] usb 2-1: Manufacturer: syz [ 183.843966][ T5949] usb 2-1: SerialNumber: syz [ 183.855518][ T873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.856968][ T5949] usb 2-1: config 0 descriptor?? [ 183.863796][ T5911] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 183.899974][ T873] usb 6-1: Product: syz [ 183.909633][ T873] usb 6-1: Manufacturer: syz [ 183.912081][ T5949] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 183.923676][ T873] usb 6-1: SerialNumber: syz [ 184.003462][ T873] usb 6-1: config 0 descriptor?? [ 184.040762][ T873] gs_usb 6-1:0.0: Required endpoints not found [ 184.052282][ T5911] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 184.079354][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 184.093955][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 184.113126][ T5911] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 184.123277][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.162870][ T5949] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 184.164637][ T5911] usb 4-1: Product: syz [ 184.181177][ T5911] usb 4-1: Manufacturer: syz [ 184.185845][ T5911] usb 4-1: SerialNumber: syz [ 184.210284][ T5911] usb 4-1: config 0 descriptor?? [ 184.222852][ T5949] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 184.226549][ T7400] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 184.241502][ T5911] usb 4-1: ucan: probing device on interface #0 [ 184.257295][ T5911] usb 4-1: ucan: invalid endpoint configuration [ 184.311931][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 13 [ 184.350975][ T5911] usb 4-1: ucan: probe failed; try to update the device firmware [ 184.407789][ T7408] fuse: Bad value for 'user_id' [ 184.413375][ T7408] fuse: Bad value for 'user_id' [ 184.457516][ T5911] usb 4-1: USB disconnect, device number 24 [ 184.523979][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 184.525559][ T873] usb 2-1: USB disconnect, device number 11 [ 184.596980][ T873] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 184.620212][ T24] usb 6-1: USB disconnect, device number 14 [ 184.643232][ T873] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 184.666326][ T873] quatech2 2-1:0.51: device disconnected [ 185.277407][ T7418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.295439][ T7418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.530418][ T5949] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 186.719406][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 186.959367][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 187.042419][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 187.319723][ T10] usb 3-1: config 11 has an invalid interface number: 244 but max is 0 [ 187.362147][ T10] usb 3-1: config 11 has no interface number 0 [ 187.368373][ T10] usb 3-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 187.436876][ T10] usb 3-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 187.505570][ T10] usb 3-1: config 11 interface 244 has no altsetting 0 [ 187.658180][ T10] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 187.721377][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.748710][ T10] usb 3-1: Product: syz [ 187.765443][ T10] usb 3-1: Manufacturer: syz [ 187.809244][ T10] usb 3-1: SerialNumber: syz [ 188.084278][ T7446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.116332][ T7446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.230897][ T7446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.320781][ T7446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.340381][ T7446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.349141][ T7446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.580622][ T7446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.635844][ T7446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.747378][ T7446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.823586][ T7446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.169820][ T5920] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 189.189807][ T10] peak_usb 3-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 189.209625][ T10] peak_usb 3-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 189.229839][ T5949] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 189.332410][ T10] peak_usb 3-1:11.244: probe with driver peak_usb failed with error -71 [ 189.362017][ T5920] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 189.390873][ T5920] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 189.409313][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 189.420272][ T10] usb 3-1: USB disconnect, device number 20 [ 189.428333][ T5949] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 189.436938][ T5949] usb 4-1: config 0 has no interface number 0 [ 189.445706][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 189.468589][ T5949] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 189.488418][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.498968][ T5949] usb 4-1: Product: syz [ 189.504984][ T5920] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 189.515086][ T5949] usb 4-1: Manufacturer: syz [ 189.526839][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.536401][ T5949] usb 4-1: SerialNumber: syz [ 189.548882][ T5920] usb 6-1: Product: syz [ 189.555214][ T5920] usb 6-1: Manufacturer: syz [ 189.561079][ T5949] usb 4-1: config 0 descriptor?? [ 189.574299][ T5920] usb 6-1: SerialNumber: syz [ 189.595192][ T5949] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 189.608926][ T5920] usb 6-1: config 0 descriptor?? [ 189.659693][ T7465] raw-gadget.6 gadget.5: fail, usb_ep_enable returned -22 [ 189.679898][ T5920] usb 6-1: ucan: probing device on interface #0 [ 189.693611][ T5920] usb 6-1: ucan: invalid endpoint configuration [ 189.700132][ T5920] usb 6-1: ucan: probe failed; try to update the device firmware [ 189.781064][ T5949] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 189.816879][ T5949] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 189.908516][ T5949] usb 6-1: USB disconnect, device number 16 [ 189.978012][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 13 [ 190.183933][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 190.205939][ T24] usb 4-1: USB disconnect, device number 25 [ 190.229852][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 190.266399][ T7483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.376267][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 190.401995][ T24] quatech2 4-1:0.51: device disconnected [ 190.610322][ T5911] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 190.625014][ T7487] binder: BINDER_SET_CONTEXT_MGR already set [ 190.632428][ T7487] binder: 7485:7487 ioctl 4018620d 200000000040 returned -16 [ 190.719334][ T985] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 190.789636][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 190.805515][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.816755][ T5911] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 190.834059][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.972763][ T985] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 190.985104][ T985] usb 3-1: config 0 has no interface number 0 [ 191.022117][ T5911] usb 2-1: config 0 descriptor?? [ 191.029417][ T985] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 191.080774][ T985] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 191.099459][ T985] usb 3-1: config 0 interface 113 has no altsetting 0 [ 191.135486][ T985] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 191.241356][ T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.287142][ T985] usb 3-1: Product: syz [ 191.318652][ T985] usb 3-1: Manufacturer: syz [ 191.335728][ T985] usb 3-1: SerialNumber: syz [ 191.374356][ T985] usb 3-1: config 0 descriptor?? [ 191.439313][ T5920] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 191.449103][ C1] usb 3-1: NFC: Urb failure (status -71) [ 191.464249][ T985] usb 3-1: NFC: Unable to get FW version [ 191.503906][ T985] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -90 [ 191.525621][ T5911] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 191.714632][ T5920] usb 4-1: config 0 has an invalid interface number: 208 but max is 0 [ 191.724499][ T5920] usb 4-1: config 0 has no interface number 0 [ 191.790502][ T5920] usb 4-1: New USB device found, idVendor=12d1, idProduct=3a7d, bcdDevice=32.b5 [ 191.810878][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.865054][ T5920] usb 4-1: config 0 descriptor?? [ 191.928554][ T5949] usb 2-1: USB disconnect, device number 12 [ 191.977397][ T5920] option 4-1:0.208: GSM modem (1-port) converter detected [ 192.183742][ T985] usb 4-1: USB disconnect, device number 26 [ 192.193042][ T985] option 4-1:0.208: device disconnected [ 192.811533][ T5920] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 192.857290][ T7508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.376'. [ 192.984719][ T5920] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 192.993458][ T5920] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 193.004160][ T5920] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.014768][ T5920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 193.026108][ T5920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 193.038786][ T5920] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.048087][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.056241][ T5920] usb 2-1: Product: syz [ 193.060535][ T5920] usb 2-1: Manufacturer: syz [ 193.070913][ T5920] cdc_wdm 2-1:1.0: skipping garbage [ 193.076565][ T5920] cdc_wdm 2-1:1.0: skipping garbage [ 193.083834][ T5920] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 193.243669][ T5920] usb 3-1: USB disconnect, device number 21 [ 193.332928][ T5911] usb 2-1: USB disconnect, device number 13 [ 193.837323][ T7524] vti0: entered promiscuous mode [ 193.848243][ T7524] vti0: entered allmulticast mode [ 193.939682][ T5920] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 193.996632][ T7529] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 194.100916][ T5920] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 194.111167][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 194.126686][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 194.141272][ T5920] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 194.151834][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.159576][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 194.160478][ T5920] usb 3-1: Product: syz [ 194.172695][ T5920] usb 3-1: Manufacturer: syz [ 194.228310][ T5920] usb 3-1: SerialNumber: syz [ 194.241088][ T5920] usb 3-1: config 0 descriptor?? [ 194.250092][ T7522] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 194.263401][ T5920] usb 3-1: ucan: probing device on interface #0 [ 194.270037][ T5920] usb 3-1: ucan: invalid endpoint configuration [ 194.276326][ T5920] usb 3-1: ucan: probe failed; try to update the device firmware [ 194.399296][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 194.406448][ T24] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 194.417148][ T24] usb 4-1: config 0 has no interface number 0 [ 194.430188][ T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 194.440148][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.458359][ T24] usb 4-1: Product: syz [ 194.466423][ T24] usb 4-1: Manufacturer: syz [ 194.476008][ T5920] usb 3-1: USB disconnect, device number 22 [ 194.486604][ T24] usb 4-1: SerialNumber: syz [ 194.507111][ T24] usb 4-1: config 0 descriptor?? [ 194.516065][ T24] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 194.718284][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 194.742361][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 194.954847][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 13 [ 195.159927][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 195.168695][ T24] usb 4-1: USB disconnect, device number 27 [ 195.182713][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 195.309504][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 195.351320][ T24] quatech2 4-1:0.51: device disconnected [ 195.582327][ T5920] IPVS: starting estimator thread 0... [ 195.699308][ T7556] IPVS: using max 30 ests per chain, 72000 per kthread [ 196.720025][ T7575] kAFS: unable to lookup cell 'ÿ' [ 196.728835][ T7575] kAFS: unable to lookup cell '(,c¾Ì' [ 197.655468][ T7590] tipc: Started in network mode [ 197.661145][ T7590] tipc: Node identity 5a1e9c3690e2, cluster identity 4711 [ 197.671186][ T7590] tipc: Enabled bearer , priority 0 [ 197.681284][ T7590] syzkaller0: entered promiscuous mode [ 197.692388][ T7590] syzkaller0: entered allmulticast mode [ 197.749339][ T985] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 197.758395][ T7590] tipc: Resetting bearer [ 197.787874][ T7589] tipc: Resetting bearer [ 197.809870][ T7589] tipc: Disabling bearer [ 197.912194][ T985] usb 4-1: Using ep0 maxpacket: 32 [ 197.924051][ T985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 197.949329][ T985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 197.967920][ T985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.996318][ T985] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 198.007173][ T985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.015927][ T985] usb 4-1: Product: syz [ 198.032330][ T985] usb 4-1: Manufacturer: syz [ 198.037062][ T985] usb 4-1: SerialNumber: syz [ 198.061447][ T985] usb 4-1: config 0 descriptor?? [ 198.285644][ T5920] usb 4-1: USB disconnect, device number 28 [ 198.359405][ T985] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 198.531927][ T985] usb 2-1: Using ep0 maxpacket: 32 [ 198.582093][ T985] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 198.590742][ T985] usb 2-1: config 0 has no interface number 0 [ 198.607067][ T985] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 198.655817][ T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.683824][ T985] usb 2-1: Product: syz [ 198.693996][ T985] usb 2-1: Manufacturer: syz [ 198.709268][ T985] usb 2-1: SerialNumber: syz [ 198.728187][ T985] usb 2-1: config 0 descriptor?? [ 198.737890][ T985] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 198.777232][ T7614] netlink: 'syz.2.405': attribute type 1 has an invalid length. [ 199.048858][ T985] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 199.073923][ T985] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 199.243457][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 13 [ 199.452902][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 199.454069][ T10] usb 2-1: USB disconnect, device number 14 [ 199.482292][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 199.509451][ T5911] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 199.540408][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 199.559792][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.566726][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.615094][ T10] quatech2 2-1:0.51: device disconnected [ 199.669360][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 199.688880][ T5911] usb 4-1: config 0 has no interfaces? [ 199.738051][ T5911] usb 4-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice= 0.47 [ 199.768786][ T5911] usb 4-1: New USB device strings: Mfr=76, Product=0, SerialNumber=0 [ 199.797812][ T5911] usb 4-1: Manufacturer: syz [ 199.813621][ T5911] usb 4-1: config 0 descriptor?? [ 199.882793][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.407'. [ 200.033238][ T5911] usb 4-1: USB disconnect, device number 29 [ 200.475974][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 200.475993][ T30] audit: type=1326 audit(1769972508.556:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247979aeb9 code=0x7ffc0000 [ 200.551813][ T30] audit: type=1326 audit(1769972508.556:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247979aeb9 code=0x7ffc0000 [ 200.579453][ T5911] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 200.636982][ T30] audit: type=1326 audit(1769972508.606:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f247979aeb9 code=0x7ffc0000 [ 200.755542][ T30] audit: type=1326 audit(1769972508.836:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247979aeb9 code=0x7ffc0000 [ 200.778372][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 200.807941][ T5911] usb 3-1: too many configurations: 149, using maximum allowed: 8 [ 200.853429][ T5911] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 200.861671][ T5911] usb 3-1: can't read configurations, error -61 [ 200.887141][ T30] audit: type=1326 audit(1769972508.836:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247979aeb9 code=0x7ffc0000 [ 200.956359][ T30] audit: type=1326 audit(1769972508.896:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f247979aeb9 code=0x7ffc0000 [ 201.000432][ T30] audit: type=1326 audit(1769972508.896:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247979aeb9 code=0x7ffc0000 [ 201.025212][ T5911] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 201.085500][ T30] audit: type=1326 audit(1769972508.896:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247979aeb9 code=0x7ffc0000 [ 201.148941][ T30] audit: type=1326 audit(1769972508.896:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f247979aeb9 code=0x7ffc0000 [ 201.206316][ T30] audit: type=1326 audit(1769972508.896:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247979aeb9 code=0x7ffc0000 [ 201.236915][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 201.275803][ T5911] usb 3-1: too many configurations: 149, using maximum allowed: 8 [ 201.327707][ T5911] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 201.343659][ T5911] usb 3-1: can't read configurations, error -61 [ 201.367334][ T5911] usb usb3-port1: attempt power cycle [ 201.789322][ T5911] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 201.810679][ T7641] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 201.832038][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 201.837845][ T5911] usb 3-1: too many configurations: 149, using maximum allowed: 8 [ 201.850498][ T5911] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 201.858588][ T5911] usb 3-1: can't read configurations, error -61 [ 201.887016][ T7641] bond2 (unregistering): Released all slaves [ 201.921174][ T5949] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 202.082776][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 202.160009][ T5949] usb 2-1: no configurations [ 202.165978][ T5949] usb 2-1: can't read configurations, error -22 [ 202.200761][ T5911] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 202.220073][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 202.269279][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 202.287902][ T5911] usb 3-1: too many configurations: 149, using maximum allowed: 8 [ 202.299463][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 202.306970][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 202.318664][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 202.330466][ T5949] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 202.338338][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 202.348738][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.374471][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 202.387051][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 202.405945][ T5911] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 202.415690][ T10] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 202.436727][ T9] usb 4-1: config 0 has no interfaces? [ 202.443302][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.455779][ T9] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 202.465019][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.473412][ T10] usb 6-1: Product: syz [ 202.479091][ T10] usb 6-1: Manufacturer: syz [ 202.479116][ T5911] usb 3-1: can't read configurations, error -61 [ 202.485348][ T9] usb 4-1: Product: syz [ 202.496859][ T10] usb 6-1: SerialNumber: syz [ 202.502146][ T9] usb 4-1: Manufacturer: syz [ 202.507819][ T5911] usb usb3-port1: unable to enumerate USB device [ 202.510132][ T9] usb 4-1: SerialNumber: syz [ 202.524479][ T10] usb 6-1: config 0 descriptor?? [ 202.535012][ T5949] usb 2-1: no configurations [ 202.539945][ T5949] usb 2-1: can't read configurations, error -22 [ 202.556245][ T5949] usb usb2-port1: attempt power cycle [ 202.566723][ T9] usb 4-1: config 0 descriptor?? [ 202.766449][ T7650] tipc: Enabled bearer , priority 0 [ 202.777679][ T7650] syzkaller0: entered promiscuous mode [ 202.787027][ T7650] syzkaller0: entered allmulticast mode [ 202.807763][ T7650] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 202.823582][ T7650] tipc: Resetting bearer [ 202.832658][ T7649] tipc: Resetting bearer [ 202.883201][ T7649] tipc: Disabling bearer [ 202.943097][ T10] usb 6-1: USB disconnect, device number 17 [ 202.953548][ T5949] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 202.984519][ T5949] usb 2-1: no configurations [ 202.989420][ T5949] usb 2-1: can't read configurations, error -22 [ 203.119410][ T5949] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 203.204156][ T5949] usb 2-1: no configurations [ 203.209887][ T5949] usb 2-1: can't read configurations, error -22 [ 203.222785][ T5949] usb usb2-port1: unable to enumerate USB device [ 203.243762][ T7655] netdevsim netdevsim2: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 203.261129][ T7655] netlink: 'syz.2.416': attribute type 10 has an invalid length. [ 203.261149][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'. [ 203.302355][ T7656] bridge_slave_0: left allmulticast mode [ 203.311087][ T7656] bridge_slave_0: left promiscuous mode [ 203.389478][ T7656] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.426067][ T7656] bridge_slave_1: left allmulticast mode [ 203.436978][ T7656] bridge_slave_1: left promiscuous mode [ 203.448776][ T7656] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.537780][ T7656] bond0: (slave bond_slave_0): Releasing backup interface [ 203.567387][ T7656] bond0: (slave bond_slave_1): Releasing backup interface [ 203.593587][ T7656] team0: Port device team_slave_0 removed [ 203.617235][ T7656] team0: Port device team_slave_1 removed [ 203.624539][ T7656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.633570][ T7656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.650365][ T7656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.660377][ T7656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.675890][ T7656] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 203.696815][ T7655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.711734][ T7655] team0: Port device bond0 added [ 203.824529][ T7657] team0 (unregistering): Port device bond0 removed [ 204.086300][ T7675] netlink: 24 bytes leftover after parsing attributes in process `syz.5.419'. [ 204.519362][ T5949] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 204.674153][ T5912] usb 4-1: USB disconnect, device number 30 [ 204.689369][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 204.714902][ T5949] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 204.748209][ T5949] usb 3-1: config 0 has no interface number 0 [ 204.760504][ T5949] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 204.773933][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.784888][ T5949] usb 3-1: Product: syz [ 204.791002][ T5949] usb 3-1: Manufacturer: syz [ 204.804380][ T5949] usb 3-1: SerialNumber: syz [ 204.822060][ T5949] usb 3-1: config 0 descriptor?? [ 204.831534][ T5949] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 204.877780][ T7686] fuse: Bad value for 'fd' [ 205.055055][ T5949] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 205.117514][ T5949] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 205.373669][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 13 [ 205.514223][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 205.514243][ T30] audit: type=1326 audit(1769972513.596:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.1.427" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f247979aeb9 code=0x0 [ 205.580338][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 205.582362][ T5911] usb 3-1: USB disconnect, device number 27 [ 205.666494][ T5911] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 205.721862][ T5911] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 205.786035][ T5911] quatech2 3-1:0.51: device disconnected [ 206.574986][ T7712] netlink: 56 bytes leftover after parsing attributes in process `syz.3.429'. [ 206.726994][ T7724] netlink: 36 bytes leftover after parsing attributes in process `syz.2.432'. [ 206.748655][ T7724] netem: incorrect gi model size [ 206.767378][ T7724] netem: change failed [ 207.310133][ T5949] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 207.440466][ T5949] usb 3-1: device descriptor read/64, error -71 [ 207.580329][ T7738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.435'. [ 207.679311][ T5949] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 207.743486][ T7742] loop2: detected capacity change from 0 to 7 [ 207.795688][ T7742] Dev loop2: unable to read RDB block 7 [ 207.819699][ T5949] usb 3-1: device descriptor read/64, error -71 [ 207.834017][ T7742] loop2: unable to read partition table [ 207.875284][ T7742] loop2: partition table beyond EOD, truncated [ 207.916156][ T7742] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 207.951444][ T5949] usb usb3-port1: attempt power cycle [ 208.309412][ T5949] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 208.340132][ T5949] usb 3-1: device descriptor read/8, error -71 [ 208.631751][ T5949] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 208.660541][ T5949] usb 3-1: device descriptor read/8, error -71 [ 208.793824][ T5949] usb usb3-port1: unable to enumerate USB device [ 208.800456][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 208.962113][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 208.978473][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 208.987631][ T9] usb 4-1: config 0 has no interface number 0 [ 209.004598][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 209.014022][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.024837][ T9] usb 4-1: Product: syz [ 209.038593][ T9] usb 4-1: Manufacturer: syz [ 209.069468][ T9] usb 4-1: SerialNumber: syz [ 209.081849][ T9] usb 4-1: config 0 descriptor?? [ 209.102848][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 209.320816][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 209.355263][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 209.504920][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 13 [ 209.867313][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 209.918382][ T9] usb 4-1: USB disconnect, device number 31 [ 209.960440][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 210.016395][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 210.069643][ T9] quatech2 4-1:0.51: device disconnected [ 210.920260][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 211.100069][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 211.125024][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 211.141388][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 211.161561][ T10] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 211.171948][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.201745][ T10] usb 4-1: Product: syz [ 211.205994][ T10] usb 4-1: Manufacturer: syz [ 211.210990][ T10] usb 4-1: SerialNumber: syz [ 211.279094][ T7781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.448'. [ 211.414106][ T10] usb 4-1: config 0 descriptor?? [ 211.437608][ T7765] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 211.476763][ T10] usb 4-1: ucan: probing device on interface #0 [ 211.485662][ T10] usb 4-1: ucan: invalid endpoint configuration [ 211.500410][ T10] usb 4-1: ucan: probe failed; try to update the device firmware [ 211.751164][ T5912] usb 4-1: USB disconnect, device number 32 [ 212.899329][ T5911] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 213.061346][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 213.092132][ T5911] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 213.131274][ T5911] usb 4-1: config 0 has no interface number 0 [ 213.166243][ T5911] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 213.212981][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.242152][ T5911] usb 4-1: Product: syz [ 213.246368][ T5911] usb 4-1: Manufacturer: syz [ 213.268598][ T5911] usb 4-1: SerialNumber: syz [ 213.280313][ T5911] usb 4-1: config 0 descriptor?? [ 213.331481][ T5911] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 213.341252][ T7820] sctp: [Deprecated]: syz.5.456 (pid 7820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.341252][ T7820] Use struct sctp_sack_info instead [ 213.702323][ T5911] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 213.779512][ T5911] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 213.788916][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 213.832581][ T5911] usb 4-1: USB disconnect, device number 33 [ 214.011880][ T5911] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 214.281201][ T5911] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 214.358876][ T5911] quatech2 4-1:0.51: device disconnected [ 214.491139][ T7834] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.319314][ T5911] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 215.471876][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 215.500186][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 215.533668][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 215.576529][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 215.601138][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 215.660454][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 215.713905][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 215.752147][ T5911] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 215.772076][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.781951][ T5911] usb 4-1: Product: syz [ 215.796609][ T5911] usb 4-1: Manufacturer: syz [ 215.804967][ T5911] usb 4-1: SerialNumber: syz [ 215.822794][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 215.839553][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 215.853846][ T5911] usb 4-1: config 0 descriptor?? [ 215.885100][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 215.908317][ T10] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 215.919370][ T5912] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 215.938673][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.960515][ T10] usb 3-1: Product: syz [ 215.964779][ T10] usb 3-1: Manufacturer: syz [ 215.982474][ T10] usb 3-1: SerialNumber: syz [ 215.993448][ T10] usb 3-1: config 0 descriptor?? [ 215.999800][ T7850] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 216.027882][ T10] usb 3-1: ucan: probing device on interface #0 [ 216.034379][ T10] usb 3-1: ucan: invalid endpoint configuration [ 216.049427][ T10] usb 3-1: ucan: probe failed; try to update the device firmware [ 216.076388][ T7862] netlink: 'syz.5.467': attribute type 1 has an invalid length. [ 216.119398][ T5912] usb 2-1: device descriptor read/64, error -71 [ 216.225066][ T10] usb 3-1: USB disconnect, device number 32 [ 216.275532][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 216.303065][ T5911] input input15: Device does not respond to id packet M [ 216.334393][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 216.340983][ T5911] input input15: Device does not respond to id packet P [ 216.348499][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 216.356352][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.467'. [ 216.367869][ T5912] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 216.380847][ T5911] input input15: Device does not respond to id packet B [ 216.392722][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 216.399333][ T5911] input input15: Device does not respond to id packet N [ 216.407901][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 216.422631][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 216.431583][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 216.439981][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 216.464746][ T5911] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 216.520248][ T5912] usb 2-1: device descriptor read/64, error -71 [ 216.528392][ T5911] usb 4-1: USB disconnect, device number 34 [ 216.649609][ T5912] usb usb2-port1: attempt power cycle [ 217.099341][ T5912] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 217.160628][ T5912] usb 2-1: device descriptor read/8, error -71 [ 217.581179][ T5912] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 217.660164][ T5912] usb 2-1: device descriptor read/8, error -71 [ 217.776422][ T5912] usb usb2-port1: unable to enumerate USB device [ 218.089316][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 218.259459][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 218.266437][ T24] usb 4-1: config 0 has no interfaces? [ 218.277886][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 218.297503][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 218.697916][ T24] usb 4-1: Manufacturer: syz [ 218.919139][ T24] usb 4-1: config 0 descriptor?? [ 218.977247][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806e333c00: rx timeout, send abort [ 219.405855][ T7899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.476'. [ 219.478073][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e47b800: rx timeout, send abort [ 219.486698][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806e333c00: abort rx timeout. Force session deactivation [ 219.977113][ T7901] netlink: 'syz.1.476': attribute type 6 has an invalid length. [ 219.986662][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e47b800: abort rx timeout. Force session deactivation [ 220.184403][ T7901] netlink: 'syz.1.476': attribute type 7 has an invalid length. [ 220.196067][ T7901] netlink: 'syz.1.476': attribute type 8 has an invalid length. [ 220.419744][ T7910] ptrace attach of "./syz-executor exec"[7911] was attempted by "./syz-executor exec"[7910] [ 220.909325][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 221.064761][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 221.095361][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 221.157102][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 221.192684][ T24] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 221.216880][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.230606][ T7928] syzkaller1: entered promiscuous mode [ 221.247862][ T24] usb 2-1: Product: syz [ 221.247903][ T7928] syzkaller1: entered allmulticast mode [ 221.278674][ T24] usb 2-1: Manufacturer: syz [ 221.284332][ T24] usb 2-1: SerialNumber: syz [ 221.306032][ T24] usb 2-1: config 0 descriptor?? [ 221.324264][ T7918] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 221.345001][ T24] usb 2-1: ucan: probing device on interface #0 [ 221.357597][ T24] usb 2-1: ucan: invalid endpoint configuration [ 221.394019][ T24] usb 2-1: ucan: probe failed; try to update the device firmware [ 221.813539][ T24] usb 2-1: USB disconnect, device number 23 [ 221.981544][ T9] usb 4-1: USB disconnect, device number 35 [ 222.121430][ T7933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.235524][ T7900] syz.5.475 (7900): drop_caches: 1 [ 222.268384][ T7897] syz.5.475 (7897): drop_caches: 1 [ 222.791447][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 222.989171][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.999660][ T873] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 223.025232][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.041167][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 223.055048][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 223.071427][ T24] usb 4-1: SerialNumber: syz [ 223.155779][ T7953] ima: Can not allocate md5 (reason: -2) [ 223.166923][ T873] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.177622][ T873] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 223.190443][ T30] audit: type=1800 audit(1769972531.266:343): pid=7953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.489" name="/" dev="fuse" ino=1 res=0 errno=0 [ 223.194966][ T873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.262735][ T873] usb 6-1: config 0 descriptor?? [ 223.284335][ T873] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 223.298160][ T24] usb 4-1: 0:2 : does not exist [ 223.347857][ T24] usb 4-1: USB disconnect, device number 36 [ 223.811940][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.149952][ T7966] netlink: 32 bytes leftover after parsing attributes in process `syz.3.491'. [ 224.338983][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 224.363538][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 224.408089][ T5920] usb 6-1: USB disconnect, device number 18 [ 225.769522][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 225.889312][ T873] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 225.949363][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 225.959918][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 225.999414][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 226.028562][ T10] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 226.038499][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.059313][ T873] usb 4-1: Using ep0 maxpacket: 32 [ 226.068509][ T10] usb 2-1: Product: syz [ 226.072997][ T10] usb 2-1: Manufacturer: syz [ 226.077638][ T10] usb 2-1: SerialNumber: syz [ 226.092408][ T873] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.104439][ T10] usb 2-1: config 0 descriptor?? [ 226.114627][ T7986] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 226.131066][ T10] usb 2-1: ucan: probing device on interface #0 [ 226.145898][ T10] usb 2-1: ucan: invalid endpoint configuration [ 226.149886][ T873] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.159329][ T10] usb 2-1: ucan: probe failed; try to update the device firmware [ 226.181963][ T7998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.501'. [ 226.279956][ T873] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 226.297359][ T873] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 226.329737][ T873] usb 4-1: Product: syz [ 226.344543][ T10] usb 2-1: USB disconnect, device number 24 [ 226.368475][ T873] usb 4-1: Manufacturer: syz [ 226.431334][ T873] hub 4-1:4.0: USB hub found [ 226.636798][ T873] hub 4-1:4.0: 2 ports detected [ 226.734391][ T8009] netlink: 27 bytes leftover after parsing attributes in process `syz.5.503'. [ 227.228060][ T8020] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 227.375342][ T7990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.384905][ T7990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.398726][ T7990] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 227.407632][ T10] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 227.642285][ T10] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 227.654846][ T10] usb 2-1: config 0 has no interface number 0 [ 227.668289][ T10] usb 2-1: config 0 interface 235 has no altsetting 0 [ 227.695658][ T873] usb 4-1: USB disconnect, device number 37 [ 227.837619][ T8030] openvswitch: netlink: Geneve option length err (len 4572, max 255). [ 228.761664][ T8045] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 228.768418][ T8045] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 228.779891][ T8045] vhci_hcd vhci_hcd.0: Device attached [ 228.831473][ T8049] netlink: 27 bytes leftover after parsing attributes in process `syz.0.514'. [ 228.927760][ T9] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 229.059694][ T5949] usb 44-1: SetAddress Request (2) to port 0 [ 229.073320][ T5949] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 229.109032][ T8046] vhci_hcd: connection reset by peer [ 229.118756][ T50] vhci_hcd vhci_hcd.5: stop threads [ 229.130114][ T50] vhci_hcd vhci_hcd.5: release socket [ 229.137694][ T9] usb 4-1: config 0 has an invalid interface number: 65 but max is 3 [ 229.152909][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.164595][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 229.174866][ T9] usb 4-1: config 0 has no interface number 0 [ 229.181291][ T50] vhci_hcd vhci_hcd.5: disconnect device [ 229.189686][ T9] usb 4-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=91.34 [ 229.201487][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.239294][ T9] usb 4-1: Product: syz [ 229.245673][ T9] usb 4-1: Manufacturer: syz [ 229.258073][ T9] usb 4-1: SerialNumber: syz [ 229.274493][ T9] usb 4-1: config 0 descriptor?? [ 229.300847][ T873] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 229.401648][ T8058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.517'. [ 229.461394][ T873] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 229.506699][ T873] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 229.547914][ T873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 229.563207][ T9] flexcop_usb: set interface failed. [ 229.571834][ T9] b2c2_flexcop_usb 4-1:0.65: probe with driver b2c2_flexcop_usb failed with error -22 [ 229.591470][ T9] usb 4-1: USB disconnect, device number 38 [ 229.629303][ T873] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 229.648656][ T873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.656968][ T873] usb 3-1: Product: syz [ 229.664003][ T873] usb 3-1: Manufacturer: syz [ 229.671998][ T873] usb 3-1: SerialNumber: syz [ 229.738042][ T873] usb 3-1: config 0 descriptor?? [ 229.773376][ T8052] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 229.808916][ T873] usb 3-1: ucan: probing device on interface #0 [ 229.815543][ T873] usb 3-1: ucan: invalid endpoint configuration [ 229.822399][ T873] usb 3-1: ucan: probe failed; try to update the device firmware [ 230.007766][ T873] usb 3-1: USB disconnect, device number 33 [ 230.108209][ T10] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=92.0d [ 230.149532][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.181165][ T10] usb 2-1: config 0 descriptor?? [ 230.205484][ T10] usb 2-1: can't set config #0, error -71 [ 230.220818][ T10] usb 2-1: USB disconnect, device number 25 [ 230.369330][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 230.461477][ T8083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'. [ 230.529389][ T873] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 230.537281][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 230.561783][ T24] usb 6-1: config 10 has an invalid interface number: 211 but max is 0 [ 230.589892][ T24] usb 6-1: config 10 has no interface number 0 [ 230.604648][ T24] usb 6-1: config 10 interface 211 altsetting 14 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 230.626828][ T24] usb 6-1: config 10 interface 211 altsetting 14 has a duplicate endpoint with address 0xF, skipping [ 230.655715][ T24] usb 6-1: config 10 interface 211 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 230.709786][ T24] usb 6-1: config 10 interface 211 altsetting 14 endpoint 0x9 has an invalid bInterval 222, changing to 7 [ 230.730374][ T873] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.744240][ T873] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.754086][ T24] usb 6-1: config 10 interface 211 has no altsetting 0 [ 230.765127][ T873] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.775290][ T873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.788986][ T873] usb 4-1: Product: syz [ 230.796413][ T873] usb 4-1: Manufacturer: syz [ 230.796538][ T24] usb 6-1: string descriptor 0 read error: -22 [ 230.817793][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=0216, bcdDevice=99.7e [ 230.827286][ T873] usb 4-1: SerialNumber: syz [ 230.832567][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.874668][ T24] appletouch 6-1:10.211: Could not find int-in endpoint [ 230.904581][ T24] appletouch 6-1:10.211: probe with driver appletouch failed with error -5 [ 230.916348][ T24] usbhid 6-1:10.211: couldn't find an input interrupt endpoint [ 231.055114][ T873] usb 4-1: 0:2 : does not exist [ 231.066392][ T873] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 231.147618][ T873] usb 4-1: USB disconnect, device number 39 [ 231.219100][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.251123][ T24] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 231.326960][ T8108] netlink: 36 bytes leftover after parsing attributes in process `syz.1.530'. [ 231.349426][ T8108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.530'. [ 231.361285][ T8108] netlink: 36 bytes leftover after parsing attributes in process `syz.1.530'. [ 231.370775][ T8108] netlink: 36 bytes leftover after parsing attributes in process `syz.1.530'. [ 231.440846][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 231.450481][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 231.461313][ T24] usb 3-1: config index 0 descriptor too short (expected 14385, got 133) [ 231.481520][ T24] usb 3-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 231.494208][ T24] usb 3-1: config 52 has an invalid descriptor of length 0, skipping remainder of the config [ 231.505246][ T24] usb 3-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 231.526037][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.541201][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.549924][ T10] usb 6-1: USB disconnect, device number 19 [ 231.556527][ T24] usb 3-1: Product: syz [ 231.566990][ T24] usb 3-1: Manufacturer: syz [ 231.600210][ T24] usb 3-1: SerialNumber: syz [ 232.186671][ T8119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.533'. [ 232.585600][ T8121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.103797][ T5840] Bluetooth: hci4: unexpected event for opcode 0x200d [ 234.127217][ T8146] 8021q: VLANs not supported on ip_vti0 [ 234.183315][ T5949] usb 44-1: device descriptor read/8, error -110 [ 234.262487][ T24] usb 3-1: USB disconnect, device number 34 [ 234.339339][ T985] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 234.420535][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 234.500988][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 234.501566][ T985] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 234.536952][ T985] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 234.568936][ T985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 234.592196][ T985] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 234.602447][ T985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.619362][ T985] usb 6-1: Product: syz [ 234.622544][ T5949] usb usb44-port1: attempt power cycle [ 234.633191][ T10] usb 4-1: config 0 has an invalid interface number: 37 but max is 0 [ 234.644796][ T10] usb 4-1: config 0 has no interface number 0 [ 234.662953][ T985] usb 6-1: Manufacturer: syz [ 234.673377][ T8152] IPv6: NLM_F_CREATE should be specified when creating new route [ 234.685796][ T985] usb 6-1: SerialNumber: syz [ 234.690689][ T10] usb 4-1: New USB device found, idVendor=2639, idProduct=0003, bcdDevice=fd.62 [ 234.710450][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.719989][ T985] usb 6-1: config 0 descriptor?? [ 234.745848][ T8144] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 234.755035][ T10] usb 4-1: Product: syz [ 234.767197][ T985] usb 6-1: ucan: probing device on interface #0 [ 234.771322][ T10] usb 4-1: Manufacturer: syz [ 234.786477][ T985] usb 6-1: ucan: invalid endpoint configuration [ 234.792914][ T10] usb 4-1: SerialNumber: syz [ 234.801781][ T10] usb 4-1: config 0 descriptor?? [ 234.827205][ T985] usb 6-1: ucan: probe failed; try to update the device firmware [ 234.899296][ T798] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 234.974167][ T10] usb 6-1: USB disconnect, device number 20 [ 235.013334][ T9] usb 4-1: USB disconnect, device number 40 [ 235.066683][ T798] usb 3-1: device descriptor read/64, error -71 [ 235.148763][ T8157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.177529][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.543'. [ 235.225452][ T5949] usb usb44-port1: unable to enumerate USB device [ 235.359296][ T798] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 235.519334][ T798] usb 3-1: device descriptor read/64, error -71 [ 235.629577][ T798] usb usb3-port1: attempt power cycle [ 235.733105][ T8162] netlink: 'syz.3.545': attribute type 21 has an invalid length. [ 235.748679][ T8164] netlink: 'syz.3.545': attribute type 21 has an invalid length. [ 235.759286][ T8162] netlink: 176 bytes leftover after parsing attributes in process `syz.3.545'. [ 235.782252][ T8164] netlink: 176 bytes leftover after parsing attributes in process `syz.3.545'. [ 235.999375][ T798] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 236.020387][ T798] usb 3-1: device descriptor read/8, error -71 [ 236.279378][ T798] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 236.339115][ T8176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.549'. [ 236.370511][ T798] usb 3-1: device descriptor read/8, error -71 [ 236.482201][ T798] usb usb3-port1: unable to enumerate USB device [ 237.969353][ T798] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 238.195391][ T798] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 238.241778][ T798] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 238.266957][ T798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 238.302451][ T798] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 238.321264][ T798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.341147][ T798] usb 2-1: Product: syz [ 238.348351][ T798] usb 2-1: Manufacturer: syz [ 238.363703][ T798] usb 2-1: SerialNumber: syz [ 238.381484][ T798] usb 2-1: config 0 descriptor?? [ 238.406188][ T8194] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 238.436452][ T798] usb 2-1: ucan: probing device on interface #0 [ 238.458746][ T798] usb 2-1: ucan: invalid endpoint configuration [ 238.472106][ T798] usb 2-1: ucan: probe failed; try to update the device firmware [ 238.654666][ T985] usb 2-1: USB disconnect, device number 26 [ 239.299080][ T8220] IPVS: sh: FWM 3 0x00000003 - no destination available [ 239.350549][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 239.578226][ T8231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.564'. [ 239.929939][ T798] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 240.099423][ T798] usb 2-1: Using ep0 maxpacket: 8 [ 240.108760][ T798] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 240.118927][ T798] usb 2-1: config 179 has no interface number 0 [ 240.125568][ T798] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 240.137100][ T798] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 240.156739][ T798] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 240.170287][ T798] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 240.182128][ T798] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 240.197906][ T798] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 240.207277][ T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.216252][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 240.237747][ T8234] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 240.392610][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 240.406497][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.423296][ T9] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 240.433012][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.448996][ T9] usb 4-1: config 0 descriptor?? [ 240.487973][ T798] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input16 [ 240.574804][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'. [ 240.641871][ T8257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.571'. [ 240.713965][ T985] usb 2-1: USB disconnect, device number 27 [ 240.714000][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 240.728487][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 240.918139][ T9] belkin 0003:050D:3201.0007: unknown main item tag 0x3 [ 240.948885][ T9] belkin 0003:050D:3201.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 050d:3201] on usb-dummy_hcd.3-1/input0 [ 241.109294][ T798] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 241.117343][ T5912] usb 4-1: USB disconnect, device number 41 [ 241.204261][ T8265] fido_id[8265]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 241.309286][ T798] usb 6-1: Using ep0 maxpacket: 16 [ 241.335574][ T798] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 241.358847][ T798] usb 6-1: config 0 has no interface number 0 [ 241.380803][ T798] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 241.405807][ T798] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 241.431937][ T798] usb 6-1: config 0 interface 41 has no altsetting 0 [ 241.456616][ T798] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 241.468912][ T798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.492040][ T798] usb 6-1: Product: syz [ 241.505472][ T798] usb 6-1: Manufacturer: syz [ 241.527052][ T798] usb 6-1: SerialNumber: syz [ 241.553619][ T798] usb 6-1: config 0 descriptor?? [ 241.568977][ T8260] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 241.581601][ T8260] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 241.807616][ T8260] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 241.829418][ T8260] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 241.944324][ T8271] netlink: 'syz.1.575': attribute type 39 has an invalid length. [ 242.475603][ T798] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 242.745254][ T8293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.581'. [ 242.875985][ T8295] kvm: emulating exchange as write [ 242.946562][ T8301] can: request_module (can-proto-4) failed. [ 243.352707][ T8308] x_tables: duplicate underflow at hook 4 [ 243.539269][ T8320] netlink: 'syz.1.587': attribute type 4 has an invalid length. [ 243.594107][ T8320] netlink: 'syz.1.587': attribute type 4 has an invalid length. [ 243.943395][ T5912] IPVS: starting estimator thread 0... [ 243.996224][ T798] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 244.040968][ T798] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 244.060213][ T8331] IPVS: using max 38 ests per chain, 91200 per kthread [ 244.082557][ T798] usb 6-1: USB disconnect, device number 21 [ 244.836485][ T8348] loop5: detected capacity change from 0 to 7 [ 244.843667][ T8348] loop5: [ 244.846830][ T8348] loop5: partition table partially beyond EOD, truncated [ 244.930879][ T985] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 244.984203][ T8353] netlink: 24 bytes leftover after parsing attributes in process `syz.5.595'. [ 245.130704][ T985] usb 3-1: Using ep0 maxpacket: 32 [ 245.151174][ T985] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 245.160243][ T985] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 245.195718][ T985] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 245.219301][ T985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.244993][ T985] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 245.259843][ T8365] binder_alloc: 8363: binder_alloc_buf, no vma [ 245.282998][ T985] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 245.308794][ T985] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 245.326989][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.369056][ T985] usb 3-1: config 0 descriptor?? [ 245.535804][ T8370] snd_aloop snd_aloop.0: control 5:-2147483647:0:syz1:65535 is already present [ 245.592141][ T985] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 245.631974][ T985] usb 3-1: USB disconnect, device number 39 [ 245.669495][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 245.708864][ T985] usblp0: removed [ 245.849982][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.861827][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 245.873313][ T10] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 245.883913][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.896101][ T10] usb 4-1: Product: syz [ 245.901820][ T10] usb 4-1: Manufacturer: syz [ 245.906587][ T10] usb 4-1: SerialNumber: syz [ 245.922059][ T10] usb 4-1: config 0 descriptor?? [ 245.941105][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 245.956650][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 245.966932][ T10] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 245.975836][ T10] usb 4-1: media controller created [ 245.991356][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.039780][ T10] DVB: Unable to find symbol tda10046_attach() [ 246.045969][ T10] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 246.062303][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 246.122862][ T985] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 246.309889][ T985] usb 3-1: Using ep0 maxpacket: 32 [ 246.330747][ T985] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 246.340323][ T985] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 246.359825][ T985] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 246.369080][ T985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 246.431200][ T985] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 246.444592][ T985] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 246.490410][ T985] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 246.512048][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.550815][ T985] usb 3-1: config 0 descriptor?? [ 246.719304][ T798] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 246.782486][ T985] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 246.879473][ T798] usb 6-1: device descriptor read/64, error -71 [ 247.119308][ T798] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 247.245252][ T9] usb 3-1: USB disconnect, device number 40 [ 247.272833][ T798] usb 6-1: device descriptor read/64, error -71 [ 247.312614][ T9] usblp0: removed [ 247.365180][ T10] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 247.400451][ T798] usb usb6-port1: attempt power cycle [ 247.412493][ T10] usb 4-1: USB disconnect, device number 42 [ 247.779467][ T798] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 247.840252][ T798] usb 6-1: device descriptor read/8, error -71 [ 248.000191][ T10] IPVS: starting estimator thread 0... [ 248.010476][ T30] audit: type=1326 audit(1769972556.096:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.3.615" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d9919aeb9 code=0x0 [ 248.102884][ T798] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 248.117887][ T8423] IPVS: using max 38 ests per chain, 91200 per kthread [ 248.140470][ T798] usb 6-1: device descriptor read/8, error -71 [ 248.250244][ T798] usb usb6-port1: unable to enumerate USB device [ 248.449373][ T985] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 248.599434][ T985] usb 2-1: Using ep0 maxpacket: 32 [ 248.607928][ T985] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 248.618471][ T985] usb 2-1: config 0 has no interface number 0 [ 248.624808][ T985] usb 2-1: config 0 interface 89 has no altsetting 0 [ 248.634787][ T985] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 248.644427][ T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.653159][ T985] usb 2-1: Product: syz [ 248.657488][ T985] usb 2-1: Manufacturer: syz [ 248.662323][ T985] usb 2-1: SerialNumber: syz [ 248.670323][ T985] usb 2-1: config 0 descriptor?? [ 248.691622][ T985] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 248.707939][ T985] em28xx 2-1:0.89: Video interface 89 found: bulk [ 249.038949][ T13] IPVS: stop unused estimator thread 0... [ 249.109494][ T798] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 249.279323][ T798] usb 4-1: Using ep0 maxpacket: 32 [ 249.293992][ T798] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 249.312480][ T798] usb 4-1: config 0 has no interface number 0 [ 249.319445][ T985] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 249.328474][ T798] usb 4-1: config 0 interface 184 has no altsetting 0 [ 249.344167][ T798] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 249.359944][ T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.390363][ T798] usb 4-1: Product: syz [ 249.403407][ T798] usb 4-1: Manufacturer: syz [ 249.422131][ T798] usb 4-1: SerialNumber: syz [ 249.459923][ T798] usb 4-1: config 0 descriptor?? [ 249.498162][ T798] smsc75xx v1.0.0 [ 249.596789][ T8458] binder: binder_mmap: 8457 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 249.754556][ T985] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 249.769067][ T985] em28xx 2-1:0.89: board has no eeprom [ 250.059278][ T985] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 250.078084][ T985] em28xx 2-1:0.89: analog set to bulk mode. [ 250.095662][ T873] em28xx 2-1:0.89: Registering V4L2 extension [ 250.264105][ T985] usb 2-1: USB disconnect, device number 28 [ 250.275269][ T873] em28xx 2-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 250.288538][ T985] em28xx 2-1:0.89: Disconnecting em28xx [ 250.294930][ T873] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 250.311845][ T798] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 250.342792][ T798] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 250.353262][ T873] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 250.378329][ T873] em28xx 2-1:0.89: No AC97 audio processor [ 250.388024][ T798] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 250.419380][ T798] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 250.433572][ T798] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 250.450312][ T798] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 250.462608][ T873] usb 2-1: Decoder not found [ 250.475863][ T798] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 250.506792][ T873] em28xx 2-1:0.89: failed to create media graph [ 250.538206][ T873] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 250.570427][ T873] em28xx 2-1:0.89: Registering snapshot button... [ 250.574552][ T8465] ================================================================== [ 250.584983][ T8465] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 250.592424][ T8465] Read of size 8 at addr ffff8880581cc740 by task v4l_id/8465 [ 250.599905][ T8465] [ 250.602255][ T8465] CPU: 0 UID: 0 PID: 8465 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 250.602278][ T8465] Tainted: [L]=SOFTLOCKUP [ 250.602283][ T8465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 250.602299][ T8465] Call Trace: [ 250.602306][ T8465] [ 250.602312][ T8465] dump_stack_lvl+0xe8/0x150 [ 250.602334][ T8465] print_report+0xba/0x230 [ 250.602350][ T8465] ? v4l2_fh_open+0xac/0x420 [ 250.602366][ T8465] kasan_report+0x117/0x150 [ 250.602384][ T8465] ? v4l2_fh_open+0xac/0x420 [ 250.602403][ T8465] v4l2_fh_open+0xac/0x420 [ 250.602420][ T8465] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 250.602441][ T8465] em28xx_v4l2_open+0x157/0x9a0 [ 250.602464][ T8465] ? do_raw_spin_lock+0x12b/0x2f0 [ 250.602484][ T8465] v4l2_open+0x1bf/0x3a0 [ 250.602504][ T8465] chrdev_open+0x4cd/0x5e0 [ 250.602520][ T8465] ? __pfx_chrdev_open+0x10/0x10 [ 250.602534][ T8465] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 250.602555][ T8465] ? __pfx_chrdev_open+0x10/0x10 [ 250.602568][ T8465] do_dentry_open+0x7ce/0x1420 [ 250.602590][ T8465] vfs_open+0x3b/0x340 [ 250.602605][ T8465] ? path_openat+0x346e/0x3e20 [ 250.602626][ T8465] path_openat+0x3486/0x3e20 [ 250.602657][ T8465] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 250.602679][ T8465] ? getname_flags+0xb7/0x540 [ 250.602694][ T8465] ? __pfx_path_openat+0x10/0x10 [ 250.602715][ T8465] ? __lock_acquire+0x6b5/0x2cf0 [ 250.602741][ T8465] do_filp_open+0x22d/0x490 [ 250.602762][ T8465] ? __pfx_do_filp_open+0x10/0x10 [ 250.602791][ T8465] ? _raw_spin_unlock+0x28/0x50 [ 250.602812][ T8465] ? alloc_fd+0x64b/0x6c0 [ 250.602831][ T8465] do_sys_openat2+0x12f/0x220 [ 250.602849][ T8465] ? __pfx_do_sys_openat2+0x10/0x10 [ 250.602866][ T8465] ? exc_page_fault+0x6a/0xc0 [ 250.602882][ T8465] ? do_user_addr_fault+0xc7c/0x1360 [ 250.602906][ T8465] __x64_sys_openat+0x138/0x170 [ 250.602925][ T8465] do_syscall_64+0xe2/0xf80 [ 250.602940][ T8465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.602954][ T8465] ? trace_irq_disable+0x37/0x100 [ 250.602968][ T8465] ? clear_bhb_loop+0x60/0xb0 [ 250.602984][ T8465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.603004][ T8465] RIP: 0033:0x7f614a2a7407 [ 250.603021][ T8465] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 250.603035][ T8465] RSP: 002b:00007ffd4c59c870 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 250.603051][ T8465] RAX: ffffffffffffffda RBX: 00007f614a956880 RCX: 00007f614a2a7407 [ 250.603062][ T8465] RDX: 0000000000000000 RSI: 00007ffd4c59df1d RDI: ffffffffffffff9c [ 250.603073][ T8465] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 250.603081][ T8465] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 250.603091][ T8465] R13: 00007ffd4c59cac0 R14: 00007f614aabd000 R15: 000055e4c84c84d8 [ 250.603109][ T8465] [ 250.603114][ T8465] [ 250.888085][ T8465] Allocated by task 873: [ 250.892324][ T8465] kasan_save_track+0x3e/0x80 [ 250.897004][ T8465] __kasan_kmalloc+0x93/0xb0 [ 250.901596][ T8465] __kmalloc_cache_noprof+0x3d1/0x6e0 [ 250.906970][ T8465] em28xx_v4l2_init+0x10b/0x2e70 [ 250.911942][ T8465] em28xx_init_extension+0x120/0x1c0 [ 250.917241][ T8465] process_scheduled_works+0xaec/0x17a0 [ 250.922793][ T8465] worker_thread+0xda6/0x1360 [ 250.927484][ T8465] kthread+0x726/0x8b0 [ 250.931581][ T8465] ret_from_fork+0x51b/0xa40 [ 250.936186][ T8465] ret_from_fork_asm+0x1a/0x30 [ 250.940956][ T8465] [ 250.943284][ T8465] Freed by task 873: [ 250.947174][ T8465] kasan_save_track+0x3e/0x80 [ 250.951848][ T8465] kasan_save_free_info+0x46/0x50 [ 250.956889][ T8465] __kasan_slab_free+0x5c/0x80 [ 250.961649][ T8465] kfree+0x1be/0x650 [ 250.965568][ T8465] em28xx_v4l2_init+0x1683/0x2e70 [ 250.970608][ T8465] em28xx_init_extension+0x120/0x1c0 [ 250.975911][ T8465] process_scheduled_works+0xaec/0x17a0 [ 250.981500][ T8465] worker_thread+0xda6/0x1360 [ 250.986191][ T8465] kthread+0x726/0x8b0 [ 250.990273][ T8465] ret_from_fork+0x51b/0xa40 [ 250.994876][ T8465] ret_from_fork_asm+0x1a/0x30 [ 250.999647][ T8465] [ 251.001970][ T8465] The buggy address belongs to the object at ffff8880581cc000 [ 251.001970][ T8465] which belongs to the cache kmalloc-8k of size 8192 [ 251.016032][ T8465] The buggy address is located 1856 bytes inside of [ 251.016032][ T8465] freed 8192-byte region [ffff8880581cc000, ffff8880581ce000) [ 251.030024][ T8465] [ 251.032378][ T8465] The buggy address belongs to the physical page: [ 251.038799][ T8465] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x581c8 [ 251.047553][ T8465] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 251.056048][ T8465] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 251.063588][ T8465] page_type: f5(slab) [ 251.067566][ T8465] raw: 00fff00000000040 ffff88813fe27280 ffffea0000c8b600 dead000000000004 [ 251.076150][ T8465] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 251.084742][ T8465] head: 00fff00000000040 ffff88813fe27280 ffffea0000c8b600 dead000000000004 [ 251.093437][ T8465] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 251.102106][ T8465] head: 00fff00000000003 ffffea0001607201 00000000ffffffff 00000000ffffffff [ 251.110778][ T8465] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 251.119440][ T8465] page dumped because: kasan: bad access detected [ 251.125861][ T8465] page_owner tracks the page as allocated [ 251.131586][ T8465] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7651, tgid 7638 (syz.3.413), ts 201961959759, free_ts 201189517126 [ 251.152911][ T8465] post_alloc_hook+0x228/0x280 [ 251.157742][ T8465] get_page_from_freelist+0x24dc/0x2580 [ 251.163296][ T8465] __alloc_frozen_pages_noprof+0x18d/0x380 [ 251.169221][ T8465] alloc_pages_mpol+0x232/0x4a0 [ 251.174113][ T8465] allocate_slab+0x86/0x3a0 [ 251.178742][ T8465] ___slab_alloc+0xd82/0x1760 [ 251.183428][ T8465] __slab_alloc+0x65/0x100 [ 251.187858][ T8465] __kmalloc_cache_noprof+0x40d/0x6e0 [ 251.193316][ T8465] mr_table_alloc+0x65/0x250 [ 251.197914][ T8465] ipmr_net_init+0x21a/0x390 [ 251.202503][ T8465] ops_init+0x35c/0x5c0 [ 251.206662][ T8465] setup_net+0x118/0x340 [ 251.210919][ T8465] copy_net_ns+0x50e/0x730 [ 251.215337][ T8465] create_new_namespaces+0x3e7/0x6a0 [ 251.220640][ T8465] unshare_nsproxy_namespaces+0x11a/0x160 [ 251.226387][ T8465] ksys_unshare+0x4f4/0x900 [ 251.230893][ T8465] page last free pid 5911 tgid 5911 stack trace: [ 251.237232][ T8465] __free_frozen_pages+0xbf8/0xd70 [ 251.242347][ T8465] __put_partials+0x146/0x170 [ 251.247029][ T8465] __slab_free+0x294/0x320 [ 251.251445][ T8465] qlist_free_all+0x97/0x100 [ 251.256203][ T8465] kasan_quarantine_reduce+0x148/0x160 [ 251.261692][ T8465] __kasan_slab_alloc+0x22/0x80 [ 251.266552][ T8465] __kmalloc_cache_noprof+0x36f/0x6e0 [ 251.271936][ T8465] usb_control_msg+0x73/0x3e0 [ 251.276625][ T8465] hub_port_init+0xdc5/0x28d0 [ 251.281342][ T8465] hub_event+0x2593/0x4f30 [ 251.285762][ T8465] process_scheduled_works+0xaec/0x17a0 [ 251.291315][ T8465] worker_thread+0xda6/0x1360 [ 251.296001][ T8465] kthread+0x726/0x8b0 [ 251.300072][ T8465] ret_from_fork+0x51b/0xa40 [ 251.304672][ T8465] ret_from_fork_asm+0x1a/0x30 [ 251.309445][ T8465] [ 251.311771][ T8465] Memory state around the buggy address: [ 251.317397][ T8465] ffff8880581cc600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.325548][ T8465] ffff8880581cc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.333615][ T8465] >ffff8880581cc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.341717][ T8465] ^ [ 251.347868][ T8465] ffff8880581cc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.355936][ T8465] ffff8880581cc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.364007][ T8465] ================================================================== [ 251.416391][ T30] audit: type=1326 audit(1769972559.496:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.3.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9919aeb9 code=0x7ffc0000 [ 251.441267][ T873] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input17 [ 251.455417][ T8438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.461589][ T30] audit: type=1326 audit(1769972559.516:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.3.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9919aeb9 code=0x7ffc0000 [ 251.494758][ T873] em28xx 2-1:0.89: Remote control support is not available for this card. [ 251.503678][ T985] em28xx 2-1:0.89: Closing input extension [ 251.512847][ T985] em28xx 2-1:0.89: Deregistering snapshot button [ 251.520253][ T30] audit: type=1326 audit(1769972559.536:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.3.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d9915b78e code=0x7ffc0000 [ 251.551927][ T8438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.609130][ T8465] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 251.616394][ T8465] CPU: 0 UID: 0 PID: 8465 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 251.626904][ T8465] Tainted: [L]=SOFTLOCKUP [ 251.631238][ T8465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 251.641299][ T8465] Call Trace: [ 251.644614][ T8465] [ 251.647638][ T8465] vpanic+0x1e0/0x670 [ 251.651639][ T8465] panic+0xc5/0xd0 [ 251.655376][ T8465] ? __pfx_panic+0x10/0x10 [ 251.659805][ T8465] ? preempt_schedule_common+0x82/0xd0 [ 251.665298][ T8465] ? v4l2_fh_open+0xac/0x420 [ 251.669893][ T8465] check_panic_on_warn+0x89/0xb0 [ 251.674934][ T8465] ? v4l2_fh_open+0xac/0x420 [ 251.679536][ T8465] end_report+0x6f/0x140 [ 251.683793][ T8465] kasan_report+0x128/0x150 [ 251.688334][ T8465] ? v4l2_fh_open+0xac/0x420 [ 251.693059][ T8465] v4l2_fh_open+0xac/0x420 [ 251.697518][ T8465] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 251.703537][ T8465] em28xx_v4l2_open+0x157/0x9a0 [ 251.708500][ T8465] ? do_raw_spin_lock+0x12b/0x2f0 [ 251.713539][ T8465] v4l2_open+0x1bf/0x3a0 [ 251.717884][ T8465] chrdev_open+0x4cd/0x5e0 [ 251.722334][ T8465] ? __pfx_chrdev_open+0x10/0x10 [ 251.727277][ T8465] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 251.733641][ T8465] ? __pfx_chrdev_open+0x10/0x10 [ 251.738596][ T8465] do_dentry_open+0x7ce/0x1420 [ 251.743394][ T8465] vfs_open+0x3b/0x340 [ 251.747487][ T8465] ? path_openat+0x346e/0x3e20 [ 251.752301][ T8465] path_openat+0x3486/0x3e20 [ 251.756959][ T8465] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 251.762744][ T8465] ? getname_flags+0xb7/0x540 [ 251.767440][ T8465] ? __pfx_path_openat+0x10/0x10 [ 251.772394][ T8465] ? __lock_acquire+0x6b5/0x2cf0 [ 251.777446][ T8465] do_filp_open+0x22d/0x490 [ 251.781979][ T8465] ? __pfx_do_filp_open+0x10/0x10 [ 251.787057][ T8465] ? _raw_spin_unlock+0x28/0x50 [ 251.791960][ T8465] ? alloc_fd+0x64b/0x6c0 [ 251.796392][ T8465] do_sys_openat2+0x12f/0x220 [ 251.801081][ T8465] ? __pfx_do_sys_openat2+0x10/0x10 [ 251.806384][ T8465] ? exc_page_fault+0x6a/0xc0 [ 251.811098][ T8465] ? do_user_addr_fault+0xc7c/0x1360 [ 251.816403][ T8465] __x64_sys_openat+0x138/0x170 [ 251.821265][ T8465] do_syscall_64+0xe2/0xf80 [ 251.825791][ T8465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.831863][ T8465] ? trace_irq_disable+0x37/0x100 [ 251.836893][ T8465] ? clear_bhb_loop+0x60/0xb0 [ 251.841574][ T8465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.847555][ T8465] RIP: 0033:0x7f614a2a7407 [ 251.851984][ T8465] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 251.871601][ T8465] RSP: 002b:00007ffd4c59c870 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 251.880146][ T8465] RAX: ffffffffffffffda RBX: 00007f614a956880 RCX: 00007f614a2a7407 [ 251.888306][ T8465] RDX: 0000000000000000 RSI: 00007ffd4c59df1d RDI: ffffffffffffff9c [ 251.896417][ T8465] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 251.904487][ T8465] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 251.912464][ T8465] R13: 00007ffd4c59cac0 R14: 00007f614aabd000 R15: 000055e4c84c84d8 [ 251.920453][ T8465] [ 251.924092][ T8465] Kernel Offset: disabled [ 251.928446][ T8465] Rebooting in 86400 seconds..