last executing test programs: 17m24.298682532s ago: executing program 0 (id=77): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x6, 0x4) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x40) fcntl$notify(r1, 0x402, 0x8000003d) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mknod(&(0x7f0000000140)='./file1/file3\x00', 0xc000, 0x9) rename(&(0x7f00000003c0)='./file1/file3\x00', &(0x7f0000000100)='./file0\x00') rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file1/file3\x00') connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r3 = userfaultfd(0x801) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000300)={0x1, 0x5}, 0x2) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000001340)=""/4107, 0x100b}], 0x1, 0xfffffffa, 0x8) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000040)={0x0, 0x2b}, 0x2) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000) 17m23.687179285s ago: executing program 0 (id=80): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xd, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x2, "00df0010"}, @global=@item_012={0x1, 0x1, 0x6, 'O'}]}}, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, @remote}, 0x10) 17m21.696046856s ago: executing program 0 (id=86): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0x5, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f00000001c0)=@usbdevfs_connect) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f00000022c0)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) gettid() r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats\x00') write$apparmor_current(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r'], 0xff) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r7, 0x3b82, &(0x7f0000000140)={0x18, r8, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendfile(r10, r10, 0x0, 0x200000) r11 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r11, 0x10d, 0xd6, &(0x7f0000000240), &(0x7f00000003c0)=0x4) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newspdinfo={0x1c, 0x24, 0x3dd681fbf96b935, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 17m19.899990355s ago: executing program 0 (id=89): syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r3, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x46) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106e05fe000000000000010902240001000000030904000001030099c8010009210200070122070009058103000000"], 0x0) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x88) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x10000a006) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x3, "d6ac00a5"}, @main=@item_4={0x3, 0x0, 0xa, '\v\x00'}]}}, 0x0}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = syz_io_uring_setup(0x231, &(0x7f0000000240)={0x0, 0x15d2, 0x30101}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r9, 0xffffffffffffffff, 0x0, 0xffffffffffffffea, 0xc}) io_uring_enter(r10, 0x7a98, 0x0, 0x0, 0x0, 0x0) getdents64(r8, &(0x7f0000000040)=""/37, 0x25) r13 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r13, 0x40044900, 0x5) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) write$binfmt_misc(r8, &(0x7f0000000240)="d84f8e8f5ef1917af2602e8085537baea1ef4003fffa4e327812fef95b2c8dd30e957ef4b79570215e8ade8cbc091c2ec3c6cd4f83141a014c7cc72e3fc1116d3c5b81d229811af11a81ebe61f605f344f9c613702db7e58af8146a04fd0a22c71404695d1c2dbbcc033d117511bbd799a2a033a44130ae83594817dc5f95d9e29e045391ff3c18d428fb63a7be2d0cef6aa01ab069f200a269636f49408295b16e17979ef32e113c20e5f36a663e5368d28d8e1a94531e109b5354e9979751651803da5361e8c9d4f8aa70111c085482cc424493f026299", 0xd8) r14 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000040d90481a0000000000001090224000120000009090400040103000000092104000701220700090581032000000005"], 0x0) syz_usb_control_io$hid(r14, 0x0, 0x0) 17m17.474916752s ago: executing program 0 (id=102): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="cf07000000000000631177000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 17m17.074422423s ago: executing program 0 (id=103): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) syz_emit_vhci(&(0x7f0000000c00)=ANY=[@ANYBLOB="040f0223010408"], 0x7) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000200)={0x0, 0x0, @c}, 0x29, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}}) 17m15.78318978s ago: executing program 32 (id=103): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) syz_emit_vhci(&(0x7f0000000c00)=ANY=[@ANYBLOB="040f0223010408"], 0x7) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000200)={0x0, 0x0, @c}, 0x29, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}}) 13.250230307s ago: executing program 5 (id=3611): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x3a000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, r7, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x40c0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f00000007c0)={"dd9a64b420b1c69f4e76bb0761597e60", r10, r11, {0x6, 0x80000000}, {0x0, 0x72c2}, 0x1, [0x1ff, 0x9d, 0x3, 0x10, 0x962, 0x4, 0x1000000000000000, 0x6, 0x5, 0x9, 0xf6a5, 0x9, 0x2, 0x4, 0x8000, 0xc]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r4}, r10, 0x4, @unused=[0x832, 0x8, 0x5a, 0x7], @subvolid=0x9}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001340)="6dcb05f2e48e61674ebd89769f9b927046079a4c6ab892d9f86b4055e41f9354be76dac275a1f97b8ae4a5a32ef98168f544f231803f620017a7a9faa294c78047e4ca39d474942f867f63510b836739483f0abaca269f0e173855387e16996e23c2482f194dd78e17f67aeeda5d35a842c298f9972314014c439d57cd74cb190e527db50d4760e4a54c12735b8e98871b0c7bd10748e969ef864f65381d4db90528adcbdf460d31074d34b27770933de479090331e728e8434347c93c52f98510", 0xc1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000d00)}, {&(0x7f0000000e00)="d584132c6710c94c4fbf0cbd772bc95ecb4f7c2c6dbf979b1583404a7778cb520be332e623ad5378e40d7d7cc801f1f1f39db7058ddcff7d98d6a4160eb55c0e323d0d979d31e829fdbbb8e07cb27bdf060d9f8909549ec8", 0x58}], 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="30000000000000000000000007000000890d622b81b2bf68770eab6a9c9403a78907f2ffffffff07076fac14142401001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0000002e0000001000000001400000000000000000000000100000008000000000000001c"], 0x88}}], 0x2, 0xc0) 9.001679837s ago: executing program 5 (id=3620): r0 = socket$inet(0x2, 0x4000000000000001, 0xfffffffd) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x19, 0x200087fd, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x12021) syz_usb_connect(0x0, 0x24, &(0x7f0000002e80)=ANY=[@ANYBLOB="12017deb0300004d7330f47d077a62010001000301090212001797000000090400000003"], 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) readv(r1, &(0x7f0000001200)=[{&(0x7f0000000040)=""/189, 0xbd}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/137, 0x89}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x4) socket$inet(0x2, 0x4000000000000001, 0xfffffffd) (async) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r0, 0x0, 0x19, 0x200087fd, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) (async) sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x12021) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000002e80)=ANY=[@ANYBLOB="12017deb0300004d7330f47d077a62010001000301090212001797000000090400000003"], 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) (async) readv(r1, &(0x7f0000001200)=[{&(0x7f0000000040)=""/189, 0xbd}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/137, 0x89}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x4) (async) 8.934389317s ago: executing program 3 (id=3621): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)={0x20, 0xc, 0xe9, {0xe9, 0x22, "3c7a2beb288b1998f4f20795d4afce5efcf3307a9b7c20869f8a102ca445ff47349c13f255e99a28d9fb40098ed56fa1837503c5c7ed362168422c77b8d729090c2a51e26ef5534289b0f7ce3514cb16e5d77694ddca18c0420cb6cf2e5b91793a94b79ac2e63591042b26c8a285e8d472aa35a71ae673d52bd9bba8108a42864ae0a9dd6d6822d4f2d1083f516c0bd1cf87e3bd0f31a25a2304b4a77608c8d5c479cb4c694a852e2fc8f2439e6d5cd1b636b5192d43a85ac4d576813ffbec53a083ab6e83df860425123ec393c4ef5a06c625cedbdbfae11c36d9309b573cecdc1035d52f452c"}}, &(0x7f0000000240)={0x0, 0x3, 0x67, @string={0x67, 0x3, "e7ef34d46227d875bac24784f1cde5c3af32e076c7db28d912af5d7df87dbc12a5c2cb107d798acf673f2ede2cdcaf295d0e902af62b3c45b3f6c84073f2a41e87140e7b7796da58256b2fe6fbf144a28abfb2c29db1fea30c4329d2d8c84726bc81ca678f"}}, &(0x7f0000001480)=ANY=[@ANYBLOB="000f46000000050f46000424100a0ca60000000ff08100303fff006000ff00000000000f7eff00003f00003f60ff0003100b0a10030201006e0d000610100a06810f000000000100c000ff009738187a7587e87eb751e90057003af724403b3cdf886cb80f7eccc0534b32259b387ee3053ba3"], &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x8, 0x2, 0x7, "293c9556", "716b0010"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0x4, 0x7, 0x8, 0x5c0, 0x1}}}, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x60, 0x3, 0x82, "7b5e97c8e5e403091606e2bbf0d2fb90858522fee34321b9bc98a640d88fe3c2aebff534cb282230d1a8ba5ec5e8dc7c8d76f86faed7afc59eb3130490307d9308f51972c5029e8c700e6ee0595eb645a55614a8f9e164d4d0b48f4aa6c6ec382c38165230d0869a264070b2b7dbae974bcf02aaec3be819894ce7c2a57bcafb1891"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x0, 0x20, [0xff00]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000640)={0x40, 0xb, 0x2, "4afb"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0xffff}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000700)={0x40, 0x17, 0x6, @local}, &(0x7f0000000740)={0x40, 0x19, 0x2, "00a3"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0xe80}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x40}}) 6.726371367s ago: executing program 4 (id=3629): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@bridge_getlink={0x28, 0x12, 0xd23, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4, 0xffffffa1}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x193}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6.68879985s ago: executing program 4 (id=3630): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x100, 0x0, @private0={0xfc, 0x0, '\x00', 0xfc}, 0x7}, @in={0x2, 0x0, @rand_addr=0x64010100}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x8}], 0x48) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) close(r2) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x800000000000005) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2b, 0x95, 0xd9, 0x8, 0x4e2, 0x1412, 0xca10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0xfa, 0xa0, 0xbf, [{{0x9, 0x4, 0x0, 0x8, 0x0, 0x8, 0x6, 0x62}}]}}]}}, 0x0) 6.542301501s ago: executing program 3 (id=3631): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0xfffffffe, 0x1, 0x3, 0x1}, 0x8) 6.398300785s ago: executing program 3 (id=3632): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000004880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/232, 0xe8}, 0x4ae4}], 0x1, 0x832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f00000002c0)="ef9e8f99c80aafdc087418eb636f2a7713a0192b511881664d49df088c73b30eecc8751a8baebb0795b8eb0b952b423de789ffe83aede5921f097d5bd8083f6b6bd9055d0fa380bfd38f67a08637a1c06377a7e5d8037ed5e69bf3f2e294d91458240627c3dd462002165189bb87aa07d95825ed7abddb223232cdaf7028f5a38e28d1f181e88881a2eeff732711626c569bb1d93f1176c83dec34153eb2583f4ca7cef1a2b28c8f8b4fc3db52e3a76fe5b73516e0b69874bc1c5f981965c524b4e61972de0d3c6fc7f7e3e4febb5551a389a5532c", 0xd5}, {&(0x7f00000000c0)="3c600873108b00a711031896605f6eb78b26b327f7bc30eecfa8764908996c98050ca3a3520adbf59110ceb2990aa27d3ceb05c6a4a1f7a23857a59062c49e73f3a457c3ddf3af1e52e1f0c385199e2cfc33668262098345141d99ad7127767fbac5c859626e61310338fdbb52849175d1ee4bfd5e74ad014bc0373caaa672510484edf0198af7bee7534d6421595b2fcf554ef6899c464a0e624adb0ed3", 0x9e}, {&(0x7f0000001700)="2d668e097ed3d567dbbddd183b91f4b0a09bbe14d91a252343c63b902da8cb774b076a1cb25778c2d04792e00798e9eeffe24802b79b4141c239986b9b7e51a07a9a66ab25d5c9d2ea3f1d8b5c4813cd4fc7bc6a46ff565af52866b4a233524dbd937b7a71d14a8f80d702eab1926e8b2f04d0382c340464b0b1dc2f7eb7c445b9a9bab714159a057082fe91327a83015a789d76622b8dc5352d9d815f199c646d377bdf6365b43f28cd49f6295b65a00db1e59458137ab5d38355731bb74fe8991cd8ff44b21a845e6573ef3db20e6e352618486af68464746fb1ca03d41fd8fc9af4bcb64a9ca0db5900465a827bc51c70505f43020a5e007e9e7da3c0a978ae5ddb6a3dab3212837cd68ac9dbcb0d6139fbb94cbbba5f67c3f8cbfdcdb1fe2efc74c7534485ff29a1d5de11ed7c5bdfec8ea1bd73baef69b61f955fdc7e84e1f2c5dcdcccf36648eafc76b1bc8167f10455ed562daf21f7d7b9db677f7a469afe38e45fea8d7e2be6a94f3d24d5404d30ba8cdddd28e5415916136079d05bc0444383916c81ab32a1538ebb0d42140895fb9d5e84fa523b8762b429a737a060f291023c87df73dea70cabbecee0934752353634b4083ee57cf98536c797c5a880c1709500247ece69e4b5e1d343769bc11495303282c3fba86d0d5cd6b71a12d97822235f8894332709bc6d81100adec23f96b35882f4466bbcc4e5ce76201ddf4e430e6254eb4fc404b81cd0bcdcdf30c0e4ed83bf50ac31eefd01499590d6bb9b6a1b7ebff35c22167c5c739f9f492b5ae974558f4636654c7c5162f10148cf0519987c5a0e3dced879f18eabd4d3d87c622327da56b023f8d0ac0732aece800dd4c02b948aded5eff56d5b2f1be1591211fe840ed1446677d7f8099b2148b74c6de455a0f82dd43a1dac4968cf3e0947fb1ed3ae43e4cb0def0c0caebcae6e4021732756e4925813bffd3c7486671d5cd80192e1d59b455caede101b9d26c2cda7087f448915e766ab18a552c6ca79b9eea49964d52faa99626ca618fd1f557828aaca37f246f9399f87e0d71193af50da4db025bec2d1a868d509e57e425aa1a2fb6898abc28f61e5204a6e83d10274a7578918286fa5371f706bb856f8b830049608081eb51f212caf0fb7cbb6ef0305619fe234630eed1a507c4b9b3a3de8103411f56aa036aca7ffcc280e71992e491ca2db5b8ddb4b7b399a075a31ae42b90d553a5ed386adc2ab771593e7ca3a5a8f7b8afc4ed7a1ecc31f595d1756216656848437731a4488c574647a0dd7580ae09f4509ae4c6a9af92bce4ac104e623c71239f62de142bfab8e749fc0045c974e22494dbc4c347a3e77830f849f01bcc38f110cbb45959ad2b45168cee14faa85306586e32bfbc724e900130a0efc4b5a2645977783385470afba21921bf3d6aca51d7279a8ae6347be80380425b18d612d240466ce7c6737b59d2cd07791d65704a67d28bb1598acb7101704937309a77b07e692535a19f3b4e154170c4d603718cb03c6222d7d02672ac9a52f112765ea34165b6cca5a9b61862a5d79d49c68b7063bd65cfb917575ec45edc0dd3cab718e2b1f9194674cf676e68bf293303dcda6e690c184af0b4108ec4f833555d84f6fe71e6553fe5f62bfa389714096bbe5caba9dbf9696ebb675ad4a13f0f1873aad82d786c55b29a5ffa1223d66094ba269e91926b1eec6dd3c4220ced81dc2e3ad2823ab41a2d66e92646997b00041d1615572331d8da36ed69a201b4e33002529925a1e48a7108db93f1c51091b1e08692a63857244611e6b6990d33c66fe038aafcb8d68aba0bc44e75561feb3204302c04ac37c5b785353c4ef9d1f99559b8dbb658f672e3dff7edb90bd8118a20c5136902bb6c7bf0bb100a99035f82b6f0b11fdffc2b45dd978bd79f6095ed88aa8f7e704d5a06481dfc884ff1bcf040163c8cb37421bdbe4f8be48616834c6c399fed057b005d3044d6f9ebbf6293846eb5c06b1ed34bec30dbedb528896f5bb83d2f50c7fa47aabfdf9e1718174a7b1506bf14966956213c4e746785c0d9463963a5e2302fff630ff305065f7745f86013c70c7e85d65dc71240c5a2868994cdffbffc49804c130ccaabb8bfd0685c509d470b7bce20207e9e37278262fd3462fd8dec4b842d2ded77b430275d12d57ff970ba5441dd3d6be2c6dec6a8b89475146fc0007a62323cbc986571dc143314fbe06df5d4f0fc9bc21a53f48a4caba2171e760568c173e1289e98d09dc3ee8a3c8bac8802676792d431c9d67e29d48e285baab620972dd127de32b836b8cfc8e0fc5636b0d5601aeb04015d673d4ab7e8b84e1cfeed3ecfcfc51bb6b0fb0cda92c512b70a3b9b458657bec1b2e420349b27e332ef09be88db2edec7aee8029d1de3fc0661b0501d65b73b50dea2baeed27c8ecdbdc0b4f58b2a824b5087e228eb6cbf38b4ef56c168a23e3953541056d91fdf476f49f6dc8c0a741af01b70834fe6152c2f86680d3561bfb21b9ec5080a793064ea79978b533f66269ad6a80c8065fa41fe1e7d180fab9a90bc173964119bdbd940bfb1018defa460a2c6f367074f13da2dd15b688356137585e93a486c2f2236d01bee564dc3df47349caf44d7c8f2f076719d07e2fdaf2a827e5a712074d2c0de244e2e2bd17590365e528f8ad12225702c5b7c568dee1dea3af8ebcd9d342bfe360a9c69e4e60af2c0e6267e31beb0f0dee51c78cbad2d30d1c02043a5707f22faf6bb502f5b0e4469d4d1547b241e88cc914a606a8f74b52782920b8e21460cb9de5c95a5b8f8512eb8e76b95e0a07b7c0030da01410597bcc17205f0d7cf95e5342dbb446190dcd7b2d617442eb2935b8ac2ca31330d8a4bc3bdb290ae1f73ca4647ab5c79d6fc96a3dbb71f0fa9cb0ba5e60fcac5370fd1100bb272a62a31611e702d05fb01d6a4775d3b1e0a61afae86d34253823afa3794f326f388a42640ee26043c05f3edd249d78f67aae067008a7c9d6556323468ff9cd2b404872da46f04bc13150c3d67fe43f1ead924ae0b8030e50aa81e58dad366ef4ae1ac97a2691814cbffca222d4fe4dc2b83091cfad1ccb6cdd97057ae730d34e447277264c01dab01ac3ae11f5c0cabe02d72d69a9dcafd29f5c92828f7fd3cff3144b5b6adc918a312b63d74f0739e61c4e21b6cd4b960a70310259bd6a1afb9a2ef9daa3bc005e5c7f200a497643728b7d20b213aca857a161474fd0c5e0e0a871dbc41e455e1a8f8e1e59ce8e1a1ae971fcfd3d7ac0ed6bd5889b775764835dccd6a80013100920615bee209fb6861ab5b19882287225b4f4e65f70b406d1a6579ab968b02edc67e82466acad4e93c2fb82a9e5e2387c3ee2182b2da4440cfdc8559fe9bedbc039bf118ec757002ccf602a59acc7eb046b3d11376dc1fdfcdb419e45f1d1e10996b4ae54c31dab603251f8de30aec7e283175b35c65bc13fe6263250b512f9086050e0cf6e34ac637e4bda91f6ca30b5a2c3eb93b908c718eb10b9724b8c9ac62ba3c278aa872de5f14a1710123044706b10cf12660ce00c28dc32826093e9e46b1f5d10bc244e36e7a93ce72c6a49ba302f8d3c0c4eb09b797eadcf1ec9ae9d0886a8e49de60c922290fea5d9c44c0712dae19783ef47fd2f4a3c99e207d41b7cf0e8742aee10c38d658397ab0db425197adc280641ffc403131404db5eddb83fc1c2618dd12849bdcf8d53669453410d3f8de1a287d75875b937260d5f970019aeab8269e81534069a780ffd49ba8714a9bd228e827f2a8f72763b40af984ab588a759ac4072dea2f63c86b326f61a2c455827a4f68ce4ea74b606c090f18741c2f57fd23f523bedec973bf87ee84e6c84976fc93b5fedabf0262182418b620665996b77f82675ab35f1727659dc444710306faf197cdb00bbc53da2947c036c0e32a411b3cf993dbaabe09e2bffc67b709945418f7392a95fd088e9071a637edf4183fdd70cb373a7e756accd9b4ef99b09376471b500a66deb69826a4e7e3376b1309fbcd5644b500109e57812444d7e4aa5df45eaaaf286402653ac6b10a43a84259e49b38a4223c628b184b67e19871193276db2d0bb9994ab99c5afe2d02c995b70bca2c1ca71b675a0ce4d03d5a24a23dace6c7301dd4379230e52dbe97097ddc2450999e0400bf964b2d54c3f9be8180db31219363db0a436e1025e0351ac05d5f28a4fdf6c1d9be8f90d306a59ed2223174b5003428c80f9d33f220d7e125ec7c9682f4dd54ad2e86d46f69f189d072c75f502b64a7be243576273f8f564f48d5a79af2df899f5eb6976ff1bc744f9ffd2f2b6c06f0a60f2973460175b400879edf3f1de83f0c65219bcbd276a73fa8bc4f0f8c32d1a32e24693c6f2bb14b4bf9157a74bbe7efe99c6dbba8e0289173d7fc9fe407ed3619dce5d7d64ab8f06ca2d7cd1542e6e6d909d669c3f327791744ee52c08eff3e4f15f21bf04c16caf7934ffd461b93e6d70e5ccc2bdb1c41c4ab7b9d10b060b997c75eac9f3be167412ea91fad98474ee86d7346c55c5989d1ec2090cadf445e758416a140d01fc75e936fccfe9c39116398a23109e90324f8dac4aff0817922bfb80f927df15dc560b394c52eb7c528ac9b35b53cbcaa0a1e046f4f7a2c3118b8280b8fb7f477149489f5398f9f3d02e083a728fb8501d09ea193e6324e3ff5a86ddf1b8c111461739520ee0a357aa02dfdae6a1e4afcb0943d9da9ee204a47208de7cc323c1d5eaf2b2399b2eb59f908cbf8adbd7222bc3cd3b6d576210fc209215ca47c8c1a79acb0d1806b8ec5e718d9c95d8eefef0d0963dbf253024b75774ab01e57c80b57468810258d4f046a0b28dae1b5a0df9d0202e34a6414c22c0d8bf6300386ee263d8201b05220d10f0118fb937483e64f5bafc9583811aaac79af2e7d9a6daeb36e7d14c4b2f731df66b0ec0849b1f9424e29b07b8687e6e2adbe86cf33d37eba20b2f6d1571bf8c33fa4883cfc92939b62478ac4d2f2ef575991c8e44c363a863e6e9e0d437aebd753d57ccf796675f7ffc5ab889d5a99707100b9875e06556f3fb75691ecf427ee754930d5b12af346a2e85a311222fd7a3d61efdf31ff70d92d3ac0928742cd78de04ed51bdbc0c80160e8b5f0e5a997e3e8ee3283d13c17b81e46eb9a4ffc06e88a0914e50f0cbba66dbdc3d876c24c5009c1fcac342e0669be892f9ea820eb0a713168284fef7b41395979c685ee2229e64654a0d76ec1b86177d57f65bf4abb87b379f203c1861fe2a21e5c84f56eadbf6e0d1ee2d7452e2336cdeab2ef873b64018e260b1e6b5f84ccfe553b23580e568dcdc44608ce0d58e16f6871a7ecdf0fa8ab29a40153365ac500791b7d5809a8e412778de09d4ba1b67286d1a41d7b4ccd88e40a5b01c625f0f68dc97d9615b7a86bdaf993dd48b6f929a24c66c0d091331c360613b4e39f46747135626e79684dbaec71ef053fa37ad78e8e75baa1573272c8bec098eed9c7a3abec86b7590d984954624c0911a0b380aee3b6d8a01d5a7dead4ef4502d25da90f7d4f578cc67bc1d6f75523f4f97b9e662f21c52c2bef62e15bff384a43982811a24d93f4e8edf48be924da6ef373f4a77b247faee871212bc302328ff3cfce389061e0ddd051fb42b4aa5c522cfba8d648e266fb4a5447fb1cd3a8dc6ce35bfd0f6947fce666e60aa7c092d4e18725d24581c30b9b04a828d23fd8ee3c8c88b1b59468c49e73a8e39887652c5676cb22862c6e6998621b5ab6f1d65847373af3a07c6bb86e33a62f", 0x1000}], 0x4, &(0x7f0000000400)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x10001}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x33, 0x8, 0x1, 0xc, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x2c}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x2b, 0x10, 0x0, 0x4, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @local, @private0, @remote]}}}, @tclass={{0x14, 0x29, 0x43, 0xad}}], 0x120}}], 0x1, 0x8000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="028824c428"], 0x70}}, 0x44000) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0) 6.057061708s ago: executing program 2 (id=3633): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x906}}, './file0\x00'}) recvmmsg(r1, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/117, 0x75}, {&(0x7f0000000200)=""/142, 0x8e}], 0x2}, 0x40000000}, {{&(0x7f00000002c0)=@x25, 0x80, &(0x7f0000000840)=[{&(0x7f0000000480)=""/163, 0xa3}, {&(0x7f0000000540)=""/193, 0xc1}, {&(0x7f0000000640)=""/181, 0xb5}, {&(0x7f0000000700)=""/171, 0xab}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/84, 0x54}], 0x6, &(0x7f0000001cc0)=""/4096, 0x1000}, 0xc}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/202, 0xca}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/249, 0xf9}, {&(0x7f0000000ac0)=""/228, 0xe4}, {&(0x7f0000003cc0)=""/4096, 0x1000}], 0x5}, 0x5}, {{&(0x7f0000004cc0)=@alg, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/45, 0x2d}, {&(0x7f0000004d40)=""/4096, 0x1000}, {&(0x7f0000005d40)=""/252, 0xfc}, {&(0x7f0000005e40)=""/177, 0xb1}], 0x4}, 0x81}, {{0x0, 0x0, &(0x7f0000007440)=[{&(0x7f0000005f00)=""/127, 0x7f}, {&(0x7f0000005f80)=""/206, 0xce}, {&(0x7f0000006080)=""/173, 0xad}, {&(0x7f0000006140)=""/4096, 0x1000}, {&(0x7f0000007140)=""/177, 0xb1}, {&(0x7f0000007200)=""/177, 0xb1}, {&(0x7f00000072c0)=""/194, 0xc2}, {&(0x7f00000073c0)=""/117, 0x75}], 0x8, &(0x7f00000074c0)=""/179, 0xb3}, 0x401}], 0x5, 0x10022, 0x0) write$binfmt_aout(r0, &(0x7f0000000940)=ANY=[], 0xff2e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c01000013000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a000100aaaaaaaaaa30000008001b000101000004001400140003006272696467655f736c6176655f300000b8001980"], 0x11c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x78) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r3, r4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) ioctl$TCFLSH(r0, 0x540b, 0x2) 5.804042696s ago: executing program 5 (id=3634): socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_GET_DUMPABLE(0x26) socket$netlink(0x10, 0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x20}}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}]}, 0x74}, 0x1, 0x11}, 0x0) 5.478302016s ago: executing program 3 (id=3635): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000035c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000780)=[0x0]) dup3(r5, r3, 0x0) r7 = memfd_create(&(0x7f0000000480)='syz0\x00', 0x5) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000004c0)={r7, 0x1, 0x0, 0xfffffffff0000000}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000140)={@broadcast, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x1, @remote, @local, {[], {0x0, 0x4e21, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x20, 0x39, 0x92, "72f287b00ae6b5f520845788ad04cb3ed0e6f2fea261ef178a783262dcff2f512ae20c6939c27462ddc128ff6b36026e0a4b435b586c6b30ada1ea7be1c030d757d7adb54ef1adc63a1ee1ed1b2b71730dcb4f86e240cf6a544545f257b290d3575619f0e2d4a6c45f5554d8858f694da01be2762611d492c7bdf676d950810dfa580354a8279cf94c39f3034ff497d75ece"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x81}, &(0x7f00000003c0)={0x20, 0x1, 0x51, "1b5d9b5f98f5b08c3c435c66960a7e87ec11ed8e96235e4f330ff1f3ced2ceb96781a1147da43ee09d65395bacaf83abd96dec19a58c39b6cc0c6a2b7c9dd1e2686957c057a4424bca87e4f05dd045a245"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x9}}) 5.413535865s ago: executing program 4 (id=3636): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="300016802c"], 0x6c}}, 0x24040800) 5.247142535s ago: executing program 4 (id=3637): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4010, &(0x7f00000000c0)={0xa, 0x4, 0x4, @private1, 0x1000013}, 0x1c) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8040) futex(&(0x7f00000040c0), 0x87, 0x0, 0x0, 0x0, 0x0) 5.062600028s ago: executing program 2 (id=3638): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a0677bc45ff8105000000000fff58000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006081000418e00000004fcff", 0x58}], 0x1) 4.977198867s ago: executing program 4 (id=3639): bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060300052400a2000d240f01f9fffffffdff08000006241a"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fsetxattr$security_evm(r1, &(0x7f0000000040), &(0x7f0000000080)=@ng={0x4, 0x2, "f60391eed5681136dc87ad4f3bac9eed565318"}, 0x15, 0x2) ioctl$VT_OPENQRY(r1, 0x4b46, &(0x7f0000000000)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.83328767s ago: executing program 2 (id=3640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r1, @ANYBLOB="01012abd7000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="0400460024003400047a137c88a067e2bc52cfea864062e9875a4ee7df43ee4e024bf72737a5dba9080026006c09"], 0xe8}}, 0x4800) 4.644620866s ago: executing program 2 (id=3641): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="a400000010000104000000006f00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000007c0012800e00010069703665727370616e0000006800028006000300060000000600020009000000050016001100000004001200080015008af50f00050008000100000014000600fc010000f5ffffffffffffff00000001050016000200000014000700ff"], 0xa4}}, 0x0) r3 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_emit_ethernet(0x2e, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f00000003c0)) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) 4.146506357s ago: executing program 1 (id=3642): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f00070000a4000002"], 0x18) 3.999083185s ago: executing program 5 (id=3643): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$isdn(0x22, 0x3, 0x11) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x18801, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000001c0)={0x72e32806, 0x2, "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"}) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0, 0x1000}, {r1, 0xa200}, {r2, 0x100}, {r1, 0x8080}], 0x4, &(0x7f00000000c0)={r3, r4+60000000}, &(0x7f0000000140)={[0xffffffffffffffff]}, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) (async) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r7, 0x1, &(0x7f0000000980)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x7800005, 0x10010, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) (async) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) (async) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) (async) syz_open_dev$sndmidi(&(0x7f0000000300), 0xfffffffffffffffe, 0x88800) 3.62435683s ago: executing program 1 (id=3644): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) (async) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) (async) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000000)) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000002180)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002140)={&(0x7f0000002240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0xd0, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0xb0, 0x8, "ab12e1d159cfdb8b2e5389864db053ed5048b5fbcd72a9d4fe553e293db8b6353ddef1a6913d98b8551a9fd4ed5eea16f4589d2fcecc84faba5cd8b1288b2bd573013d426402b11adb6583496bf0dbf8bdd81fe2a5597f96f5d983219ec0432f8ccf6242ce857c0eff768cf4dc149ad442873330b400f6125dec7a46708185b58f7b2ce0aebf9b442d35eb7ef3d064d5150db4fe220c9e194e1c446d27ac49b0b21db38fd9794b626ba5bcbc"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0xf4, 0x5, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_USERDATA={0x80, 0xc, "7aa6c09c8fcb314cc0314a121848b3ab8d0347c38d7a04391b4b684532601266c41f0dd8f3a2e3cc1a98d55ae978f9d35023a5f96a77390d7fac42799fd3b260ca6d874e6e40f569f0d39cb525518863cd82115a968a6f56c5a9fb94a2d4609a8903e05140684bfbe024a40c663e090e43dd3a1f83702a27f497ced4"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x78faf6a8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5fc1ea6c}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x43b7f030}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0xc, 0x8, "264f6a1286f0dd4b"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x84, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x50, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x424, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_DESC={0x228, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x88, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x129}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x761}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9c}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_DESC_CONCAT={0xa0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1e}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3fc00000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x144}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}]}, @NFTA_SET_DESC_CONCAT={0xc4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7582}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3dbb}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x990000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DESC={0x1c0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xb8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4f62}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd01}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6773}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x4}]}, @NFTA_SET_DESC_CONCAT={0x44, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1fd}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xea}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x438}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7b8e5584}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x44, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWTABLE={0x4c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7e4}, 0x1, 0x0, 0x0, 0x20008010}, 0x40000000) (async) r3 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000080)='S\xb5') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x8402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r8, &(0x7f00000010c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [], 0xa, "2ef26f711b691034a7cabf3b518f22cc4346b1f560e5dc0b0fb4"}, 0x1025) close(r8) socket$packet(0x11, 0x2, 0x300) (async) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) 3.449690529s ago: executing program 2 (id=3645): mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x7f) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b708", @ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB="00000000000001018510000007", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001840000006"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='statm\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') 3.182471908s ago: executing program 1 (id=3646): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0xff, 0x80}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "c668d0c1"}]}}, 0x0}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000000)={{0x5, 0x0, 0x3}, 'syz0\x00', 0x3a}) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x4) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) epoll_create(0x8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_usb_connect$cdc_ecm(0x6, 0x97, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x1, 0x1, 0x6, 0xa0, 0xe, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x1, {{0xa, 0x24, 0x6, 0x0, 0x0, "2e8c608ff5"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x10bd, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x7, 0xa1b5}, @acm={0x4, 0x24, 0x2, 0x8}, @mdlm_detail={0x24, 0x24, 0x13, 0x0, "ecc53df815fec453837ae163362193a73074b1c135d7375deafafe0338c7cafc"}, @obex={0x5, 0x24, 0x15, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x9, 0xffff, 0x4, 0x6, 0x9, 0x4}, @obex={0x5, 0x24, 0x15, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x81, 0x3, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x3, 0x80}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0xc, 0x2, 0x8, 0x50, 0xd}, 0xf1, &(0x7f0000000280)={0x5, 0xf, 0xf1, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x5c, 0x3, 0xc1, 0xac, 0x48}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x8, 0x2}, @generic={0xb9, 0x10, 0x3, "eac5dd0d06b1bfed9f1dd966e84e7a28cd5c08df0b30d0f43bdaa6228b55b530188c82e46bca70bc32ae55b639ffdaf6e81e42adc19171b909336ebe84bc80a59c7ee6f52ec8b8031d661a577ef6ff08a17495a8f829e4fa89b7b86155bb4395250f37b0826fa6a1de7a373cfc565bc7fc5881406ed7fa1507809d827ab8aa3247fed6468acc1e1e67b957e6f935c63f89e7a77f01813d8bc718f9f3e5bf00f90b4d1dc6704f92d3adec3f3d6ee3e442ecc4e6896cca"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "f0b1057e441e3272e6cfd8458f7f9cb5"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x3, 0x4, 0x9}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41d}}]}) 3.153230957s ago: executing program 5 (id=3647): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000035c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000780)=[0x0]) dup3(r5, r3, 0x0) r7 = memfd_create(&(0x7f0000000480)='syz0\x00', 0x5) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000004c0)={r7, 0x1, 0x0, 0xfffffffff0000000}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000140)={@broadcast, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x1, @remote, @local, {[], {0x0, 0x4e21, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0xb, '\x00@'}, @main=@item_4={0x3, 0x0, 0x8, "e6fd8ffa"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xb, 0x1, {0x22, 0xa89}}}}, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x20, 0x39, 0x92, "72f287b00ae6b5f520845788ad04cb3ed0e6f2fea261ef178a783262dcff2f512ae20c6939c27462ddc128ff6b36026e0a4b435b586c6b30ada1ea7be1c030d757d7adb54ef1adc63a1ee1ed1b2b71730dcb4f86e240cf6a544545f257b290d3575619f0e2d4a6c45f5554d8858f694da01be2762611d492c7bdf676d950810dfa580354a8279cf94c39f3034ff497d75ece"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x81}, &(0x7f00000003c0)={0x20, 0x1, 0x51, "1b5d9b5f98f5b08c3c435c66960a7e87ec11ed8e96235e4f330ff1f3ced2ceb96781a1147da43ee09d65395bacaf83abd96dec19a58c39b6cc0c6a2b7c9dd1e2686957c057a4424bca87e4f05dd045a245"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x9}}) 3.065561455s ago: executing program 3 (id=3648): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) connect$unix(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x44, 0x9, 0x6, 0x801, 0x0, 0xdeff, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3, [], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0) 2.974451699s ago: executing program 4 (id=3649): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905", @ANYRES16], 0x0) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000090600000000000000000000000083d2e47aa50f63b159fefcce5bbe783da465e6bcde091f399121deda97acfce805aff8044df7fe02e788bad31292b1c15acb85c11bc4b136d10177bda8c35194742141c366", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008001f0005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) 2.894655631s ago: executing program 3 (id=3650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000000)=0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80146, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000240)={0xf0003, 0x0, [0x680, 0x3, 0x7, 0x0, 0x0, 0x0, 0x2b, 0x40000000]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, '\x00', "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) creat(&(0x7f00000000c0)='./file0\x00', 0x16) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x88c4}, 0x0) close(r2) socket$inet6(0xa, 0x3, 0x87) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c030002040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 2.427772626s ago: executing program 2 (id=3651): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000000, &(0x7f0000006680)) io_setup(0x1, &(0x7f0000000b80)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000082505ffffff7f0102030109025c00020109f0320904000001020d0000052406000105240000000d240f0107000000800006000106241a04002209058103080000d09a0904010000020d00000904010102020d000009058202080005030509050302ff030104a5"], 0x0) close_range(r1, r1, 0x0) 796.077248ms ago: executing program 5 (id=3652): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000090000880"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 508.249832ms ago: executing program 1 (id=3653): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x114, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0xcc, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x114}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x48) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) (async, rerun: 32) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (rerun: 32) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 201.287722ms ago: executing program 1 (id=3654): syz_emit_ethernet(0x92, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x1a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}, @cipso={0x86, 0x4c, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x1, 0x12, "8c9300"/16}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x8, "ccf0294e2a3b"}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) 0s ago: executing program 1 (id=3655): ioprio_set$pid(0x1, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r0, 0x7b, 0xfa}, &(0x7f0000000100)={'enc=', 'pkcs1', ' hash=', {'blake2s-128-x86\x00'}}, &(0x7f0000000180)="c839f92c494d6b913931f740ed9ecc74a477943b518702431e5615e78ecf68b646a720ed2c9778ae3c402925a2575848a21b1f8555b80e49346e50882fd2cdec094dba2bb88b67e4444b100bfdd9c0420cb2a852a485b4111182931df6aadd930a7cc9c1df9ed86521cad5cbbcb2430c167a662ec2e571417c194f", &(0x7f0000000340)=""/250) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000000000)="7c350695fed8cc528cf30c2cc8d51ac09ae1d05fac2f03f3bcbf1e4f569eab7114aa003b63a9", 0xc, r0) kernel console output (not intermixed with test programs): =0 ses=4294967295 subj=unconfined pid=17798 comm="syz.5.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f518e169 code=0x7ffc0000 [ 1088.933977][T17813] team0: entered promiscuous mode [ 1088.950450][T17813] team_slave_0: entered promiscuous mode [ 1088.966508][T17813] team_slave_1: entered promiscuous mode [ 1089.008108][T17813] bond0: entered promiscuous mode [ 1089.021277][T17813] bond_slave_0: entered promiscuous mode [ 1089.033031][ T7630] ft260 0003:0403:6030.004C: collection stack underflow [ 1089.040588][ T7630] ft260 0003:0403:6030.004C: item 0 1 0 12 parsing failed [ 1089.051950][T17813] bond_slave_1: entered promiscuous mode [ 1089.057912][ T30] audit: type=1326 audit(1745318044.525:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17798 comm="syz.5.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd3f518e169 code=0x7ffc0000 [ 1089.090254][T17813] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1089.100625][T17813] Cannot create hsr debugfs directory [ 1089.113898][ T7630] ft260 0003:0403:6030.004C: failed to parse HID [ 1089.123560][T17813] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1089.139154][ T7630] ft260 0003:0403:6030.004C: probe with driver ft260 failed with error -22 [ 1089.169306][ T30] audit: type=1326 audit(1745318044.525:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17798 comm="syz.5.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f518e169 code=0x7ffc0000 [ 1089.277157][T17806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.316304][ T7618] cypress 0003:04B4:DE61.004D: item fetching failed at offset 5/7 [ 1089.330701][T17806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.349356][ T7618] cypress 0003:04B4:DE61.004D: parse failed [ 1089.441744][ T30] audit: type=1326 audit(1745318044.525:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17798 comm="syz.5.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3f518e169 code=0x7ffc0000 [ 1089.480911][ T30] audit: type=1326 audit(1745318044.525:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17798 comm="syz.5.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f518e169 code=0x7ffc0000 [ 1089.530707][ T7618] cypress 0003:04B4:DE61.004D: probe with driver cypress failed with error -22 [ 1089.540119][ T30] audit: type=1326 audit(1745318044.525:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17798 comm="syz.5.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f518e169 code=0x7ffc0000 [ 1089.581853][ T30] audit: type=1326 audit(1745318044.525:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17798 comm="syz.5.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3f518e169 code=0x7ffc0000 [ 1089.637282][ T30] audit: type=1326 audit(1745318044.525:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17798 comm="syz.5.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f518e169 code=0x7ffc0000 [ 1089.766878][ T7630] usb 2-1: USB disconnect, device number 127 [ 1089.887565][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3393'. [ 1090.495432][ T7626] usb 5-1: string descriptor 0 read error: -71 [ 1090.504888][ T7626] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1090.571716][ T7626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.610999][ T7626] usb 5-1: config 0 descriptor?? [ 1090.670662][ T7626] usb 5-1: can't set config #0, error -71 [ 1090.685099][ T7626] usb 5-1: USB disconnect, device number 22 [ 1091.086524][ T7619] usb 3-1: USB disconnect, device number 5 [ 1091.120059][ T7623] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1091.160187][ T7626] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1091.332350][ T7623] usb 2-1: config 0 has no interfaces? [ 1091.343416][ T7623] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1091.367996][ T7623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.391520][ T7626] usb 5-1: Using ep0 maxpacket: 16 [ 1091.444032][ T7623] usb 2-1: Product: syz [ 1091.448262][ T7623] usb 2-1: Manufacturer: syz [ 1091.463449][ T7623] usb 2-1: SerialNumber: syz [ 1091.501342][ T7623] usb 2-1: config 0 descriptor?? [ 1091.520358][T17828] netlink: 'syz.2.3396': attribute type 10 has an invalid length. [ 1091.527693][ T7623] usb 6-1: USB disconnect, device number 101 [ 1091.539407][T17828] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3396'. [ 1091.794468][T13698] usb 2-1: USB disconnect, device number 2 [ 1092.300085][ T7623] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1092.480073][ T7623] usb 6-1: Using ep0 maxpacket: 32 [ 1092.488043][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 1092.489853][ T7623] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1092.505316][ T7623] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.518576][ T7623] usb 6-1: config 0 descriptor?? [ 1092.530615][ T7623] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1092.786606][ T7623] gspca_vc032x: reg_r err -32 [ 1092.794433][ T7623] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.799814][ T7623] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.807008][ T7623] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.821770][ T7623] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.867718][ T7623] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.880164][ T7623] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.908847][ T7623] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.919384][ T7623] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.933611][ T7623] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.948234][ T7623] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.959181][ T7623] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.977396][ T7623] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.987370][ T7623] gspca_vc032x: I2c Bus Busy Wait 00 [ 1092.998166][ T7623] gspca_vc032x: I2c Bus Busy Wait 00 [ 1093.013955][ T7623] gspca_vc032x: I2c Bus Busy Wait 00 [ 1093.250007][T13698] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1093.317082][ T7623] gspca_vc032x: I2c Bus Busy Wait 00 [ 1093.337805][ T7623] gspca_vc032x: I2c Bus Busy Wait 00 [ 1093.417038][T13698] usb 4-1: Using ep0 maxpacket: 16 [ 1093.442983][ T7616] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1093.485467][ T7623] gspca_vc032x: I2c Bus Busy Wait 00 [ 1093.505606][T13698] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1093.527157][ T7623] gspca_vc032x: Unknown sensor... [ 1093.539996][T13698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1093.560386][ T7623] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 1093.602373][ C1] bridge0: port 3(batadv0) entered learning state [ 1093.624055][T13698] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1093.642149][T13698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.658571][T13698] usb 4-1: Product: syz [ 1093.670961][ T7616] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1093.679770][ T7616] usb 2-1: can't read configurations, error -61 [ 1093.753262][T13698] usb 4-1: Manufacturer: syz [ 1093.765026][T13698] usb 4-1: SerialNumber: syz [ 1093.793246][T13698] usb 4-1: config 0 descriptor?? [ 1093.870030][ T7616] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1093.952313][ T7626] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1093.961508][ T7626] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1093.969298][ T7626] usb 5-1: can't read configurations, error -71 [ 1094.073492][T13698] appledisplay 4-1:0.0: Error while getting initial brightness: -71 [ 1094.093236][T13698] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -71 [ 1094.125865][T13698] usb 4-1: USB disconnect, device number 21 [ 1094.224016][ T7616] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1094.257443][ T7616] usb 2-1: can't read configurations, error -61 [ 1094.307063][ T7616] usb usb2-port1: attempt power cycle [ 1094.389348][T17867] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.3406' sets config #0 [ 1094.417165][T17867] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.3406' sets config #1 [ 1094.650199][ T7616] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1094.689452][T17870] x_tables: duplicate underflow at hook 3 [ 1094.697163][T17870] sctp: [Deprecated]: syz.3.3408 (pid 17870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1094.697163][T17870] Use struct sctp_sack_info instead [ 1094.869226][ T7616] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1094.882053][ T7616] usb 2-1: can't read configurations, error -61 [ 1095.073785][ T7619] usb 6-1: USB disconnect, device number 102 [ 1095.080131][ T7616] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1095.203190][ T7616] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1095.240646][T17875] netlink: 'syz.3.3410': attribute type 10 has an invalid length. [ 1095.250985][ T7616] usb 2-1: can't read configurations, error -61 [ 1095.266801][T17875] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3410'. [ 1095.317176][ T7616] usb usb2-port1: unable to enumerate USB device [ 1095.524263][ C1] net_ratelimit: 11 callbacks suppressed [ 1095.524283][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 1095.610822][ T7626] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1095.670417][T13698] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1095.780146][ T7626] usb 5-1: Using ep0 maxpacket: 16 [ 1095.796424][ T7626] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1095.822138][ T7626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.832341][T13698] usb 6-1: config 0 has no interfaces? [ 1095.839067][ T7626] usb 5-1: Product: syz [ 1095.847193][T13698] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1095.858505][ T7626] usb 5-1: Manufacturer: syz [ 1095.873040][T13698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.896059][ T7626] usb 5-1: SerialNumber: syz [ 1095.916127][T13698] usb 6-1: Product: syz [ 1095.960974][T13698] usb 6-1: Manufacturer: syz [ 1095.975173][T17888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3415'. [ 1095.985497][ T7626] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1096.004445][T13698] usb 6-1: SerialNumber: syz [ 1096.010164][ T7626] r8152-cfgselector 5-1: config 0 descriptor?? [ 1096.032972][T13698] usb 6-1: config 0 descriptor?? [ 1096.118578][T17892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3417'. [ 1096.130173][ T7623] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1096.301789][ T7626] usb 6-1: USB disconnect, device number 103 [ 1096.310025][ T7623] usb 3-1: Using ep0 maxpacket: 32 [ 1096.329245][ T7623] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 1096.347433][ T7623] usb 3-1: config 0 has no interface number 0 [ 1096.364821][ T7623] usb 3-1: config 0 interface 230 has no altsetting 0 [ 1096.375293][ T7623] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1096.387466][ T7623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.395990][ T7623] usb 3-1: Product: syz [ 1096.406151][ T7623] usb 3-1: Manufacturer: syz [ 1096.410951][T13698] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1096.435603][ T7623] usb 3-1: SerialNumber: syz [ 1096.451088][T13645] r8152-cfgselector 5-1: USB disconnect, device number 25 [ 1096.460602][ T7623] usb 3-1: config 0 descriptor?? [ 1096.469599][ T7623] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 1096.511234][ T7623] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1096.602147][T13698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.614059][T13698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1096.625362][T13698] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1096.636308][T13698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.648814][T13698] usb 4-1: config 0 descriptor?? [ 1096.890829][T17910] xt_bpf: check failed: parse error [ 1097.092086][T17915] netlink: 'syz.4.3424': attribute type 10 has an invalid length. [ 1097.100115][T17915] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3424'. [ 1097.109239][T17915] batadv0: entered promiscuous mode [ 1097.115152][T17915] batadv0: entered allmulticast mode [ 1097.125462][T17915] bridge0: port 3(batadv0) entered blocking state [ 1097.132658][T17915] bridge0: port 3(batadv0) entered disabled state [ 1097.144473][T17915] bridge0: port 3(batadv0) entered blocking state [ 1097.151129][T17915] bridge0: port 3(batadv0) entered forwarding state [ 1097.160842][T17916] batman_adv: batadv0: Adding interface: dummy0 [ 1097.167420][T17916] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1097.194799][T17916] batman_adv: batadv0: Interface activated: dummy0 [ 1097.227183][T17915] batadv0: mtu less than device minimum [ 1097.249680][T17915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1097.261968][T17915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1097.274071][T17915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1097.279557][T13698] usbhid 4-1:0.0: can't add hid device: -32 [ 1097.286173][T17915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1097.303132][T17915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1097.314204][T13698] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1097.315216][T17915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1097.334407][T17915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1097.346894][T17915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1097.533614][ T5986] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1097.543360][ T5986] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1097.585055][T17924] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 1097.893850][T13698] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 1098.053258][T13698] usb 6-1: config 0 has an invalid interface number: 235 but max is 0 [ 1098.071451][T13698] usb 6-1: config 0 has no interface number 0 [ 1098.078160][T13698] usb 6-1: config 0 interface 235 has no altsetting 0 [ 1098.093776][T13698] usb 6-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1098.104468][ T5844] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1098.119615][T13698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.130478][T13698] usb 6-1: Product: syz [ 1098.134901][T13698] usb 6-1: Manufacturer: syz [ 1098.139748][T13698] usb 6-1: SerialNumber: syz [ 1098.154800][T13698] usb 6-1: config 0 descriptor?? [ 1098.172371][T13698] keyspan 6-1:0.235: Keyspan 1 port adapter converter detected [ 1098.184257][T13698] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 87 [ 1098.193961][T13698] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 7 [ 1098.220375][T13698] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 81 [ 1098.245275][T13698] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 1 [ 1098.257107][T13698] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 85 [ 1098.283997][ T5844] usb 2-1: config 0 has no interfaces? [ 1098.295542][T13698] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1098.310523][ T5844] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1098.343732][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.353381][ T5844] usb 2-1: Product: syz [ 1098.357615][ T5844] usb 2-1: Manufacturer: syz [ 1098.364633][ T5844] usb 2-1: SerialNumber: syz [ 1098.376642][ T5844] usb 2-1: config 0 descriptor?? [ 1098.445423][T13698] usb 6-1: USB disconnect, device number 104 [ 1098.456516][T13698] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1098.460194][T13645] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1098.512626][T13698] keyspan 6-1:0.235: device disconnected [ 1098.670075][T13645] usb 5-1: Using ep0 maxpacket: 16 [ 1098.681227][T13645] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1098.708594][T13645] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1098.733534][T13645] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.747661][ T7623] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 1098.796644][T13645] usb 5-1: Product: syz [ 1098.807636][T13645] usb 5-1: Manufacturer: syz [ 1098.823632][T13645] usb 5-1: SerialNumber: syz [ 1098.836969][T13645] usb 5-1: config 0 descriptor?? [ 1098.853741][T13645] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1098.865776][T13645] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1099.201076][ T7623] usb 4-1: USB disconnect, device number 22 [ 1099.470909][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1099.470930][ T30] audit: type=1326 audit(1745318055.355:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17942 comm="syz.3.3434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5838d8e169 code=0x0 [ 1099.481146][T13645] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1100.106478][T17953] bridge0: port 3(batadv0) entered disabled state [ 1100.113324][T17953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.121159][T17953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.187036][T13645] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1100.218254][T13645] em28xx 5-1:0.0: board has no eeprom [ 1100.300531][ T7616] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1100.421898][T17953] batman_adv: batadv0: Interface deactivated: dummy0 [ 1100.435586][T17939] em28xx 5-1:0.0: read from i2c device at 0x0 failed with unknown error (status=65) [ 1100.554236][ T7616] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.587874][ T7626] usb 3-1: USB disconnect, device number 6 [ 1100.605879][ T7616] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1100.636740][T17939] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3432'. [ 1100.648411][ C1] net_ratelimit: 11 callbacks suppressed [ 1100.648433][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 1100.685345][ T7616] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1100.701011][ T7616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.709616][ T7616] usb 4-1: Product: syz [ 1100.714416][ T7616] usb 4-1: Manufacturer: syz [ 1100.719784][ T7616] usb 4-1: SerialNumber: syz [ 1100.736248][ T7616] usb 4-1: config 0 descriptor?? [ 1100.815394][T17953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1100.833569][T17953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1101.023978][T17953] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.033336][T17953] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.044684][T17953] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.059673][T17953] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.294407][T17953] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.303617][T17953] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.312643][T17953] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.322063][T17953] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.432322][T13645] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1101.442419][T13645] em28xx 5-1:0.0: dvb set to bulk mode. [ 1101.469172][ T7619] em28xx 5-1:0.0: Binding DVB extension [ 1101.508280][T13645] usb 5-1: USB disconnect, device number 26 [ 1101.546446][T13645] em28xx 5-1:0.0: Disconnecting em28xx [ 1101.658595][ T7619] em28xx 5-1:0.0: Registering input extension [ 1101.688998][T17964] usb 4-1: USB disconnect, device number 23 [ 1101.702832][T13645] em28xx 5-1:0.0: Closing input extension [ 1101.746555][T17960] usb 2-1: USB disconnect, device number 7 [ 1101.766737][T13645] em28xx 5-1:0.0: Freeing device [ 1102.071939][T17960] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1102.230088][T17960] usb 2-1: Using ep0 maxpacket: 8 [ 1102.236858][T17979] netlink: 'syz.4.3440': attribute type 10 has an invalid length. [ 1102.251784][T17960] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1102.268292][T17960] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1102.278914][T17979] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3440'. [ 1102.327508][T17960] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1102.378411][T17960] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1102.461150][T17960] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1102.500980][T17960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.610047][T13645] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1102.723270][T15808] Bluetooth: hci2: command 0x0406 tx timeout [ 1102.749688][T17960] usb 2-1: GET_CAPABILITIES returned 0 [ 1102.773576][T13645] usb 4-1: Using ep0 maxpacket: 32 [ 1102.781243][T13645] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1102.789546][T13645] usb 4-1: config 0 has no interface number 0 [ 1102.789686][T17960] usbtmc 2-1:16.0: can't read capabilities [ 1102.796355][T13645] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.813984][T13645] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.824227][T13645] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1102.833708][T13645] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.846704][T13645] usb 4-1: config 0 descriptor?? [ 1102.963128][ T7616] usb 2-1: USB disconnect, device number 8 [ 1103.050314][T17966] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1104.066624][T13645] usbhid 4-1:0.1: can't add hid device: -71 [ 1104.080506][T17966] usb 3-1: Using ep0 maxpacket: 32 [ 1104.080662][T13645] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 1104.101735][T13645] usb 4-1: USB disconnect, device number 24 [ 1104.116812][T17966] usb 3-1: config 2 has an invalid interface number: 45 but max is 0 [ 1104.135439][T17966] usb 3-1: config 2 has no interface number 0 [ 1104.142309][ T7615] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1104.156406][T17966] usb 3-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1104.184738][T17966] usb 3-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1104.202788][T17966] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1104.212481][T17966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.230108][T17966] usb 3-1: Product: syz [ 1104.234608][T17966] usb 3-1: Manufacturer: syz [ 1104.244826][T17966] usb 3-1: SerialNumber: syz [ 1104.259395][T17966] kobil_sct 3-1:2.45: KOBIL USB smart card terminal converter detected [ 1104.283858][T17966] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1104.298225][ T7615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.318376][ T7615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.347879][ T7615] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1104.371402][ T7615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.446602][ T7615] usb 5-1: config 0 descriptor?? [ 1104.491748][T17997] FAULT_INJECTION: forcing a failure. [ 1104.491748][T17997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1104.505223][T17997] CPU: 1 UID: 0 PID: 17997 Comm: syz.1.3445 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 1104.505254][T17997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1104.505268][T17997] Call Trace: [ 1104.505278][T17997] [ 1104.505288][T17997] dump_stack_lvl+0x241/0x360 [ 1104.505327][T17997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1104.505358][T17997] ? __pfx__printk+0x10/0x10 [ 1104.505401][T17997] should_fail_ex+0x424/0x570 [ 1104.505439][T17997] _copy_from_user+0x2d/0xb0 [ 1104.505468][T17997] copy_folio_from_user+0x158/0x2a0 [ 1104.505498][T17997] mfill_atomic_copy+0x13af/0x1b80 [ 1104.505548][T17997] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 1104.505595][T17997] userfaultfd_ioctl+0x2b87/0x6a80 [ 1104.505642][T17997] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1104.505668][T17997] ? stack_trace_save+0x11a/0x1d0 [ 1104.505696][T17997] ? __pfx_stack_trace_save+0x10/0x10 [ 1104.505724][T17997] ? stack_depot_save_flags+0x44/0x940 [ 1104.505766][T17997] ? kasan_save_track+0x51/0x80 [ 1104.505793][T17997] ? kasan_save_track+0x3f/0x80 [ 1104.505820][T17997] ? kasan_save_free_info+0x40/0x50 [ 1104.505843][T17997] ? __kasan_slab_free+0x59/0x70 [ 1104.505871][T17997] ? kfree+0x198/0x430 [ 1104.505888][T17997] ? tomoyo_path_number_perm+0x5fd/0x790 [ 1104.505912][T17997] ? security_file_ioctl+0xc6/0x2a0 [ 1104.505933][T17997] ? __se_sys_ioctl+0x46/0x160 [ 1104.505956][T17997] ? do_syscall_64+0xf3/0x210 [ 1104.505978][T17997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.506003][T17997] ? do_vfs_ioctl+0xef8/0x2750 [ 1104.506036][T17997] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1104.506089][T17997] ? kasan_quarantine_put+0xdc/0x230 [ 1104.506117][T17997] ? lockdep_hardirqs_on+0x9d/0x150 [ 1104.506147][T17997] ? tomoyo_path_number_perm+0x215/0x790 [ 1104.506177][T17997] ? tomoyo_path_number_perm+0x684/0x790 [ 1104.506205][T17997] ? tomoyo_path_number_perm+0x215/0x790 [ 1104.506232][T17997] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1104.506264][T17997] ? ksys_write+0x24e/0x2d0 [ 1104.506302][T17997] ? __lock_acquire+0xad5/0xd80 [ 1104.506351][T17997] ? __fget_files+0x2a/0x420 [ 1104.506370][T17997] ? __fget_files+0x2a/0x420 [ 1104.506394][T17997] ? __fget_files+0x2a/0x420 [ 1104.506419][T17997] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1104.506448][T17997] __se_sys_ioctl+0xf1/0x160 [ 1104.506478][T17997] do_syscall_64+0xf3/0x210 [ 1104.506501][T17997] ? clear_bhb_loop+0x45/0xa0 [ 1104.506533][T17997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.506554][T17997] RIP: 0033:0x7f26edf8e169 [ 1104.506573][T17997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1104.506592][T17997] RSP: 002b:00007f26eeea6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1104.506616][T17997] RAX: ffffffffffffffda RBX: 00007f26ee1b5fa0 RCX: 00007f26edf8e169 [ 1104.506631][T17997] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 1104.506645][T17997] RBP: 00007f26eeea6090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.506659][T17997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1104.506672][T17997] R13: 0000000000000000 R14: 00007f26ee1b5fa0 R15: 00007f26ee2dfa28 [ 1104.506703][T17997] [ 1104.821222][ C1] vkms_vblank_simulate: vblank timer overrun [ 1105.083097][T18003] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3446'. [ 1105.136892][T18003] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3446'. [ 1105.211773][T18004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3446'. [ 1105.220177][T13645] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1105.265608][ T7615] usbhid 5-1:0.0: can't add hid device: -32 [ 1105.275510][ T7615] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1105.370487][T13645] usb 2-1: Using ep0 maxpacket: 32 [ 1105.384924][T13645] usb 2-1: config 1 has an invalid interface number: 163 but max is 3 [ 1105.393695][T13645] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.405162][T13645] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 4 [ 1105.415525][T13645] usb 2-1: config 1 has no interface number 0 [ 1105.423005][T13645] usb 2-1: config 1 interface 163 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 1105.437039][T13645] usb 2-1: config 1 interface 163 has no altsetting 0 [ 1105.473267][T13645] usb 2-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=60.15 [ 1105.483024][T13645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.491910][T13645] usb 2-1: Product: ꧼé¼ì¸ªê„†ä„²á˜å•³î’ˆê¹µËŸå†«î’¤ã™™ì±ç·Šì±™î¿”۰ઘ⒅᥿鉈躨➳㎷í¼ï§Ÿä½†íŽ·â”§î•·è—£è‰‡î‘µì›²ê¡Šä±é œ [ 1105.506765][T13645] usb 2-1: Manufacturer: â­»é¸ïž†ëµäš’à©ç¢â†¡á‚”㗸磳嚎㵃渚䀩ɛꯛ舘㾷䩃⃾鈭áªï…䄌蔸⅑趠缦ãšç“¤Üžé½Šä±œîˆŠë“亸凋痚ꥴᘞ腫멿啳錥à©ç˜ºë½œç“©ê’±ì—ᅻ릲澙텎䉽潔䊡뛲îŠç€ˆæ‹â¿ºæ‰šçŠ³ç¢Žáª»î–¥è¡¹èµ¯è¹î¯†ç¢Ÿì¥´å‰´ì Žì¯»é¾ê”ࡊ₄풫㛚 [ 1105.782770][T13645] option 2-1:1.163: GSM modem (1-port) converter detected [ 1105.812359][T13645] usb 2-1: USB disconnect, device number 9 [ 1105.832869][T13645] option 2-1:1.163: device disconnected [ 1106.158992][T17999] netlink: 'syz.3.3446': attribute type 29 has an invalid length. [ 1106.241839][T13645] usb 3-1: USB disconnect, device number 7 [ 1106.261266][T13645] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1106.321859][T18007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3448'. [ 1106.343343][T13645] kobil_sct 3-1:2.45: device disconnected [ 1106.363863][T17966] usb 5-1: USB disconnect, device number 27 [ 1106.376303][T18007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3448'. [ 1107.265330][T18031] netlink: 'syz.2.3454': attribute type 10 has an invalid length. [ 1107.295564][T18031] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3454'. [ 1107.511986][T17960] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1107.540116][T17965] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1107.760167][T17965] usb 4-1: Using ep0 maxpacket: 8 [ 1107.765384][T17960] usb 6-1: Using ep0 maxpacket: 16 [ 1107.772772][T17965] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1107.784262][T17960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1107.833701][T17965] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1107.845672][T17960] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1107.865707][T17960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.875105][T17965] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1107.916256][T17960] usb 6-1: Product: syz [ 1107.927891][T17965] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1107.942579][T17960] usb 6-1: Manufacturer: syz [ 1107.954296][T17960] usb 6-1: SerialNumber: syz [ 1107.976590][T17965] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1107.987551][T17960] usb 6-1: config 0 descriptor?? [ 1108.007156][T17965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.021971][T17960] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1108.049704][T17960] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1108.261623][T17965] usb 4-1: GET_CAPABILITIES returned 0 [ 1108.267354][T17965] usbtmc 4-1:16.0: can't read capabilities [ 1108.473093][T17965] usb 4-1: USB disconnect, device number 25 [ 1108.640230][T13645] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1108.653408][T17960] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1108.799989][T13645] usb 3-1: Using ep0 maxpacket: 8 [ 1108.815557][T13645] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 1108.836091][T13645] usb 3-1: config 0 has no interface number 0 [ 1108.849425][T13645] usb 3-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 1108.910820][T13645] usb 3-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 1108.937617][T13645] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1108.957148][T13645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.974036][T13645] usb 3-1: Product: syz [ 1109.029305][T13645] usb 3-1: Manufacturer: syz [ 1109.044698][T13645] usb 3-1: SerialNumber: syz [ 1109.061562][T13645] usb 3-1: config 0 descriptor?? [ 1109.069044][T17960] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1109.080011][T17960] em28xx 6-1:0.0: board has no eeprom [ 1109.121393][T18039] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1109.347898][T13645] ath6kl: Failed to submit usb control message: -71 [ 1109.367334][T13645] ath6kl: unable to send the bmi data to the device: -71 [ 1109.375839][T13645] ath6kl: Unable to send get target info: -71 [ 1109.425371][T13645] ath6kl: Failed to init ath6kl core: -71 [ 1109.458563][T13645] ath6kl_usb 3-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 1109.498616][T13645] usb 3-1: USB disconnect, device number 8 [ 1109.525847][T11811] udevd[11811]: setting owner of /dev/bus/usb/003/008 to uid=0, gid=0 failed: No such file or directory [ 1109.640025][T17965] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1109.835008][T17965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.849688][T17965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.864551][T17965] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1109.876184][T17965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.928360][T17965] usb 4-1: config 0 descriptor?? [ 1110.160560][T18030] em28xx 6-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 1110.270259][T17960] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1110.400282][ T7615] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1110.405703][T17960] em28xx 6-1:0.0: dvb set to bulk mode. [ 1110.420813][T13698] em28xx 6-1:0.0: Binding DVB extension [ 1110.439174][T17960] usb 6-1: USB disconnect, device number 105 [ 1110.529566][T17960] em28xx 6-1:0.0: Disconnecting em28xx [ 1110.570166][ T7615] usb 5-1: Using ep0 maxpacket: 32 [ 1110.580461][ T7615] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.37 [ 1110.597405][ T7615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.625782][ T7615] usb 5-1: Product: syz [ 1110.659331][ T7615] usb 5-1: Manufacturer: syz [ 1110.677866][T13698] em28xx 6-1:0.0: Registering input extension [ 1110.691574][T17960] em28xx 6-1:0.0: Closing input extension [ 1110.697646][ T7615] usb 5-1: SerialNumber: syz [ 1110.721477][T17960] em28xx 6-1:0.0: Freeing device [ 1110.911091][ T7615] usb 5-1: config 0 descriptor?? [ 1110.934804][ T7615] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1111.016332][T17965] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.004E/input/input196 [ 1111.186284][T17965] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.004E/input/input197 [ 1111.232662][T17965] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.004E/input/input198 [ 1111.279135][T17965] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.004E/input/input199 [ 1111.321618][T17960] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1111.338056][T17965] uclogic 0003:256C:006D.004E: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 1111.384745][T17965] usb 4-1: USB disconnect, device number 26 [ 1111.511038][T17960] usb 2-1: Using ep0 maxpacket: 16 [ 1111.523738][T17960] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1111.561840][T17960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1111.593029][T17960] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1111.630788][T17960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.646990][T17960] usb 2-1: Product: syz [ 1111.660036][T17960] usb 2-1: Manufacturer: syz [ 1111.664782][T17960] usb 2-1: SerialNumber: syz [ 1111.674009][T17960] usb 2-1: config 0 descriptor?? [ 1111.686424][T17960] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1111.698513][T17960] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1111.926088][ T7616] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1112.104561][ T7616] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1112.115206][ T7616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.128819][ T7616] usb 3-1: config 0 descriptor?? [ 1112.140183][T13645] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1112.300183][T13645] usb 6-1: Using ep0 maxpacket: 8 [ 1112.307560][T13645] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1112.319219][T13645] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1112.335015][T13645] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1112.347751][T17960] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1112.348752][T13645] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1112.360095][T17960] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1112.367755][T13645] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1112.385188][T13645] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.515178][ T7618] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1112.599824][T13645] usb 6-1: GET_CAPABILITIES returned 0 [ 1112.605615][T13645] usbtmc 6-1:16.0: can't read capabilities [ 1112.670314][ T7618] usb 4-1: Using ep0 maxpacket: 16 [ 1112.678225][ T7618] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1112.694652][ T7618] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1112.704026][ T7618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.712343][ T7618] usb 4-1: Product: syz [ 1112.716603][ T7618] usb 4-1: Manufacturer: syz [ 1112.721374][ T7618] usb 4-1: SerialNumber: syz [ 1112.729661][ T7618] usb 4-1: config 0 descriptor?? [ 1112.743312][ T7618] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1112.752851][ T7618] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1112.809280][T13645] usb 6-1: USB disconnect, device number 106 [ 1112.997523][T17960] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1113.006045][T17960] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1113.015496][T17960] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1113.024384][T17960] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1113.032157][T17960] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1113.039815][T17960] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1113.197232][ T7616] pegasus 3-1:0.0: probe with driver pegasus failed with error -121 [ 1113.342018][ T7618] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1113.382948][ T7615] gspca_stk1135: reg_w 0x300 err -71 [ 1113.389591][ T7615] gspca_stk1135: serial bus timeout: status=0x00 [ 1113.399686][ T7615] gspca_stk1135: Sensor write failed [ 1113.415004][ T7615] gspca_stk1135: serial bus timeout: status=0x00 [ 1113.422544][ T7615] gspca_stk1135: Sensor write failed [ 1113.427932][ T7615] gspca_stk1135: serial bus timeout: status=0x00 [ 1113.449503][ T7615] gspca_stk1135: Sensor read failed [ 1113.469800][ T7615] gspca_stk1135: serial bus timeout: status=0x00 [ 1113.476508][T17960] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1113.480062][ T7615] gspca_stk1135: Sensor read failed [ 1113.488357][T17960] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1113.488501][ T7615] gspca_stk1135: Detected sensor type unknown (0x0) [ 1113.496155][T17960] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1113.512934][T17960] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1113.519417][T17960] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1113.520492][ T7615] gspca_stk1135: serial bus timeout: status=0x00 [ 1113.532829][T17960] usb 2-1: USB disconnect, device number 10 [ 1113.555583][ T7615] gspca_stk1135: Sensor read failed [ 1113.564401][ T7615] gspca_stk1135: serial bus timeout: status=0x00 [ 1113.574182][ T7615] gspca_stk1135: Sensor read failed [ 1113.579579][ T7615] gspca_stk1135: serial bus timeout: status=0x00 [ 1113.596756][ T7615] gspca_stk1135: Sensor write failed [ 1113.602294][ T7615] gspca_stk1135: serial bus timeout: status=0x00 [ 1113.608774][ T7615] gspca_stk1135: Sensor write failed [ 1113.623583][ T7615] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 1113.642758][ T7615] usb 5-1: USB disconnect, device number 28 [ 1113.756343][ T7618] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1113.765424][ T7618] em28xx 4-1:0.0: board has no eeprom [ 1113.860034][T17965] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1113.941324][T18078] netlink: 'syz.4.3472': attribute type 24 has an invalid length. [ 1113.949833][T18078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3472'. [ 1114.009339][T18071] em28xx 4-1:0.0: read from i2c device at 0x0 failed with unknown error (status=65) [ 1114.033199][T17965] usb 6-1: config 0 has no interfaces? [ 1114.049202][T17965] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1114.070534][T17965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.078694][T17965] usb 6-1: Product: syz [ 1114.083779][T17965] usb 6-1: Manufacturer: syz [ 1114.089751][T17965] usb 6-1: SerialNumber: syz [ 1114.104530][T17965] usb 6-1: config 0 descriptor?? [ 1114.121591][T18080] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.3473'. [ 1114.141736][T18080] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.3473'. [ 1114.217433][T18071] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3470'. [ 1114.290316][ T7618] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1114.302385][ T7618] em28xx 4-1:0.0: dvb set to bulk mode. [ 1114.308140][ T7615] em28xx 4-1:0.0: Binding DVB extension [ 1114.329387][ T7618] usb 4-1: USB disconnect, device number 27 [ 1114.355729][ T7618] em28xx 4-1:0.0: Disconnecting em28xx [ 1114.419141][ T7615] em28xx 4-1:0.0: Registering input extension [ 1114.437343][ T7618] em28xx 4-1:0.0: Closing input extension [ 1114.477785][ T7618] em28xx 4-1:0.0: Freeing device [ 1114.980110][T17965] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1115.130147][T17965] usb 5-1: Using ep0 maxpacket: 32 [ 1115.184531][T17965] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1115.201585][T17965] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1115.214800][T17965] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1115.235026][T17965] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1115.252934][T17965] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1115.265472][T17965] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1115.276321][T17965] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1115.288317][T17965] usb 5-1: Product: syz [ 1115.293448][T17965] usb 5-1: Manufacturer: syz [ 1115.305362][T17965] usb 5-1: SerialNumber: syz [ 1115.333337][T17965] usb 5-1: config 0 descriptor?? [ 1115.341386][T18102] FAULT_INJECTION: forcing a failure. [ 1115.341386][T18102] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1115.366126][T18102] CPU: 0 UID: 0 PID: 18102 Comm: syz.1.3480 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 1115.366158][T18102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1115.366172][T18102] Call Trace: [ 1115.366181][T18102] [ 1115.366191][T18102] dump_stack_lvl+0x241/0x360 [ 1115.366230][T18102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1115.366260][T18102] ? __pfx__printk+0x10/0x10 [ 1115.366300][T18102] should_fail_ex+0x424/0x570 [ 1115.366335][T18102] prepare_alloc_pages+0x220/0x610 [ 1115.366373][T18102] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 1115.366407][T18102] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1115.366458][T18102] alloc_pages_mpol+0x339/0x690 [ 1115.366486][T18102] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1115.366518][T18102] vma_alloc_folio_noprof+0x12d/0x260 [ 1115.366544][T18102] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1115.366577][T18102] folio_prealloc+0x2e/0x170 [ 1115.366605][T18102] handle_pte_fault+0x2e45/0x61c0 [ 1115.366654][T18102] ? __pfx_handle_pte_fault+0x10/0x10 [ 1115.366694][T18102] ? rcu_is_watching+0x15/0xb0 [ 1115.366719][T18102] ? __lock_acquire+0xad5/0xd80 [ 1115.366764][T18102] ? __lock_acquire+0xad5/0xd80 [ 1115.366798][T18102] ? do_raw_spin_lock+0x151/0x370 [ 1115.366834][T18102] handle_mm_fault+0x1129/0x1bf0 [ 1115.366891][T18102] ? __pfx_handle_mm_fault+0x10/0x10 [ 1115.366916][T18102] ? follow_page_pte+0x9ff/0x15e0 [ 1115.366955][T18102] ? __pfx_find_vma+0x10/0x10 [ 1115.366990][T18102] ? vma_is_secretmem+0xd/0x50 [ 1115.367007][T18102] ? check_vma_flags+0x51b/0x590 [ 1115.367036][T18102] __get_user_pages+0x1adc/0x4180 [ 1115.367100][T18102] ? __pfx___get_user_pages+0x10/0x10 [ 1115.367123][T18102] ? __gup_longterm_locked+0xd86/0x1850 [ 1115.367149][T18102] ? __pfx_down_read_killable+0x10/0x10 [ 1115.367177][T18102] ? __lock_acquire+0xad5/0xd80 [ 1115.367224][T18102] __gup_longterm_locked+0xec1/0x1850 [ 1115.367265][T18102] ? try_get_folio+0xfd/0x6a0 [ 1115.367293][T18102] ? try_grab_folio_fast+0x373/0x500 [ 1115.367318][T18102] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1115.367347][T18102] ? sanity_check_pinned_pages+0x11b2/0x12a0 [ 1115.367380][T18102] gup_fast_fallback+0x2227/0x2980 [ 1115.367436][T18102] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1115.367456][T18102] ? arch_stack_walk+0xff/0x150 [ 1115.367495][T18102] ? stack_trace_save+0x11a/0x1d0 [ 1115.367523][T18102] ? __pfx_stack_trace_save+0x10/0x10 [ 1115.367552][T18102] ? stack_depot_save_flags+0x44/0x940 [ 1115.367592][T18102] ? is_valid_gup_args+0x124/0x200 [ 1115.367620][T18102] pin_user_pages_fast+0xd2/0x160 [ 1115.367643][T18102] ? aio_read+0x38c/0x530 [ 1115.367673][T18102] ? io_submit_one+0x886/0x18b0 [ 1115.367704][T18102] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1115.367729][T18102] ? __lock_acquire+0xad5/0xd80 [ 1115.367766][T18102] iov_iter_extract_pages+0x3bd/0x5c0 [ 1115.367805][T18102] bio_iov_iter_get_pages+0x4f3/0x1460 [ 1115.367835][T18102] ? bio_associate_blkg_from_css+0xa4/0xc70 [ 1115.367875][T18102] ? bio_associate_blkg+0x6c/0x230 [ 1115.367897][T18102] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 1115.367927][T18102] ? bio_alloc_bioset+0x6d7/0x1130 [ 1115.367968][T18102] blkdev_direct_IO+0x92e/0x1560 [ 1115.368016][T18102] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 1115.368049][T18102] ? current_time+0x27b/0x3b0 [ 1115.368075][T18102] ? __pfx_current_time+0x10/0x10 [ 1115.368099][T18102] ? __pfx_stack_trace_save+0x10/0x10 [ 1115.368126][T18102] ? stack_depot_save_flags+0x44/0x940 [ 1115.368156][T18102] ? folio_nr_pages+0xc1/0xf0 [ 1115.368178][T18102] ? atime_needs_update+0x4ee/0x6c0 [ 1115.368205][T18102] ? touch_atime+0xf8/0x690 [ 1115.368230][T18102] ? kiocb_write_and_wait+0xa9/0x1a0 [ 1115.368255][T18102] blkdev_read_iter+0x247/0x460 [ 1115.368291][T18102] aio_read+0x38c/0x530 [ 1115.368329][T18102] ? __pfx_aio_read+0x10/0x10 [ 1115.368398][T18102] io_submit_one+0x886/0x18b0 [ 1115.368442][T18102] ? __lock_acquire+0xad5/0xd80 [ 1115.368475][T18102] ? __pfx_io_submit_one+0x10/0x10 [ 1115.368524][T18102] ? __might_fault+0xaa/0x120 [ 1115.368553][T18102] __se_sys_io_submit+0x17a/0x2e0 [ 1115.368585][T18102] ? __pfx___se_sys_io_submit+0x10/0x10 [ 1115.368611][T18102] ? ksys_write+0x275/0x2d0 [ 1115.368654][T18102] ? do_syscall_64+0xb6/0x210 [ 1115.368680][T18102] do_syscall_64+0xf3/0x210 [ 1115.368703][T18102] ? clear_bhb_loop+0x45/0xa0 [ 1115.368728][T18102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.368749][T18102] RIP: 0033:0x7f26edf8e169 [ 1115.368768][T18102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1115.368787][T18102] RSP: 002b:00007f26eeea6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1115.368812][T18102] RAX: ffffffffffffffda RBX: 00007f26ee1b5fa0 RCX: 00007f26edf8e169 [ 1115.368828][T18102] RDX: 00002000000000c0 RSI: 0000000000000004 RDI: 00007f26eee7d000 [ 1115.368843][T18102] RBP: 00007f26eeea6090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.368856][T18102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1115.368869][T18102] R13: 0000000000000000 R14: 00007f26ee1b5fa0 R15: 00007f26ee2dfa28 [ 1115.368902][T18102] [ 1115.865552][ C0] vkms_vblank_simulate: vblank timer overrun [ 1115.881647][T17965] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1115.914717][T17960] usb 3-1: USB disconnect, device number 9 [ 1116.290140][T17965] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1116.473785][T17965] usb 6-1: USB disconnect, device number 107 [ 1116.503349][T18108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3482'. [ 1116.513520][T18108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3482'. [ 1116.788080][T17960] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1116.950285][T17960] usb 3-1: Using ep0 maxpacket: 8 [ 1116.961609][T17960] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1116.992912][T17960] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1117.037573][T17960] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1117.084843][T17960] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1117.350008][T17965] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1117.402208][T17960] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1117.440285][T17960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.880253][T17965] usb 2-1: Using ep0 maxpacket: 8 [ 1117.898040][T17965] usb 2-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 1117.917612][T17965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.948616][T17965] usb 2-1: config 0 descriptor?? [ 1117.954674][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 1117.963425][T13698] usb 5-1: USB disconnect, device number 29 [ 1117.975781][T13698] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1117.983877][T17960] usb 3-1: GET_CAPABILITIES returned 0 [ 1117.989525][T17960] usbtmc 3-1:16.0: can't read capabilities [ 1118.025910][T17965] usblcd 2-1:0.0: USBLCD model not supported. [ 1118.197491][T17965] usb 3-1: USB disconnect, device number 10 [ 1118.232819][T13698] usb 2-1: USB disconnect, device number 11 [ 1118.907892][ T7615] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1119.320266][ T7618] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1119.369260][ T7615] usb 5-1: config 0 has no interfaces? [ 1119.420588][ T7615] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1119.434277][ T7615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.446527][ T7615] usb 5-1: Product: syz [ 1119.456839][ T7615] usb 5-1: Manufacturer: syz [ 1119.462306][ T7615] usb 5-1: SerialNumber: syz [ 1119.473624][ T7618] usb 3-1: Using ep0 maxpacket: 8 [ 1119.480097][T13645] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1119.495334][ T7618] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1119.518945][ T7618] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1119.531449][ T7615] usb 5-1: config 0 descriptor?? [ 1119.680044][T13645] usb 2-1: Using ep0 maxpacket: 16 [ 1119.692589][ T7618] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1119.717636][T13645] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1119.734568][ T7618] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1119.748085][T13645] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1119.766664][ T7618] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1119.777407][ T7618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.786993][T13645] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1119.797552][T13645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.851326][T13645] usb 2-1: Product: syz [ 1119.866103][T13645] usb 2-1: Manufacturer: syz [ 1119.871392][T13645] usb 2-1: SerialNumber: syz [ 1119.883742][T13645] usb 2-1: config 0 descriptor?? [ 1119.898688][T13645] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1119.911470][T13645] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1120.068125][ T7618] usb 3-1: GET_CAPABILITIES returned 0 [ 1120.073855][ T7618] usbtmc 3-1:16.0: can't read capabilities [ 1120.306009][T13698] usb 3-1: USB disconnect, device number 11 [ 1120.546835][T13645] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1120.589593][T13645] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1121.124514][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 1121.124620][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.141505][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 1121.146141][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.206298][T13645] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1121.214121][T13645] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1121.221762][T13645] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1121.228737][T13645] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1121.238808][T13645] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1121.562786][T18158] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3497'. [ 1121.770590][ T7615] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1121.920095][ T7615] usb 3-1: Using ep0 maxpacket: 16 [ 1121.936224][ T7615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.971480][ T7616] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1121.979413][ T7615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.001281][ T7615] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1122.019779][ T7615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.041335][ T7615] usb 3-1: config 0 descriptor?? [ 1122.070668][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 1122.079229][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 1122.087727][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 1122.095068][T13645] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1122.101604][T13645] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1122.108307][T13645] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1122.115422][T13645] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1122.124041][T13645] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1122.160231][ T7616] usb 4-1: Using ep0 maxpacket: 8 [ 1122.168508][T13645] usb 2-1: USB disconnect, device number 12 [ 1122.179268][ T7616] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1122.194073][T17965] usb 5-1: USB disconnect, device number 30 [ 1122.205278][ T7616] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1122.249433][ T7616] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1122.278656][ T7616] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1122.307830][ T7616] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1122.317351][ T7616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.388362][T18169] FAULT_INJECTION: forcing a failure. [ 1122.388362][T18169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1122.446618][T18169] CPU: 1 UID: 0 PID: 18169 Comm: syz.4.3501 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 1122.446653][T18169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1122.446665][T18169] Call Trace: [ 1122.446673][T18169] [ 1122.446681][T18169] dump_stack_lvl+0x241/0x360 [ 1122.446716][T18169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1122.446742][T18169] ? __pfx__printk+0x10/0x10 [ 1122.446778][T18169] should_fail_ex+0x424/0x570 [ 1122.446810][T18169] _copy_from_iter+0x211/0x1c70 [ 1122.446837][T18169] ? __build_skb_around+0x247/0x3d0 [ 1122.446865][T18169] ? __alloc_skb+0x298/0x480 [ 1122.446889][T18169] ? __pfx__copy_from_iter+0x10/0x10 [ 1122.446916][T18169] ? __pfx___alloc_skb+0x10/0x10 [ 1122.446943][T18169] ? skb_put+0x114/0x1f0 [ 1122.446977][T18169] netlink_sendmsg+0x73c/0xcd0 [ 1122.447017][T18169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1122.447048][T18169] ? aa_sock_msg_perm+0x91/0x160 [ 1122.447080][T18169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1122.447105][T18169] __sock_sendmsg+0x221/0x270 [ 1122.447134][T18169] ____sys_sendmsg+0x523/0x860 [ 1122.447176][T18169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1122.447207][T18169] ? __fget_files+0x2a/0x420 [ 1122.447240][T18169] ? __fget_files+0x2a/0x420 [ 1122.447271][T18169] __sys_sendmsg+0x271/0x360 [ 1122.447309][T18169] ? __pfx___sys_sendmsg+0x10/0x10 [ 1122.447397][T18169] ? do_syscall_64+0xb6/0x210 [ 1122.447423][T18169] do_syscall_64+0xf3/0x210 [ 1122.447446][T18169] ? clear_bhb_loop+0x45/0xa0 [ 1122.447472][T18169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.447493][T18169] RIP: 0033:0x7fcbff18e169 [ 1122.447511][T18169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1122.447531][T18169] RSP: 002b:00007fcbfff56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1122.447555][T18169] RAX: ffffffffffffffda RBX: 00007fcbff3b5fa0 RCX: 00007fcbff18e169 [ 1122.447571][T18169] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 1122.447584][T18169] RBP: 00007fcbfff56090 R08: 0000000000000000 R09: 0000000000000000 [ 1122.447597][T18169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1122.447609][T18169] R13: 0000000000000000 R14: 00007fcbff3b5fa0 R15: 00007fcbff4dfa28 [ 1122.447641][T18169] [ 1122.590409][ T7618] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1122.690622][ T7615] playstation 0003:054C:05C4.004F: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 1122.760095][ T7616] usb 4-1: GET_CAPABILITIES returned 0 [ 1122.765698][ T7616] usbtmc 4-1:16.0: can't read capabilities [ 1122.791550][ T7615] playstation 0003:054C:05C4.004F: Invalid byte count transferred, expected 16 got 0 [ 1122.802086][ T7615] playstation 0003:054C:05C4.004F: Failed to retrieve DualShock4 pairing info: -22 [ 1122.812067][ T7615] playstation 0003:054C:05C4.004F: Failed to get MAC address from DualShock4 [ 1122.821050][ T7615] playstation 0003:054C:05C4.004F: Failed to create dualshock4. [ 1122.836017][ T7615] playstation 0003:054C:05C4.004F: probe with driver playstation failed with error -22 [ 1122.927458][T13698] usb 4-1: USB disconnect, device number 28 [ 1122.981836][ T7618] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1122.992319][ T7618] usb 6-1: can't read configurations, error -61 [ 1123.068176][T18157] loop2: detected capacity change from 0 to 7 [ 1123.077161][T18157] Dev loop2: unable to read RDB block 7 [ 1123.090295][T17965] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1123.106770][T18157] loop2: unable to read partition table [ 1123.118548][T18157] loop2: partition table beyond EOD, truncated [ 1123.135374][T18157] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1123.155120][ T7615] usb 3-1: USB disconnect, device number 12 [ 1123.170267][ T7618] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1123.253314][T17965] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.302592][T17965] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1123.329502][T18177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3504'. [ 1123.341880][T17965] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1123.359955][T17965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.386746][T17965] usb 2-1: config 0 descriptor?? [ 1123.405496][T17965] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1123.455963][ T7618] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1123.465750][ T7618] usb 6-1: can't read configurations, error -61 [ 1123.475198][ T7618] usb usb6-port1: attempt power cycle [ 1123.585484][T18179] netlink: 'syz.4.3505': attribute type 10 has an invalid length. [ 1123.594485][T18179] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3505'. [ 1123.680003][ C1] bridge0: port 3(batadv0) entered forwarding state [ 1123.686726][ C1] bridge0: topology change detected, propagating [ 1123.830111][ T7618] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1123.858926][ T7618] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1123.866930][ T7618] usb 6-1: can't read configurations, error -61 [ 1123.980415][T17960] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1124.030011][ T7618] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1124.069819][ T7618] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1124.077550][ T7618] usb 6-1: can't read configurations, error -61 [ 1124.126742][ T7618] usb usb6-port1: unable to enumerate USB device [ 1124.140572][T17960] usb 4-1: Using ep0 maxpacket: 8 [ 1124.148247][T17960] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1124.160425][T17960] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1124.171517][T17960] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1124.203883][T17960] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1124.240920][T17965] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1124.263191][T17960] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1124.292634][T17960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.420018][T17965] usb 3-1: Using ep0 maxpacket: 32 [ 1124.427559][T17965] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.462145][T17965] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 1124.496026][T17965] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1124.506059][T17965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1124.517852][T17960] usb 4-1: GET_CAPABILITIES returned 0 [ 1124.524103][T17960] usbtmc 4-1:16.0: can't read capabilities [ 1124.532519][T17965] usb 3-1: SerialNumber: syz [ 1124.727167][T17965] usb 4-1: USB disconnect, device number 29 [ 1124.774417][T18186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.791619][T18186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.806050][T17960] usb 3-1: USB disconnect, device number 13 [ 1125.083451][T18195] tipc: Started in network mode [ 1125.088582][T18195] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1125.098016][T18195] tipc: Enabling of bearer rejected, failed to enable media [ 1125.638115][T18201] loop6: detected capacity change from 0 to 63 [ 1125.709622][ T5937] buffer_io_error: 10 callbacks suppressed [ 1125.709647][ T5937] Buffer I/O error on dev loop6, logical block 0, async page read [ 1125.759624][ T5937] Buffer I/O error on dev loop6, logical block 0, async page read [ 1125.786342][ T5937] Buffer I/O error on dev loop6, logical block 0, async page read [ 1125.855311][T17960] usb 2-1: USB disconnect, device number 13 [ 1125.938323][ T5937] Buffer I/O error on dev loop6, logical block 0, async page read [ 1125.975382][ T5937] Buffer I/O error on dev loop6, logical block 0, async page read [ 1126.000994][T15808] Bluetooth: hci3: command 0x0405 tx timeout [ 1126.279990][T17960] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1126.442976][T17960] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1126.476205][T17965] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1126.503804][T17960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.535176][T18220] netlink: 'syz.4.3519': attribute type 10 has an invalid length. [ 1126.544992][T18220] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3519'. [ 1126.550043][T17960] usb 2-1: config 0 descriptor?? [ 1126.683403][T17965] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 1126.693991][T17965] usb 3-1: config 0 has no interface number 0 [ 1126.700456][T17965] usb 3-1: config 0 interface 235 has no altsetting 0 [ 1126.712137][ T7615] usb 6-1: new full-speed USB device number 112 using dummy_hcd [ 1126.720661][T17965] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1126.734997][T17965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.745637][T17965] usb 3-1: Product: syz [ 1126.750529][T17965] usb 3-1: Manufacturer: syz [ 1126.777881][T17965] usb 3-1: SerialNumber: syz [ 1126.789346][T17965] usb 3-1: config 0 descriptor?? [ 1126.804538][T17965] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected [ 1126.820601][T17965] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87 [ 1126.839033][T17965] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7 [ 1126.876486][T17965] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81 [ 1126.890502][T17965] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1 [ 1126.908602][ T7615] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1126.909961][T17965] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85 [ 1126.930237][ T7615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.950923][ T7615] usb 6-1: config 0 descriptor?? [ 1126.966351][T17965] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1127.038880][T17965] usb 3-1: USB disconnect, device number 14 [ 1127.062335][T17965] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1127.103513][T17965] keyspan 3-1:0.235: device disconnected [ 1127.350231][ T7618] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1127.500234][ T7618] usb 4-1: Using ep0 maxpacket: 8 [ 1127.508445][ T7618] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1127.520128][ T7618] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1127.530351][ T7618] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1127.540815][ T7616] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1127.548785][ T7618] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1127.563571][ T7618] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1127.573049][ T7618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.716119][ T7616] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1127.732803][ T7616] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1127.746486][ T7616] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1127.755413][ T7616] usb 5-1: Manufacturer: syz [ 1127.762146][ T7616] usb 5-1: SerialNumber: syz [ 1127.789030][ T7618] usb 4-1: GET_CAPABILITIES returned 0 [ 1127.800038][ T7618] usbtmc 4-1:16.0: can't read capabilities [ 1127.998669][T17966] usb 4-1: USB disconnect, device number 30 [ 1128.150081][T17965] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1128.302278][T17965] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.314294][T17965] usb 3-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1128.323809][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 1128.328093][T17965] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1128.346427][T17965] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1128.357650][T17965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.365830][T17965] usb 3-1: Product: syz [ 1128.372380][T17965] usb 3-1: Manufacturer: syz [ 1128.377071][T17965] usb 3-1: SerialNumber: syz [ 1128.392437][T17965] usb 3-1: config 0 descriptor?? [ 1128.653203][T18234] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1128.673612][ T7619] usb 3-1: USB disconnect, device number 15 [ 1128.801591][T17960] pegasus 2-1:0.0: setup Pegasus II specific registers [ 1128.926235][T17960] pegasus 2-1:0.0: can't locate MII phy, using default [ 1128.948885][T17960] pegasus 2-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 26:a8:cc:74:dd:4a [ 1128.986881][T17960] usb 2-1: USB disconnect, device number 14 [ 1129.044348][T18247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3528'. [ 1129.076090][T18247] fuse: Bad value for 'user_id' [ 1129.081402][T18247] fuse: Bad value for 'user_id' [ 1129.152914][ T7616] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 1129.298561][ T7616] usb 5-1: USB disconnect, device number 31 [ 1129.384745][ T7615] pegasus 6-1:0.0: setup Pegasus II specific registers [ 1129.537164][ T7615] pegasus 6-1:0.0: can't locate MII phy, using default [ 1129.572366][ T7615] pegasus 6-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 7e:04:1c:32:55:79 [ 1129.621946][ T7615] usb 6-1: USB disconnect, device number 112 [ 1129.629362][T18254] vivid-000: disconnect [ 1129.640642][T18250] vivid-000: reconnect [ 1129.823136][T18256] bridge0: port 4(vlan0) entered blocking state [ 1129.846182][T18256] bridge0: port 4(vlan0) entered disabled state [ 1129.876648][T18256] vlan0: entered allmulticast mode [ 1129.900792][T18256] bridge0: entered allmulticast mode [ 1129.938512][T18256] vlan0: left allmulticast mode [ 1129.956075][T18256] bridge0: left allmulticast mode [ 1130.310412][ T7615] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 1130.460026][ T7618] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1130.470826][ T7615] usb 5-1: too many configurations: 125, using maximum allowed: 8 [ 1130.491002][ T7615] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1130.526730][ T7615] usb 5-1: can't read configurations, error -61 [ 1130.620601][ T7618] usb 2-1: Using ep0 maxpacket: 8 [ 1130.627978][ T7618] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1130.640832][ T7618] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1130.656458][ T7618] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1130.676912][ T7618] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1130.690915][ T7615] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 1130.707213][ T7618] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1130.726851][ T7618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.820158][ T7616] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1130.861236][ T7615] usb 5-1: too many configurations: 125, using maximum allowed: 8 [ 1130.875386][ T7615] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1130.883703][ T7615] usb 5-1: can't read configurations, error -61 [ 1130.891501][ T7615] usb usb5-port1: attempt power cycle [ 1130.957179][ T7618] usb 2-1: GET_CAPABILITIES returned 0 [ 1130.964509][ T7618] usbtmc 2-1:16.0: can't read capabilities [ 1130.970146][T17960] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1130.970885][ T7616] usb 4-1: Using ep0 maxpacket: 16 [ 1131.002138][ T7616] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1131.026924][ T7616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1131.049768][ T7616] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1131.059626][ T7616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.067798][ T7616] usb 4-1: Product: syz [ 1131.072256][ T7616] usb 4-1: Manufacturer: syz [ 1131.076867][ T7616] usb 4-1: SerialNumber: syz [ 1131.084511][ T7616] usb 4-1: config 0 descriptor?? [ 1131.094317][ T7616] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1131.103686][ T7616] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1131.132321][T17960] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.143083][T17960] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1131.168678][T17960] usb 6-1: New USB device found, idVendor=0325, idProduct=a4a1, bcdDevice= 0.40 [ 1131.185236][T17960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.203879][T17960] usb 6-1: Product: syz [ 1131.208109][T17960] usb 6-1: Manufacturer: syz [ 1131.223092][T17960] usb 6-1: SerialNumber: syz [ 1131.240238][ T7615] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1131.282356][ T7615] usb 5-1: too many configurations: 125, using maximum allowed: 8 [ 1131.360810][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 1131.363006][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 1131.377725][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 1131.454948][T17960] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1131.478854][T17960] usb 6-1: USB disconnect, device number 113 [ 1131.539208][ T7615] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1131.547464][ T7615] usb 5-1: can't read configurations, error -61 [ 1131.690182][ T7615] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1131.711764][ T7615] usb 5-1: too many configurations: 125, using maximum allowed: 8 [ 1131.722142][ T7616] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1131.728888][ T7616] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1131.737480][ T7615] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1131.746087][ T7615] usb 5-1: can't read configurations, error -61 [ 1131.753973][ T7615] usb usb5-port1: unable to enumerate USB device [ 1131.827249][T17965] usb 2-1: USB disconnect, device number 15 [ 1131.970051][T17960] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1132.130125][T17960] usb 6-1: Using ep0 maxpacket: 8 [ 1132.137036][T17960] usb 6-1: config index 0 descriptor too short (expected 301, got 59) [ 1132.145342][T17960] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.155809][T17960] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1132.165672][T17960] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1132.175715][T17960] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 2304, setting to 1024 [ 1132.186992][T17960] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1132.197175][T17960] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1132.210348][T17960] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1132.220528][T17960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.365377][ T7616] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1132.375544][ T7616] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1132.384641][ T7616] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1132.392396][ T7616] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1132.399577][ T7616] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1132.445813][T17960] usb 6-1: usb_control_msg returned -32 [ 1132.456611][T17960] usbtmc 6-1:16.0: can't read capabilities [ 1132.780092][ T7615] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1132.942054][ T7615] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 1132.953841][ T7615] usb 3-1: config 0 has no interface number 0 [ 1132.961007][ T7615] usb 3-1: config 0 interface 235 has no altsetting 0 [ 1132.971836][ T7615] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1132.982416][ T7615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.991469][ T7615] usb 3-1: Product: syz [ 1132.996203][ T7615] usb 3-1: Manufacturer: syz [ 1133.008641][T18284] xt_bpf: check failed: parse error [ 1133.017366][ T7615] usb 3-1: SerialNumber: syz [ 1133.031274][ T7615] usb 3-1: config 0 descriptor?? [ 1133.043071][T17965] usb 6-1: USB disconnect, device number 114 [ 1133.048189][ T7615] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected [ 1133.050256][T18282] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 1133.059563][ T7615] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87 [ 1133.079537][ T7615] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7 [ 1133.100295][ T7615] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81 [ 1133.108543][ T7615] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1 [ 1133.132699][ T7615] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85 [ 1133.144052][ T7615] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1133.226085][ T7616] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1133.244825][ T7616] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1133.246287][T18288] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1133.277563][ T7616] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1133.315587][ T7615] usb 3-1: USB disconnect, device number 16 [ 1133.329022][ T7616] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1133.347733][ T7616] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1133.356525][ T7615] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1133.377435][ T7616] usb 4-1: USB disconnect, device number 31 [ 1133.384635][ T7615] keyspan 3-1:0.235: device disconnected [ 1134.050040][ T7615] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1134.190056][T17965] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1134.212026][ T7615] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1134.227899][ T7615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.255639][ T7615] usb 2-1: config 0 descriptor?? [ 1134.310156][T17960] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1134.366181][T17965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.390477][T17965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.409957][T17965] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1134.419534][T17965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.462844][T17965] usb 4-1: config 0 descriptor?? [ 1134.470139][T17960] usb 3-1: Using ep0 maxpacket: 8 [ 1134.480741][T17960] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1134.499946][T17960] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1134.520153][T17960] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1134.540060][T17960] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1134.553277][T17960] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1134.572108][T17960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.797622][T17960] usb 3-1: GET_CAPABILITIES returned 0 [ 1134.803491][T17960] usbtmc 3-1:16.0: can't read capabilities [ 1135.504084][T17965] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0050/input/input202 [ 1135.602255][T17965] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0050/input/input203 [ 1135.656990][T17965] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0050/input/input204 [ 1135.702431][T17965] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0050/input/input205 [ 1135.727360][T17965] uclogic 0003:256C:006D.0050: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 1135.738989][ T7616] usb 3-1: USB disconnect, device number 17 [ 1135.795726][T17965] usb 4-1: USB disconnect, device number 32 [ 1136.115969][T18316] input: syz1 as /devices/virtual/input/input206 [ 1136.600481][T17965] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1136.720412][T17966] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1136.760072][T17960] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1136.775202][T17965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.789345][T17965] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1136.806856][T17965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.819809][T17965] usb 5-1: config 0 descriptor?? [ 1136.866194][ T7615] [drm:udl_init] *ERROR* Selecting channel failed [ 1136.880544][T17966] usb 4-1: Using ep0 maxpacket: 32 [ 1136.899118][T17966] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1136.908596][T13698] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 1136.912282][ T7615] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1136.920191][T17960] usb 6-1: device descriptor read/64, error -71 [ 1136.940065][ T7615] [drm] Initialized udl on minor 2 [ 1136.947466][T17966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.956180][ T7615] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1136.967972][T17966] usb 4-1: config 0 descriptor?? [ 1136.980572][ T7615] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1136.981919][T17966] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1136.989699][T13645] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1137.014028][ T7615] usb 2-1: USB disconnect, device number 16 [ 1137.020552][T13645] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1137.028578][T13645] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1137.046621][T17965] logitech 0003:046D:C295.0051: item fetching failed at offset 2/5 [ 1137.066032][T17965] logitech 0003:046D:C295.0051: parse failed [ 1137.087237][T17965] logitech 0003:046D:C295.0051: probe with driver logitech failed with error -22 [ 1137.102007][T13698] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.120246][T13698] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1137.129249][T13698] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1137.149773][T13698] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1137.164472][T13698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.192380][T18325] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1137.212826][T13698] hub 3-1:1.0: bad descriptor, ignoring hub [ 1137.218931][T13698] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1137.226592][T17960] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1137.236489][T13698] cdc_wdm 3-1:1.0: skipping garbage [ 1137.246316][T17965] usb 5-1: USB disconnect, device number 36 [ 1137.269164][T13698] cdc_wdm 3-1:1.0: skipping garbage [ 1137.286539][T13698] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1137.297031][T13698] cdc_wdm 3-1:1.0: Unknown control protocol [ 1137.380158][T17960] usb 6-1: device descriptor read/64, error -71 [ 1137.500358][T17960] usb usb6-port1: attempt power cycle [ 1137.530277][ T7615] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1137.570564][T18336] "syz.2.3559" (18336) uses obsolete ecb(arc4) skcipher [ 1137.690022][ T7615] usb 2-1: Using ep0 maxpacket: 8 [ 1137.704291][ T7615] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1137.714199][ T7615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.725542][ T7615] usb 2-1: Product: syz [ 1137.729737][ T7615] usb 2-1: Manufacturer: syz [ 1137.739531][ T7615] usb 2-1: SerialNumber: syz [ 1137.754964][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1137.761843][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1137.768800][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1137.775447][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1137.788709][ T7615] usb 2-1: config 0 descriptor?? [ 1137.798278][ T7615] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1137.960535][T17960] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1138.009057][T17960] usb 6-1: device descriptor read/8, error -71 [ 1138.015888][T17966] gspca_vc032x: reg_w err -71 [ 1138.026678][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1138.033337][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1138.039983][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1138.046620][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1138.053312][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1138.059959][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1138.067688][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1138.074344][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1138.081086][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1138.087733][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1138.094011][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1138.100644][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1138.107085][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1138.113806][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1138.120256][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1138.126904][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1138.150196][T17966] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.155870][T17966] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.165454][T17966] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.173113][T17966] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.179008][T17966] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.193516][T17966] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.199071][T17966] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.254826][T17966] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.310547][T17966] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.334671][T17966] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.390083][T17960] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1138.410625][T17966] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.416108][T17966] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.461730][T17960] usb 6-1: device descriptor read/8, error -71 [ 1138.473308][T17966] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.513121][T17966] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.547292][T17966] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.563661][T17966] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.593779][T17960] usb usb6-port1: unable to enumerate USB device [ 1138.607137][T17966] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.614969][T17966] gspca_vc032x: I2c Bus Busy Wait 00 [ 1138.621070][T17966] gspca_vc032x: Unknown sensor... [ 1138.626554][T17966] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1138.675147][T17966] usb 4-1: USB disconnect, device number 33 [ 1138.833821][T18346] input: syz1 as /devices/virtual/input/input207 [ 1139.380201][T13698] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1139.425135][T18358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3568'. [ 1139.549594][T13698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.581227][T13698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.595178][T13698] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1139.609457][T13698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.625872][ T7615] gspca_sonixj: reg_r err -71 [ 1139.634225][ T7615] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1139.639049][T13698] usb 6-1: config 0 descriptor?? [ 1139.821319][ T7615] usb 2-1: USB disconnect, device number 17 [ 1140.152316][ T7615] usb 3-1: USB disconnect, device number 18 [ 1140.699936][T13698] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0052/input/input208 [ 1140.809708][T13698] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0052/input/input209 [ 1140.844991][T13698] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0052/input/input210 [ 1140.891864][T13698] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0052/input/input211 [ 1140.900883][ T7615] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1140.960315][ T7616] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1141.096908][T13698] uclogic 0003:256C:006D.0052: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 1141.172497][T13698] usb 6-1: USB disconnect, device number 119 [ 1141.253996][ T7615] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1141.263368][ T7616] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.365763][ T7615] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1141.380067][ T7616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1141.401877][ T7615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.416403][ T7616] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1141.446546][ T7615] usb 3-1: config 0 descriptor?? [ 1141.455874][ T7616] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1141.495193][ T7616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.533340][ T7616] usb 2-1: config 0 descriptor?? [ 1141.602512][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 1141.672733][T18382] input: syz1 as /devices/virtual/input/input212 [ 1141.760047][ T7616] ath6kl: Failed to submit usb control message: -71 [ 1141.824392][ T7616] ath6kl: unable to send the bmi data to the device: -71 [ 1141.847100][ T7616] ath6kl: Unable to send get target info: -71 [ 1141.913575][ T7616] ath6kl: Failed to init ath6kl core: -71 [ 1141.977381][ T7616] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1142.027824][ T7616] usb 2-1: USB disconnect, device number 18 [ 1142.611144][T13698] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1142.770154][T13698] usb 5-1: Using ep0 maxpacket: 16 [ 1142.777868][T13698] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1142.793076][T13698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1142.823143][T13698] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1142.835734][T13698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.849061][T13698] usb 5-1: Product: syz [ 1142.860864][T13698] usb 5-1: Manufacturer: syz [ 1142.869769][T13698] usb 5-1: SerialNumber: syz [ 1142.895000][T13698] usb 5-1: config 0 descriptor?? [ 1142.911783][T13698] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1142.928345][T13698] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1142.992136][T18399] netlink: 'syz.5.3581': attribute type 1 has an invalid length. [ 1143.076729][T18399] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1143.102377][T18399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1143.121298][T16668] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1143.159127][T18399] veth5: entered promiscuous mode [ 1143.169109][T18399] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 1143.241461][T16669] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1143.334557][T17966] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1143.502140][T17966] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1143.521517][T13698] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1143.532731][T17966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1143.546288][T13698] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1143.555270][T17966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1143.567325][T17966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1143.567361][T18418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.594408][T17966] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1143.597168][T18418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.604725][T17966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.625778][T17966] usb 2-1: config 0 descriptor?? [ 1143.677233][T18418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.709691][T18418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.742202][T17960] usb 3-1: USB disconnect, device number 19 [ 1143.770659][ T7619] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1143.920498][ T7619] usb 6-1: device descriptor read/64, error -71 [ 1144.050822][T17966] plantronics 0003:047F:FFFF.0053: No inputs registered, leaving [ 1144.065088][T17966] plantronics 0003:047F:FFFF.0053: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1144.110433][ T7616] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1144.160230][ T7619] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1144.196187][T13698] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1144.203520][T17960] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1144.214937][T13698] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1144.222839][T13698] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1144.230095][T13698] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1144.237207][T13698] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1144.270208][ T7616] usb 4-1: Using ep0 maxpacket: 8 [ 1144.281502][ T7616] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1144.292787][ T7619] usb 6-1: device descriptor read/64, error -71 [ 1144.299350][ T7616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 1144.313066][ T7616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41300, setting to 1024 [ 1144.324874][ T7616] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1144.338054][ T7616] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1144.347413][ T7616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.358888][ T7616] usb 4-1: config 0 descriptor?? [ 1144.366957][T17960] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1144.380271][T17960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.396433][T17960] usb 3-1: config 0 descriptor?? [ 1144.410801][ T7619] usb usb6-port1: attempt power cycle [ 1144.762834][ T7619] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1144.780804][ T7616] redragon 0003:0C45:760B.0054: unknown main item tag 0x6 [ 1144.788113][ T7616] redragon 0003:0C45:760B.0054: item fetching failed at offset 7/133 [ 1144.799810][ T7619] usb 6-1: device descriptor read/8, error -71 [ 1144.807422][ T7616] redragon 0003:0C45:760B.0054: probe with driver redragon failed with error -22 [ 1144.996743][ T7616] usb 2-1: USB disconnect, device number 19 [ 1145.056224][T13698] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1145.065410][T13698] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1145.076763][T13698] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1145.080553][ T7619] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1145.083777][T13698] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1145.102008][T13698] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1145.111707][ T7619] usb 6-1: device descriptor read/8, error -71 [ 1145.118029][T13698] usb 5-1: USB disconnect, device number 37 [ 1145.215786][T17965] usb 4-1: USB disconnect, device number 34 [ 1145.230470][ T7619] usb usb6-port1: unable to enumerate USB device [ 1145.797211][T18431] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1146.027007][ T7619] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1146.100507][ T7616] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1146.185611][ T7619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.198790][ T7619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.210549][ T7619] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1146.221882][ T7619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.250702][ T7619] usb 2-1: config 0 descriptor?? [ 1146.267056][ T7616] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1146.282758][ T7616] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1146.302317][ T7616] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 59391, setting to 1024 [ 1146.330093][ T7616] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1146.348862][ T7616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.368560][ T7616] usb 5-1: config 0 descriptor?? [ 1146.379640][T18437] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1146.395718][ T7616] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1146.643401][T17960] pegasus 3-1:0.0: setup Pegasus II specific registers [ 1146.765774][T18453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3596'. [ 1146.784748][T17960] pegasus 3-1:0.0: can't locate MII phy, using default [ 1146.875081][T18433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.902483][T18433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.913617][ T7616] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 1146.929473][T18433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.944879][T18433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.953242][ T7616] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1147.003846][ T7616] usb 5-1: MIDIStreaming interface descriptor not found [ 1147.052740][T17960] pegasus 3-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 86:a0:ab:2b:c5:30 [ 1147.134213][T17960] usb 3-1: USB disconnect, device number 20 [ 1147.220079][T13698] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1147.382471][T13698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.395430][T13698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.406017][T13698] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1147.416068][T13698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.429324][T13698] usb 6-1: config 0 descriptor?? [ 1147.727892][T18461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.786076][T18461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.823745][T18461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.846493][ T7619] uclogic 0003:256C:006D.0055: v1 frame probing failed: -71 [ 1147.857805][T18480] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1147.860045][ T7619] uclogic 0003:256C:006D.0055: failed probing parameters: -71 [ 1147.877752][T18461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.900176][ T7619] uclogic 0003:256C:006D.0055: probe with driver uclogic failed with error -71 [ 1147.940890][ T7619] usb 2-1: USB disconnect, device number 20 [ 1148.139984][T17960] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1148.217409][T13698] arvo 0003:1E7D:30D4.0056: unknown main item tag 0x0 [ 1148.230797][T13698] arvo 0003:1E7D:30D4.0056: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 1148.411844][T18461] xt_hashlimit: overflow, rate too high: 0 [ 1148.412343][T17960] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.449703][T17960] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1148.484348][T17960] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1148.510168][ T7619] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1148.511157][T17960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1148.549320][T13698] arvo 0003:1E7D:30D4.0056: couldn't init struct arvo_device [ 1148.567319][T17960] usb 3-1: SerialNumber: syz [ 1148.572486][T13698] arvo 0003:1E7D:30D4.0056: couldn't install keyboard [ 1148.608362][T13698] arvo 0003:1E7D:30D4.0056: probe with driver arvo failed with error -71 [ 1148.635626][T13698] usb 6-1: USB disconnect, device number 124 [ 1148.767623][ T7619] usb 4-1: config 0 has no interfaces? [ 1148.810753][T17960] usb 3-1: 0:2 : does not exist [ 1148.849007][T17960] usb 3-1: USB disconnect, device number 21 [ 1148.999285][ T7619] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1149.010180][T17965] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1149.031709][ T7619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.056420][ T7619] usb 4-1: Product: syz [ 1149.076952][ T5937] udevd[5937]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1149.116041][ T7619] usb 4-1: Manufacturer: syz [ 1149.122707][ T7615] usb 5-1: USB disconnect, device number 38 [ 1149.193122][ T7619] usb 4-1: SerialNumber: syz [ 1149.204692][T17965] usb 2-1: config index 0 descriptor too short (expected 149, got 148) [ 1149.229558][T17965] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.255066][T17965] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1149.268503][T17965] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1149.282156][T17965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1149.294723][T17965] usb 2-1: SerialNumber: syz [ 1149.318853][ T7619] usb 4-1: config 0 descriptor?? [ 1149.424134][T17965] usb 2-1: 0:2 : does not exist [ 1149.809239][T17965] usb 2-1: USB disconnect, device number 21 [ 1149.881227][T18485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.891392][T18485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.060145][ T7615] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1150.100002][T13698] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1150.293951][ T7615] usb 6-1: config 0 has no interfaces? [ 1150.308099][ T7615] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1150.317431][ T7615] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.338274][ T7615] usb 6-1: Product: syz [ 1150.384332][ T7615] usb 6-1: Manufacturer: syz [ 1150.402636][ T7615] usb 6-1: SerialNumber: syz [ 1150.601365][T13698] usb 3-1: config 0 has no interfaces? [ 1150.620671][ T7615] usb 6-1: config 0 descriptor?? [ 1150.742010][T13698] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1150.831426][T13698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.839497][T13698] usb 3-1: Product: syz [ 1150.889093][T13698] usb 3-1: Manufacturer: syz [ 1150.900158][T13698] usb 3-1: SerialNumber: syz [ 1151.038048][T13698] usb 3-1: config 0 descriptor?? [ 1153.010753][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3616'. [ 1153.184629][ T7615] usb 4-1: USB disconnect, device number 35 [ 1153.337957][ T7619] usb 6-1: USB disconnect, device number 125 [ 1153.605271][T18529] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3619'. [ 1153.690679][T13698] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1153.867033][T13698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.886479][T13698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1153.896931][T13698] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1153.910026][T13698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.929203][T13698] usb 4-1: config 0 descriptor?? [ 1153.950416][ T7619] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1153.970040][ T7615] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1154.134069][ T7619] usb 6-1: device descriptor read/64, error -71 [ 1154.168416][ T7615] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1154.179946][ T7615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.208531][ T7615] usb 2-1: Product: syz [ 1154.217756][ T7615] usb 2-1: Manufacturer: syz [ 1154.225047][ T7615] usb 2-1: SerialNumber: syz [ 1154.238734][ T7615] usb 2-1: config 0 descriptor?? [ 1154.248793][ T7615] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1154.283083][ T7615] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1154.297187][ T7615] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1154.307238][ T7615] usb 2-1: media controller created [ 1154.325684][T18547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.344534][ T7615] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1154.355834][T18547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.390127][T18547] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1154.398867][ T7619] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1154.416828][T18548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3626'. [ 1154.416834][T18547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3626'. [ 1154.466937][ T7615] DVB: Unable to find symbol mt352_attach() [ 1154.500155][T18548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3626'. [ 1154.515127][T18552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.530020][ T7619] usb 6-1: device descriptor read/64, error -71 [ 1154.545243][ T7615] DVB: Unable to find symbol nxt6000_attach() [ 1154.560742][T18547] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1154.565875][ T7615] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1154.574680][T18552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.586685][T17965] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1154.589170][ T7615] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input214 [ 1154.616175][ T7615] dvb-usb: schedule remote query interval to 1000 msecs. [ 1154.623737][ T7615] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1154.634427][ T7615] dvb-usb: bulk message failed: -22 (7/0) [ 1154.640890][ T7615] dvb-usb: bulk message failed: -22 (7/0) [ 1154.651943][ T7615] usb 2-1: USB disconnect, device number 22 [ 1154.660406][ T7619] usb usb6-port1: attempt power cycle [ 1154.714518][ T7616] usb 3-1: USB disconnect, device number 22 [ 1154.752585][T17965] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 1154.774444][T17965] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1154.788257][T17965] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1154.799755][T17965] usb 5-1: New USB device found, idVendor=0471, idProduct=2088, bcdDevice=c6.66 [ 1154.811622][T17965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.829022][ T7615] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1154.844382][T17965] usb 5-1: config 0 descriptor?? [ 1154.856468][T18546] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1155.000079][ T7619] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1155.021719][ T7619] usb 6-1: device descriptor read/8, error -71 [ 1155.033654][ T7616] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1155.044388][T13698] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0057/input/input215 [ 1155.100050][T17965] usb 5-1: string descriptor 0 read error: -71 [ 1155.128217][T17965] usb 5-1: USB disconnect, device number 39 [ 1155.153244][T13698] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0057/input/input216 [ 1155.181768][T13698] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0057/input/input217 [ 1155.192494][ T7616] usb 3-1: Using ep0 maxpacket: 16 [ 1155.206391][ T7616] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1155.207194][T13698] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0057/input/input218 [ 1155.223040][ T7616] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.242960][T13698] uclogic 0003:256C:006D.0057: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 1155.247232][ T7616] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1155.272966][ T7616] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24929, setting to 1024 [ 1155.273662][T13698] usb 4-1: USB disconnect, device number 36 [ 1155.287686][ T7619] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1155.305239][ T7616] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1155.341159][ T7619] usb 6-1: device descriptor read/8, error -71 [ 1155.363628][ T7616] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1155.392062][ T7616] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1155.401599][ T7618] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1155.446086][ T7616] usb 3-1: New USB device strings: Mfr=8, Product=0, SerialNumber=1 [ 1155.454285][ T7616] usb 3-1: Manufacturer: syz [ 1155.459147][ T7616] usb 3-1: SerialNumber: syz [ 1155.470669][ T7619] usb usb6-port1: unable to enumerate USB device [ 1155.499288][T18552] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 1155.507632][T18552] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 1155.570643][ T7618] usb 2-1: device descriptor read/64, error -71 [ 1155.746792][ T7616] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 1155.781518][ T7616] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 1155.799457][ T7616] usb 3-1: USB disconnect, device number 23 [ 1155.820005][ T7618] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1155.970768][ T7618] usb 2-1: device descriptor read/64, error -71 [ 1156.010344][T17965] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1156.084359][ T7618] usb usb2-port1: attempt power cycle [ 1156.170088][T17965] usb 5-1: Using ep0 maxpacket: 8 [ 1156.176922][T17965] usb 5-1: config 2 interface 0 has no altsetting 0 [ 1156.186240][T17965] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 1156.195538][T17965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.204714][T17965] usb 5-1: Product: syz [ 1156.208926][T17965] usb 5-1: Manufacturer: syz [ 1156.213626][T17965] usb 5-1: SerialNumber: syz [ 1156.422568][T18568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3633'. [ 1156.431241][ T7618] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1156.441558][T17965] usb 5-1: USB disconnect, device number 40 [ 1156.451302][T18568] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3633'. [ 1156.470652][ T7618] usb 2-1: device descriptor read/8, error -71 [ 1156.473272][T18568] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1156.730166][ T7618] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1156.760784][ T7618] usb 2-1: device descriptor read/8, error -71 [ 1156.881040][ T7618] usb usb2-port1: unable to enumerate USB device [ 1157.053929][T18578] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1157.075152][T18578] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1157.223932][ T7619] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1157.430031][ T7619] usb 4-1: Using ep0 maxpacket: 32 [ 1157.437423][ T7619] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1157.447324][ T7619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.467940][ T7619] usb 4-1: config 0 descriptor?? [ 1157.522856][ T7619] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1157.621026][T18588] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3640'. [ 1157.780008][T13698] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 1157.875555][T18591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3641'. [ 1157.884775][T18591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3641'. [ 1157.932109][T13698] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.942880][T13698] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1157.952261][T13698] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1157.971187][T13698] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1157.981418][T13698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.989686][T13698] usb 5-1: Product: syz [ 1157.995160][T13698] usb 5-1: Manufacturer: syz [ 1158.000953][T13698] usb 5-1: SerialNumber: syz [ 1158.026973][T13698] usb 5-1: selecting invalid altsetting 1 [ 1158.541535][ T7619] gspca_vc032x: reg_w err -71 [ 1158.546293][ T7619] gspca_vc032x: I2c Bus Busy Wait 00 [ 1158.551755][ T7619] gspca_vc032x: I2c Bus Busy Wait 00 [ 1158.557092][ T7619] gspca_vc032x: I2c Bus Busy Wait 00 [ 1158.571888][ T7619] gspca_vc032x: I2c Bus Busy Wait 00 [ 1158.595226][ T7619] gspca_vc032x: I2c Bus Busy Wait 00 [ 1158.626927][ T7619] gspca_vc032x: I2c Bus Busy Wait 00 [ 1158.642464][ T7619] gspca_vc032x: I2c Bus Busy Wait 00 [ 1158.647924][T13698] usb 5-1: selecting invalid altsetting 1 [ 1158.647993][ T7619] gspca_vc032x: I2c Bus Busy Wait 00 [ 1158.654161][T13698] cdc_ncm 5-1:1.0: bind() failure [ 1158.681587][ T7619] gspca_vc032x: I2c Bus Busy Wait 00 [ 1158.686959][ T7619] gspca_vc032x: I2c Bus Busy Wait 00 [ 1158.698526][ T7619] gspca_vc032x: I2c Bus Busy Wait 00 [ 1158.704095][ T7619] gspca_vc032x: I2c Bus Busy Wait 00 [ 1158.709459][ T7619] gspca_vc032x: I2c Bus Busy Wait 00 [ 1158.714880][ T7619] gspca_vc032x: I2c Bus Busy Wait 00 [ 1158.720241][ T7619] gspca_vc032x: I2c Bus Busy Wait 00 [ 1158.726160][ T7619] gspca_vc032x: I2c Bus Busy Wait 00 [ 1158.731608][ T7619] gspca_vc032x: I2c Bus Busy Wait 00 [ 1158.737127][ T7619] gspca_vc032x: I2c Bus Busy Wait 00 [ 1158.742648][ T7619] gspca_vc032x: Unknown sensor... [ 1158.748678][ T7619] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1158.770294][ T7619] usb 4-1: USB disconnect, device number 37 [ 1158.832969][T13698] usb 5-1: USB disconnect, device number 41 [ 1159.440764][T13698] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1159.601310][T17965] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1159.619962][T13698] usb 2-1: Using ep0 maxpacket: 16 [ 1159.651005][T13698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.669830][T13698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1159.749592][T13698] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1159.771995][T17965] usb 6-1: Using ep0 maxpacket: 32 [ 1159.798129][T17965] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1159.811858][T13698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.832264][T17965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.897041][T13698] usb 2-1: config 0 descriptor?? [ 1159.910862][T17965] usb 6-1: config 0 descriptor?? [ 1159.936155][T17965] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1160.020065][T17960] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1160.201691][T17960] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 1160.210436][T17960] usb 5-1: config 0 has no interface number 0 [ 1160.216755][T17960] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1160.249807][T17960] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1160.284732][T17966] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1160.317865][T17960] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1160.343802][T13698] gt683r_led 0003:1770:FF00.0058: ignoring exceeding usage max [ 1160.375675][T17960] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1160.394750][T13698] gt683r_led 0003:1770:FF00.0058: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0 [ 1160.414221][T17960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.465362][T17966] usb 3-1: Using ep0 maxpacket: 16 [ 1160.586615][T18611] input: syz0 as /devices/virtual/input/input220 [ 1160.626622][T17966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.668424][T17960] usb 5-1: config 0 descriptor?? [ 1160.770841][T17966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.790485][T17966] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1160.860944][T17960] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input221 [ 1160.873116][T17966] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1160.885014][T17966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.932642][T17965] gspca_vc032x: reg_w err -71 [ 1160.937522][T17965] gspca_vc032x: I2c Bus Busy Wait 00 [ 1160.954082][T18626] netlink: 'syz.3.3650': attribute type 3 has an invalid length. [ 1160.958141][T17965] gspca_vc032x: I2c Bus Busy Wait 00 [ 1160.979342][T18623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3649'. [ 1161.011147][T18626] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3650'. [ 1161.044162][T17965] gspca_vc032x: I2c Bus Busy Wait 00 [ 1161.053111][T17965] gspca_vc032x: I2c Bus Busy Wait 00 [ 1161.055511][T18619] syzkaller0: entered promiscuous mode [ 1161.058439][T17965] gspca_vc032x: I2c Bus Busy Wait 00 [ 1161.058456][T17965] gspca_vc032x: I2c Bus Busy Wait 00 [ 1161.058468][T17965] gspca_vc032x: I2c Bus Busy Wait 00 [ 1161.058480][T17965] gspca_vc032x: I2c Bus Busy Wait 00 [ 1161.108693][T17966] usb 3-1: config 0 descriptor?? [ 1161.180577][T17965] gspca_vc032x: I2c Bus Busy Wait 00 [ 1161.212885][T17960] usb 2-1: USB disconnect, device number 27 [ 1161.229247][T17967] gt683r_led 0003:1770:FF00.0058: failed to send set report request: -19 [ 1161.229782][T18619] syzkaller0: entered allmulticast mode [ 1161.284454][T17967] gt683r_led 0003:1770:FF00.0058: failed to send set report request: -19 [ 1161.313399][T17965] gspca_vc032x: I2c Bus Busy Wait 00 [ 1161.385337][T17965] gspca_vc032x: I2c Bus Busy Wait 00 [ 1161.394961][T17965] gspca_vc032x: I2c Bus Busy Wait 00 [ 1161.404539][T17965] gspca_vc032x: I2c Bus Busy Wait 00 [ 1161.411382][T17965] gspca_vc032x: I2c Bus Busy Wait 00 [ 1161.418086][T17965] gspca_vc032x: I2c Bus Busy Wait 00 [ 1161.441406][T17965] gspca_vc032x: I2c Bus Busy Wait 00 [ 1161.446807][T17965] gspca_vc032x: I2c Bus Busy Wait 00 [ 1161.476959][T17965] gspca_vc032x: I2c Bus Busy Wait 00 [ 1161.505599][T17965] gspca_vc032x: Unknown sensor... [ 1161.541050][T17965] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 1161.575257][T17966] shield 0003:0955:7214.0059: unknown main item tag 0x0 [ 1161.582974][T17965] usb 6-1: USB disconnect, device number 4 [ 1161.614179][T17966] shield 0003:0955:7214.0059: unknown main item tag 0x0 [ 1161.759610][T17966] shield 0003:0955:7214.0059: unknown main item tag 0x0 [ 1161.768898][T17966] shield 0003:0955:7214.0059: unknown main item tag 0x0 [ 1161.776743][T18625] random: crng reseeded on system resumption [ 1161.793179][T17966] shield 0003:0955:7214.0059: unknown main item tag 0x0 [ 1161.828307][T17966] input: HID 0955:7214 Haptics as /devices/virtual/input/input222 [ 1161.921069][T17966] shield 0003:0955:7214.0059: Registered Thunderstrike controller [ 1161.945499][T17966] shield 0003:0955:7214.0059: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 1162.197888][T18634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.224119][T18634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.428160][T17960] shield 0003:0955:7214.0059: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1162.429386][ T7616] usb 3-1: USB disconnect, device number 24 [ 1162.461329][T17960] shield 0003:0955:7214.0059: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1162.497813][ T7616] ------------[ cut here ]------------ [ 1162.503354][ T7616] workqueue: work disable count underflowed [ 1162.509384][ T7616] WARNING: CPU: 0 PID: 7616 at kernel/workqueue.c:4326 enable_work+0x345/0x360 [ 1162.518474][ T7616] Modules linked in: [ 1162.522874][ T7616] CPU: 0 UID: 0 PID: 7616 Comm: kworker/0:8 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 1162.534988][ T7616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1162.545100][ T7616] Workqueue: usb_hub_wq hub_event [ 1162.550179][ T7616] RIP: 0010:enable_work+0x345/0x360 [ 1162.555432][ T7616] Code: d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 00 b7 38 00 c6 05 6f c5 bf 0e 01 90 48 c7 c7 e0 d0 49 8c e8 fc 0f f8 ff 90 <0f> 0b 90 90 e9 51 ff ff ff e8 fd 99 a5 0a 66 66 66 66 2e 0f 1f 84 [ 1162.575174][ T7616] RSP: 0018:ffffc90003aaf000 EFLAGS: 00010046 [ 1162.581298][ T7616] RAX: 04c440049db48e00 RBX: 0000000000000000 RCX: 0000000000100000 [ 1162.589321][ T7616] RDX: ffffc90019fa0000 RSI: 000000000000dd83 RDI: 000000000000dd84 [ 1162.597443][ T7616] RBP: ffffc90003aaf0e0 R08: ffffffff818218d2 R09: 1ffff110170c47d2 [ 1162.605471][ T7616] R10: dffffc0000000000 R11: ffffed10170c47d3 R12: 1ffff92000755e04 [ 1162.607242][T17960] shield 0003:0955:7214.0059: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1162.613911][ T7616] R13: dffffc0000000000 R14: 001fffffffc00001 R15: ffff8880126b4730 [ 1162.613938][ T7616] FS: 0000000000000000(0000) GS:ffff888124f9a000(0000) knlGS:0000000000000000 [ 1162.613958][ T7616] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1162.613973][ T7616] CR2: 000000110c40fd93 CR3: 000000006d30a000 CR4: 00000000003526f0 [ 1162.613993][ T7616] DR0: 0000000000000000 DR1: 000000000000000b DR2: 0000000000000000 [ 1162.614010][ T7616] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1162.626067][T17960] shield 0003:0955:7214.0059: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1162.634071][ T7616] Call Trace: [ 1162.634094][ T7616] [ 1162.634110][ T7616] ? __pfx_enable_work+0x10/0x10 [ 1162.634144][ T7616] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1162.634171][ T7616] ? __thermal_zone_cdev_unbind+0x45d/0x490 [ 1162.634202][ T7616] ? lockdep_hardirqs_on+0x9d/0x150 [ 1162.714287][ T7616] __cancel_work_sync+0xf5/0x110 [ 1162.719251][ T7616] thermal_zone_device_unregister+0x210/0x390 [ 1162.725432][ T7616] power_supply_unregister+0xe8/0x140 [ 1162.730848][ T7616] ? __pfx_shield_remove+0x10/0x10 [ 1162.735980][ T7616] shield_remove+0x72/0x120 [ 1162.740510][ T7616] hid_device_remove+0x225/0x370 [ 1162.745469][ T7616] ? __pfx_hid_device_remove+0x10/0x10 [ 1162.750948][ T7616] device_release_driver_internal+0x4a9/0x7c0 [ 1162.757044][ T7616] bus_remove_device+0x34f/0x420 [ 1162.762005][ T7616] device_del+0x57c/0x9b0 [ 1162.766441][ T7616] ? __pfx_device_del+0x10/0x10 [ 1162.771404][ T7616] hid_destroy_device+0x6a/0x1b0 [ 1162.776362][ T7616] usbhid_disconnect+0x9e/0xc0 [ 1162.781225][ T7616] usb_unbind_interface+0x25b/0x940 [ 1162.786437][ T7616] ? kernfs_find_ns+0x202/0x310 [ 1162.791307][ T7616] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1162.797123][ T7616] device_release_driver_internal+0x503/0x7c0 [ 1162.803214][ T7616] bus_remove_device+0x34f/0x420 [ 1162.808192][ T7616] device_del+0x57c/0x9b0 [ 1162.812536][ T7616] ? kobject_put+0x272/0x480 [ 1162.817139][ T7616] ? __pfx_device_del+0x10/0x10 [ 1162.822002][ T7616] ? kobject_put+0x44d/0x480 [ 1162.826608][ T7616] usb_disable_device+0x3c5/0x860 [ 1162.831664][ T7616] usb_disconnect+0x340/0x960 [ 1162.836370][ T7616] hub_event+0x1d2a/0x50f0 [ 1162.840845][ T7616] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1162.846069][ T7616] ? __pfx_hub_event+0x10/0x10 [ 1162.850841][ T7616] ? __lock_acquire+0xad5/0xd80 [ 1162.855715][ T7616] ? __pfx_insn_get_displacement+0x10/0x10 [ 1162.861545][ T7616] ? process_scheduled_works+0x9cb/0x18e0 [ 1162.867576][ T7616] process_scheduled_works+0xac3/0x18e0 [ 1162.873178][ T7616] ? __pfx_process_scheduled_works+0x10/0x10 [ 1162.879295][ T7616] ? assign_work+0x367/0x3d0 [ 1162.883912][ T7616] worker_thread+0x870/0xd50 [ 1162.888526][ T7616] ? __kthread_parkme+0x1a8/0x200 [ 1162.893567][ T7616] ? __pfx_worker_thread+0x10/0x10 [ 1162.898699][ T7616] kthread+0x7b7/0x940 [ 1162.902782][ T7616] ? __pfx_worker_thread+0x10/0x10 [ 1162.907991][ T7616] ? __pfx_kthread+0x10/0x10 [ 1162.912592][ T7616] ? __pfx_kthread+0x10/0x10 [ 1162.917193][ T7616] ? __pfx_kthread+0x10/0x10 [ 1162.921802][ T7616] ? __pfx_kthread+0x10/0x10 [ 1162.926405][ T7616] ? _raw_spin_unlock_irq+0x23/0x50 [ 1162.931620][ T7616] ? lockdep_hardirqs_on+0x9d/0x150 [ 1162.936938][ T7616] ? __pfx_kthread+0x10/0x10 [ 1162.941542][ T7616] ret_from_fork+0x4b/0x80 [ 1162.945968][ T7616] ? __pfx_kthread+0x10/0x10 [ 1162.950581][ T7616] ret_from_fork_asm+0x1a/0x30 [ 1162.955380][ T7616] [ 1162.958418][ T7616] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1162.966016][ T7616] CPU: 0 UID: 0 PID: 7616 Comm: kworker/0:8 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 1162.978188][ T7616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1162.988256][ T7616] Workqueue: usb_hub_wq hub_event [ 1162.993302][ T7616] Call Trace: [ 1162.996763][ T7616] [ 1162.999708][ T7616] dump_stack_lvl+0x241/0x360 [ 1163.004409][ T7616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1163.009628][ T7616] ? __pfx__printk+0x10/0x10 [ 1163.014239][ T7616] ? vscnprintf+0x5d/0x90 [ 1163.018691][ T7616] panic+0x349/0x880 [ 1163.022633][ T7616] ? __warn+0x174/0x4d0 [ 1163.026822][ T7616] ? __pfx_panic+0x10/0x10 [ 1163.031269][ T7616] ? ret_from_fork_asm+0x1a/0x30 [ 1163.036226][ T7616] __warn+0x344/0x4d0 [ 1163.040225][ T7616] ? enable_work+0x345/0x360 [ 1163.044832][ T7616] report_bug+0x2b3/0x500 [ 1163.049175][ T7616] ? enable_work+0x345/0x360 [ 1163.053784][ T7616] ? enable_work+0x345/0x360 [ 1163.058392][ T7616] ? enable_work+0x347/0x360 [ 1163.063002][ T7616] handle_bug+0x89/0x170 [ 1163.067274][ T7616] exc_invalid_op+0x1a/0x50 [ 1163.072061][ T7616] asm_exc_invalid_op+0x1a/0x20 [ 1163.076922][ T7616] RIP: 0010:enable_work+0x345/0x360 [ 1163.082138][ T7616] Code: d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 00 b7 38 00 c6 05 6f c5 bf 0e 01 90 48 c7 c7 e0 d0 49 8c e8 fc 0f f8 ff 90 <0f> 0b 90 90 e9 51 ff ff ff e8 fd 99 a5 0a 66 66 66 66 2e 0f 1f 84 [ 1163.102038][ T7616] RSP: 0018:ffffc90003aaf000 EFLAGS: 00010046 [ 1163.108134][ T7616] RAX: 04c440049db48e00 RBX: 0000000000000000 RCX: 0000000000100000 [ 1163.116141][ T7616] RDX: ffffc90019fa0000 RSI: 000000000000dd83 RDI: 000000000000dd84 [ 1163.124126][ T7616] RBP: ffffc90003aaf0e0 R08: ffffffff818218d2 R09: 1ffff110170c47d2 [ 1163.132110][ T7616] R10: dffffc0000000000 R11: ffffed10170c47d3 R12: 1ffff92000755e04 [ 1163.140112][ T7616] R13: dffffc0000000000 R14: 001fffffffc00001 R15: ffff8880126b4730 [ 1163.148123][ T7616] ? __warn_printk+0x2a2/0x360 [ 1163.152967][ T7616] ? __pfx_enable_work+0x10/0x10 [ 1163.157953][ T7616] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1163.163982][ T7616] ? __thermal_zone_cdev_unbind+0x45d/0x490 [ 1163.169918][ T7616] ? lockdep_hardirqs_on+0x9d/0x150 [ 1163.175175][ T7616] __cancel_work_sync+0xf5/0x110 [ 1163.180155][ T7616] thermal_zone_device_unregister+0x210/0x390 [ 1163.186284][ T7616] power_supply_unregister+0xe8/0x140 [ 1163.191693][ T7616] ? __pfx_shield_remove+0x10/0x10 [ 1163.196860][ T7616] shield_remove+0x72/0x120 [ 1163.201430][ T7616] hid_device_remove+0x225/0x370 [ 1163.206404][ T7616] ? __pfx_hid_device_remove+0x10/0x10 [ 1163.211992][ T7616] device_release_driver_internal+0x4a9/0x7c0 [ 1163.218106][ T7616] bus_remove_device+0x34f/0x420 [ 1163.223164][ T7616] device_del+0x57c/0x9b0 [ 1163.227609][ T7616] ? __pfx_device_del+0x10/0x10 [ 1163.232573][ T7616] hid_destroy_device+0x6a/0x1b0 [ 1163.237540][ T7616] usbhid_disconnect+0x9e/0xc0 [ 1163.242317][ T7616] usb_unbind_interface+0x25b/0x940 [ 1163.247531][ T7616] ? kernfs_find_ns+0x202/0x310 [ 1163.252404][ T7616] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1163.258135][ T7616] device_release_driver_internal+0x503/0x7c0 [ 1163.264326][ T7616] bus_remove_device+0x34f/0x420 [ 1163.269295][ T7616] device_del+0x57c/0x9b0 [ 1163.273649][ T7616] ? kobject_put+0x272/0x480 [ 1163.278259][ T7616] ? __pfx_device_del+0x10/0x10 [ 1163.283141][ T7616] ? kobject_put+0x44d/0x480 [ 1163.287866][ T7616] usb_disable_device+0x3c5/0x860 [ 1163.293046][ T7616] usb_disconnect+0x340/0x960 [ 1163.297853][ T7616] hub_event+0x1d2a/0x50f0 [ 1163.302316][ T7616] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1163.307552][ T7616] ? __pfx_hub_event+0x10/0x10 [ 1163.312329][ T7616] ? __lock_acquire+0xad5/0xd80 [ 1163.317203][ T7616] ? __pfx_insn_get_displacement+0x10/0x10 [ 1163.323037][ T7616] ? process_scheduled_works+0x9cb/0x18e0 [ 1163.328775][ T7616] process_scheduled_works+0xac3/0x18e0 [ 1163.334365][ T7616] ? __pfx_process_scheduled_works+0x10/0x10 [ 1163.340382][ T7616] ? assign_work+0x367/0x3d0 [ 1163.345081][ T7616] worker_thread+0x870/0xd50 [ 1163.349690][ T7616] ? __kthread_parkme+0x1a8/0x200 [ 1163.354816][ T7616] ? __pfx_worker_thread+0x10/0x10 [ 1163.359940][ T7616] kthread+0x7b7/0x940 [ 1163.364022][ T7616] ? __pfx_worker_thread+0x10/0x10 [ 1163.369143][ T7616] ? __pfx_kthread+0x10/0x10 [ 1163.373768][ T7616] ? __pfx_kthread+0x10/0x10 [ 1163.378366][ T7616] ? __pfx_kthread+0x10/0x10 [ 1163.383056][ T7616] ? __pfx_kthread+0x10/0x10 [ 1163.387658][ T7616] ? _raw_spin_unlock_irq+0x23/0x50 [ 1163.392869][ T7616] ? lockdep_hardirqs_on+0x9d/0x150 [ 1163.398080][ T7616] ? __pfx_kthread+0x10/0x10 [ 1163.402783][ T7616] ret_from_fork+0x4b/0x80 [ 1163.407206][ T7616] ? __pfx_kthread+0x10/0x10 [ 1163.411810][ T7616] ret_from_fork_asm+0x1a/0x30 [ 1163.416619][ T7616] [ 1163.419915][ T7616] Kernel Offset: disabled [ 1163.424249][ T7616] Rebooting in 86400 seconds..