last executing test programs: 21m43.362029697s ago: executing program 3 (id=1087): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="500100001000130700000000fcdbdf2520010000000000000000000000000001ac14143d000000000000000000000000000000004e210002020000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000001400)="10", 0x1}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x8000000040000005) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000100)={0x0, &(0x7f0000000ac0)=[@wr_crn={0x46, 0x20, {0x3, 0x7fffffff}}, @wrmsr={0x1e, 0x20, {0xad6, 0xffffffffffff70a5}}, @wrmsr={0x1e, 0x20, {0x90c, 0x9}}, @wr_drn={0x6e, 0x20, {0x1, 0x7fffffff}}, @uexit={0x0, 0x18, 0x4}, @wrmsr={0x1e, 0x20, {0x9c9, 0x3}}, @out_dx={0xaa, 0x28, {0xccde, 0x1, 0x91d}}, @wr_crn={0x46, 0x20, {0x2, 0x4}}, @cpuid={0x14, 0x18, {0x2a7, 0x7f}}, @cpuid={0x14, 0x18, {0x3, 0x4}}, @wr_crn={0x46, 0x20, {0x4, 0xc96}}, @uexit={0x0, 0x18, 0x9}, @set_irq_handler={0xbe, 0x20, {0xad, 0x1}}, @wr_crn={0x46, 0x20, {0x3, 0x5}}, @wr_crn={0x46, 0x20, {0x6, 0xfb5}}, @in_dx={0x82, 0x20, {0xf47c}}, @out_dx={0xaa, 0x28, {0x787e, 0x6, 0xd}}, @in_dx={0x82, 0x20, {0x8386, 0x7}}, @wrmsr={0x1e, 0x20, {0x8df, 0x1ff}}, @wrmsr={0x1e, 0x20, {0x381, 0x3}}, @in_dx={0x82, 0x20, {0x4c3f, 0x7}}, @rdmsr={0x32, 0x18, {0xdc0}}, @wrmsr={0x1e, 0x20, {0xb09, 0x9a}}, @wr_crn={0x46, 0x20, {0x0, 0x10000}}, @wr_crn={0x46, 0x20, {0x0, 0x8683}}, @wrmsr={0x1e, 0x20, {0xb5d, 0x8000000000000001}}, @wr_drn={0x6e, 0x20, {0x4, 0xc}}], 0x348}) syz_open_dev$loop(&(0x7f0000000140), 0x4, 0x280000) unshare(0x20000400) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x9, 0x1, 0x6, 0x1, r0, 0x7ffffffc, '\x00', 0x0, r0, 0x3, 0x2, 0x1, 0x5}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000004000000060007000000000000000000", @ANYRES32=r6, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r7, 0xd}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x14}}, {0x4}}]}]}, 0x58}}, 0x0) bind$packet(r0, &(0x7f0000000240)={0x11, 0xf8, 0x0, 0x1, 0xff, 0x6, @link_local}, 0x14) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0xc200, 0x0) write$snapshot(r9, &(0x7f0000000200)="dd22507fc52593daa5e852142465bcdc6b45c269a390e73848db51feee87fc6c10ad633ba4cb5191f3", 0x29) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) munmap(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r8}, &(0x7f0000000880), &(0x7f00000008c0)=r6}, 0x20) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 21m40.515483618s ago: executing program 3 (id=1099): r0 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) syz_usb_connect$cdc_ecm(0x2, 0x52, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024000010100000309040000ff02020000052407000005"], 0x0) 21m37.537473452s ago: executing program 3 (id=1108): prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='-&{\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x40) getdents(r0, &(0x7f0000000fc0)=""/4096, 0x1000) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000001280)=ANY=[@ANYBLOB="1201010200000020ac055902400001020301090224000101fea0ab090405080103010203092180008e0122710009058103ff03a40884"], &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x2, 0x5002) syz_clone(0x64100080, 0x0, 0x0, 0x0, 0x0, 0x0) 21m35.68776339s ago: executing program 3 (id=1119): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="0100"], 0x398}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x8402, &(0x7f00000021c0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100279d700003dcdf2501000000140002007767300000000000000000000000000024000300b08073e8d44e91e3da922c22438244bb885c69e2d835b114293a4ddc6e0800050001000000000000"], 0x54}, 0x1, 0x0, 0x0, 0xc004811}, 0x24004084) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x164, 0x14, 0x1, 0x0, 0x0, {0x2, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "2348e26ff5ed7a6f13e2f0ba71e4eefe4f0d1d15f1625bfd83967b477af40d9fec9269267f239cff01157f591f"}, @INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "aa3301d11e4e87e1f59a88d05a8d936a066a6792b0c1"}, @INET_DIAG_REQ_BYTECODE={0x100, 0x1, "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"}]}, 0x164}}, 0x4000) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) r12 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xe, &(0x7f0000000280)=ANY=[@ANYRES16=r9, @ANYRESOCT, @ANYRES32=r10, @ANYRESHEX=r8, @ANYRES64=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) syz_usb_control_io(r12, 0x0, 0x0) syz_usb_control_io$hid(r12, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 21m32.533556023s ago: executing program 3 (id=1126): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x0, 0xab, 0xd1, 0xa0, 0x40, 0x77b, 0x2226, 0xca8b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3a, 0x92, 0xf8}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000000206030000000000000000000200000205000100070000000900020073797a310000000014000780080013000000000008001240fffffff70500050002000000050004000100000013000300686173683a6e65742c6966616365"], 0x60}, 0x1, 0x0, 0x0, 0x4004800}, 0x20048888) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x0) close(0xffffffffffffffff) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8006, 0x145}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') fchmod(0xffffffffffffffff, 0xc6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r5, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r5, 0x6e2, 0x600, 0x1, 0x0, 0x0) listen(r0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000180)="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") syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140602fe800000000100000000000000000000000000000000aa00004e22000000000000000000", @ANYRES32=r1, @ANYBLOB="355f22751b9d2abb895c7774d06a585ed680041656efd02d1034162676cf1920302c1843e7c71aca5d83efb2743ca52f0197891617ec01196284733fb79cb5d9c18b8104a0cddc7a95d710a893dc95e59e8cbe02149a70991152ca59b74df07e29de7688f2cbb73fba4350c60ae7d9a22795029cd758e6710b407213283507a43afbd605144bbe4a6e69699d6bd0084f481ff090652d5827d00cbcd09d8d3ceb93371db6dd337b0cfe0f440b220734f18a75f5870d046f95baf1da6835fe10fc526c872c2d31d15f56c84883777863", @ANYBLOB="5002000090780000910a9fa243055b5f6b579912e56c945a937653b0dfb5f6b2cb5b9b2512f82e936923cdb7bad256d037d757b1fcf6a5ca92e600264695d5ed683dcde82e5e194bbd58c128d5482d772d7061"], 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000081001000fa539160110000140600fe8000000000000000000000000000aafe8000000000f0ffffffffffffffaa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000290780200"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) 21m31.965176978s ago: executing program 3 (id=1130): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001900)=@newtaction={0x48, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_police={0x30, 0x7, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x7000000, 0x4000800}, 0x2000a004) 21m30.883396591s ago: executing program 32 (id=1130): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001900)=@newtaction={0x48, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_police={0x30, 0x7, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x7000000, 0x4000800}, 0x2000a004) 13m34.165122825s ago: executing program 4 (id=2943): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10000, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 13m33.876086318s ago: executing program 4 (id=2946): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x5bcf) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 13m31.665382408s ago: executing program 4 (id=2954): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bf002000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fb"], 0x0, 0x5}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000240)=0x61637879) r3 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="f04f0fc74a673664f3430f1efff23e43990fae6aad66baf80cb86af27c87ef66bafc0c66b8000066efc744240201000000c7442406000000000f011c2467d83f410f0054d400c443116ae5002e6465f3460f09", 0x53}], 0x1, 0x31, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$radio(&(0x7f00000001c0), 0x3, 0x2) ioctl$VIDIOC_S_MODULATOR(r5, 0x40445637, &(0x7f0000000380)={0x8001, "e3b91222c5951a3d87830e55ba2b15436675e1fd680f8df300000000b0eb759e", 0x800, 0xe, 0xffff, 0x8, 0x6}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="040070cd0df1bec6eca8666007980000000000009c0300000000000009000000000000008b030000000000000100000000000000c00a000000000000050000000000000044080000000000000400000000000000"]) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) 13m31.370941511s ago: executing program 4 (id=2957): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) pipe2$9p(0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') close(0x3) dup(0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)={0x80000011}) 13m29.268038559s ago: executing program 4 (id=2962): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r4}, 0x10) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r3, 0x0, r1}, 0x10) 13m28.989805099s ago: executing program 4 (id=2964): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f00000004c0)=0x79, 0x4) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8054) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x2, 0x10}, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 13m28.304478258s ago: executing program 33 (id=2964): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f00000004c0)=0x79, 0x4) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8054) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x2, 0x10}, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 11m3.551759177s ago: executing program 0 (id=3597): mount$fuse(0x0, 0x0, 0x0, 0x10000, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303130303030302c757365725f69643dedd49dc0366b9767d15fabdefe0a521596e4f9"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)="b9", &(0x7f0000000ec0), 0x402, r3}, 0x38) bpf$MAP_DELETE_BATCH(0x18, 0x0, 0x0) ioctl$TIOCGPKT(r2, 0x40045431, &(0x7f0000000000)) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000001c0)={{@host}, @my=0x0, 0x4, 0xabc, 0x2449, 0x3, 0x3, 0x4, 0x3}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x5d1200, 0x0) getdents64(r4, &(0x7f0000001f00)=""/4111, 0x100f) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000001500)=ANY=[@ANYBLOB="7f0d00000000000061102c000000000006000000000000009500000000000000b073f9282752c15ad6859996ffaa427a2c00000e2ca9beb923c8503289653ab2a111e4cd0d04403476e4d13ebd166f92a166e4"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) 11m2.601791285s ago: executing program 0 (id=3602): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0xff, 0x2001) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc038563b, &(0x7f0000000080)={0x0, 0x2, @start={0x80000001}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x16, r4}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x7fff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r7 = socket(0x15, 0x0, 0x20000000) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x1, 0xfff1}, {0x10, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xb, 0x3, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 11m0.209879761s ago: executing program 0 (id=3610): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[], 0x34}}, 0x0) 11m0.07575898s ago: executing program 0 (id=3612): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) (async) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(r3, &(0x7f0000000bc0)='./file0\x00', 0x800) move_mount(r4, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) r5 = eventfd(0x78) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r5}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r5, &(0x7f0000000180)="0055fd600000e7ff", 0x8, 0x36}]) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) (async) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)) 10m58.905753167s ago: executing program 0 (id=3619): syz_usb_connect(0x3, 0x24, &(0x7f00000004c0)=ANY=[], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x80000000000, &(0x7f0000006680)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0x2cb2, 0x10100, 0x7, 0x370}, &(0x7f00000000c0), 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0xb, &(0x7f0000000080)={0x13a, 0x0, 0x20000003}) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) 10m58.477989233s ago: executing program 0 (id=3622): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1], 0x34}}, 0x0) 10m57.922460077s ago: executing program 34 (id=3622): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1], 0x34}}, 0x0) 9m40.475465833s ago: executing program 6 (id=3982): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fffffff}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettfilter={0x24, 0x29, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {0x0, 0xffff}}}, 0x24}}, 0x0) 9m40.474119227s ago: executing program 6 (id=3983): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={0x0, 0xd8, 0x30}, 0xc) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fallocate(r2, 0x2, 0x100000000, 0x9c7) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000380)=""/254) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_io_uring_submit(r6, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0521000000000000000000219421574d6c542566f8aea09fc10835c8c79514610fcd00", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000005893df66bf3ce816"], 0x48}}, 0x0) sendmsg$can_bcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0600000100"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000001d0b6382972f4b8f"], 0x48}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="0016000000000fdc00a3e80aa4da9037dc1aa9adbd0e4ca9be700e296b8d05c1062a5eaf905ae89d486ec0ae7109cc5721cdecc3364bb8eae6c9158e10b93eae604f562019b4994757a80b743ff347a3e0ef5e24890aa2ad5584e3611a2ba573e68c76733467817c9abe44aa6c8fc08c57cc73e53f1e510349cc1afa83f9cf8d1117bfebe078bc60dc53638d4ad8b9f2dee85122b66e988233f48fddf1083e3116e05900ba909665"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m38.305171449s ago: executing program 6 (id=3995): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x181002, 0x2) r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x2017be09}) r1 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x8000, 0x4}}, './file1\x00'}) 9m37.396775085s ago: executing program 6 (id=4000): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000800d240f0105000000000000000006241a0000000905810300040000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r2 = syz_open_pts(r1, 0x20000) dup3(r2, r1, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = syz_io_uring_setup(0x891, &(0x7f0000000380)={0x0, 0x8c36, 0x1, 0x2, 0xbfdffe00}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000040)={0x6, 0xffff, 0x3, 0x6, 0x4, "1dbc2e2db3983c75"}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x5, 0xfff8, 0x1000, 0x2f3, 0x7, 0x1, 0x81, 0x9, 0x6, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x20000, &(0x7f0000000400)=ANY=[@ANYRESOCT=r9, @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES8=r0, @ANYRESDEC=0x0]) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 9m33.328907953s ago: executing program 6 (id=4015): bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x1, 0x1}}, 0x10) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b000000000000fbff000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 9m32.617635921s ago: executing program 6 (id=4021): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x38, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0xc5, @remote, 0x4}, @in6={0xa, 0x4e22, 0x355, @loopback, 0x9}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e22, @empty}}}, &(0x7f0000000300)=0x84) getsockopt$bt_hci(r2, 0x84, 0x6c, &(0x7f0000002380)=""/4093, &(0x7f0000000000)=0xffd) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe8500, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="00000a0048167f4e831587634c9e269ddfe6da7bf8a699333d3dab3106aeb2ba350081f50cf2c7bd1fc28db659de70be44fe7c4ef3ea236ef9c045c58fc0a9eee43144", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00@'], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) io_uring_setup(0x2051c2, &(0x7f0000000540)={0x0, 0xb012, 0x4000, 0x0, 0x2ee}) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) sendfile(0xffffffffffffffff, r6, 0x0, 0x20000000000006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000002340)=[0x0]}) close_range(r5, 0xffffffffffffffff, 0x2) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) getsockopt$inet_opts(r0, 0x0, 0x5, &(0x7f00000002c0)=""/55, &(0x7f0000000240)=0x37) io_uring_setup(0x7ee1, &(0x7f0000000bc0)={0x0, 0x1cc1, 0x8000, 0x2, 0x383}) io_setup(0x3f, &(0x7f0000000140)=0x0) r9 = timerfd_create(0x0, 0x0) io_submit(r8, 0x3, &(0x7f0000000480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000000380)="682962ab7bb63432", 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0]) 9m31.839381664s ago: executing program 35 (id=4021): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x38, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0xc5, @remote, 0x4}, @in6={0xa, 0x4e22, 0x355, @loopback, 0x9}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e22, @empty}}}, &(0x7f0000000300)=0x84) getsockopt$bt_hci(r2, 0x84, 0x6c, &(0x7f0000002380)=""/4093, &(0x7f0000000000)=0xffd) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe8500, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="00000a0048167f4e831587634c9e269ddfe6da7bf8a699333d3dab3106aeb2ba350081f50cf2c7bd1fc28db659de70be44fe7c4ef3ea236ef9c045c58fc0a9eee43144", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00@'], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) io_uring_setup(0x2051c2, &(0x7f0000000540)={0x0, 0xb012, 0x4000, 0x0, 0x2ee}) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) sendfile(0xffffffffffffffff, r6, 0x0, 0x20000000000006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000002340)=[0x0]}) close_range(r5, 0xffffffffffffffff, 0x2) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) getsockopt$inet_opts(r0, 0x0, 0x5, &(0x7f00000002c0)=""/55, &(0x7f0000000240)=0x37) io_uring_setup(0x7ee1, &(0x7f0000000bc0)={0x0, 0x1cc1, 0x8000, 0x2, 0x383}) io_setup(0x3f, &(0x7f0000000140)=0x0) r9 = timerfd_create(0x0, 0x0) io_submit(r8, 0x3, &(0x7f0000000480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000000380)="682962ab7bb63432", 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0]) 1m42.872961428s ago: executing program 5 (id=5908): r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x4}, 0x80, 0x0}}], 0x2, 0xea) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8ef}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x64}}, 0x40810) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000206011e0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a300000000020000780050003001c0000000c0001800800014008000000050014002000000005000500020000000500010006"], 0x68}}, 0x0) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1m41.575711915s ago: executing program 5 (id=5911): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) unshare(0x22020600) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048841}, 0x40884) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 1m40.994770459s ago: executing program 5 (id=5913): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4e1d, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x3}, 0x1c, &(0x7f00000000c0)}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000140)=0x4) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) 1m40.687115766s ago: executing program 5 (id=5916): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200800020000000000000000400070000000700000000002000000000000000"], 0x24, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000000)={0x2, {0x6, 0x6, 0x6, 0x101}, {0x401, 0x0, 0x200, 0x7ff}, {0xf, 0x2}}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x7f, 0x5, 0x17, 0x8000, 0xc, "03f37fe99f4da288"}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r8}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r8, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f0000000080)={0x18, r8}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) r9 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) sendmsg$tipc(r11, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0xccde0c4e08df93a6) 1m39.669620989s ago: executing program 5 (id=5924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000050002000000000020000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}, 0x1, 0x0, 0x0, 0x8800}, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x1, 0x2000006, 0xffffffff}, 0x10) r3 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f0000000180)={0x14, &(0x7f0000000300)={0x60, 0x21, 0x88, {0x88, 0x23, "17738bcf9f59edf8c9228961a96c16617869d45a56dab2ee8451788fd21c922ba27472e3f7504d690264b5145c149cf02ce26cf7489ac875e22e19e87545e76b1a520124e5d8fd68afe8f19a44510586fe808a12987c7cf010ce2776469a62e570fc4a39e056b646f72c09d28c032362c62da59176b0c281d83454eb4fd5048659f52afd02dd"}}, &(0x7f0000000080)={0x0, 0x3, 0x59, @string={0x59, 0x3, "6a801a7e29fd4bab6977cd294220ff0be72135410cfa424a42864ab8e18394d3f5231126294b7f14f9603c300cf225ce1e0331324e9a62875f39780585fa73caccaafa2d2460a47d4ae06ef25764c8d69a33cbc3c9ba7e"}}}, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0xd, 0x1b, "2540f13148a37759c5543bb731010a3ce6789efc48dbb256918e6c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0xc0, 0xa1, 0x4, 0x81}, &(0x7f0000000480)={0x40, 0xa0, 0x4, 0xbb}, &(0x7f00000004c0)={0xc0, 0xa2, 0x2f, "7bc13b2da363a8d89d8473e8b4bd45d7a0f0db7e138861f5a547aadaddb4666762419cdf885da5037eee1e30609097"}}) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) mprotect(&(0x7f000066a000/0x4000)=nil, 0x4000, 0x1000004) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bind$can_raw(r4, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000540)={0x0, 0x8, 0x3, [0x5, 0x3, 0x0]}, &(0x7f0000000600)=0xe) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000012c0)={r5, 0x4, 0x47a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x47a}, 0x39) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x2}, 0x8) 1m39.114406625s ago: executing program 5 (id=5925): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0x403, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) (fail_nth: 1) 1m23.997444679s ago: executing program 36 (id=5925): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0x403, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) (fail_nth: 1) 11.894351363s ago: executing program 1 (id=6254): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) mlock2(&(0x7f0000e22000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0) ioctl$FICLONE(r2, 0x40049409, r2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100001, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xfd09, 0x1000, 0x8000001, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1}, 0x7fff}], 0x1, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x47f8, 0x0, 0x0, 0x0, 0x0) 10.457389321s ago: executing program 8 (id=6260): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x88, 0x19, 0x3, "7e5115287135b29c8e08dd68a303b1d33ec3bbe48c477de949a56b2116dd996d56e5bfd3a10973bc68750fd0d3b6e5e822170aae94a1789784b989855d1bc046885707fd86e506b01c62b1e51022d46bc7ce84362a913b7ae478eb5df6988fb06548e89915e6c08ba106f08a8e1677e7c4"}, {0x30, 0xff, 0x9, "bd817f9ed0487e9bb74c27f026ca6a2e9343c103355eaf4029a7133e6f9249"}], 0xb8}, 0x0, 0xc001}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) 9.257994691s ago: executing program 8 (id=6265): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioprio_get$pid(0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010102, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6}, {0x6}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0xf}}, 0xe8) r4 = syz_open_dev$dri(0x0, 0x7, 0x220042) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x47}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xb, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000280)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="40031600000016304ff6"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000340)}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000380)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000440)={0x5}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) ptrace$setopts(0x4206, 0x0, 0x5, 0x4) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r9], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 8.707310379s ago: executing program 1 (id=6267): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) (async) syz_usb_connect(0x2, 0x9f, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0xcf, 0x7e, 0x8f, 0x40, 0x2040, 0x721f, 0xf262, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x2, 0x81, 0x4, 0x0, 0x4f, [{{0x9, 0x4, 0x87, 0x6, 0x0, 0xa9, 0x7a, 0x37, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0xb0a, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x2, 0x4, 0x96}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x9c, "fe"}]}]}}, {{0x9, 0x4, 0xcd, 0x3, 0x4, 0x58, 0x5a, 0x87, 0x5, [], [{{0x9, 0x5, 0x2, 0x0, 0x8, 0x8, 0x10, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4d, 0x4}]}}, {{0x9, 0x5, 0xb, 0x3, 0x10, 0x3c, 0x40, 0x0, [@generic={0x13, 0x22, "b220c3b729cb730124ffd3a7ac2ef43bf1"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x400, 0x3, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xfb}]}}, {{0x9, 0x5, 0xe17bebb0bfe4c045, 0x1, 0x200, 0x80, 0xfd, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x9}, @generic={0xe, 0x22, "2e72c3a0da930c726ae4ebd6"}]}}]}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) 7.49842573s ago: executing program 7 (id=6270): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) fcntl$getflags(r1, 0x1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000440)={0xb9, 0x29, 0x1, {0x71, [{{0x10, 0x2, 0x3}, 0x7, 0x4, 0x5, './bus'}, {{0x10, 0x1, 0x5}, 0x2, 0xff, 0x5, './bus'}, {{0x8, 0x1, 0x3}, 0x3, 0x4, 0x5, './bus'}, {{0x1}, 0xcc, 0x9, 0x5, './bus'}, {{0x1, 0x1, 0x4}, 0x4, 0x9, 0x5, './bus'}, {{0x2, 0x1, 0x5}, 0x7, 0xbd, 0x5, './bus'}]}}, 0xb9) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) (async) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x7fff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7354, 0xfffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x7fc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x401, 0x0, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x5143, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000000, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0xcf, 0x80000000, 0x5, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1ff, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0xffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x2, 0x2, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa32, 0x0, 0x0, 0xfffffffc, 0x6], 0x2, 0x400}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) syz_usbip_server_init(0xf66eabed157452f) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETLINK(r4, 0x400454cd, 0x324) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x2, 0x0, 0x0, 0x1}, 0x8) (async) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x16, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e90100", [0x82]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x38, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x27aa}]]}}}]}, 0x38}}, 0x0) (async) r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x1000f4) (async) r8 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r8, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 6.557273923s ago: executing program 9 (id=6272): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) (async) wait4(0x0, 0x0, 0x80000000, 0x0) (async) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r3, 0x0, 0x0) (async) msgget$private(0x0, 0x442) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a3000000000a4010000090a01040000000000000000070000000900010073797a30000000000c0009800800014060000002080005400000001108000a40000000010900020073797a31000000005c01098008000140000000054000028024"], 0x1ec}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) socketpair(0xb, 0x2, 0x10001, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) openat$pidfd(0xffffff9c, 0x0, 0x2000, 0x0) nanosleep(&(0x7f0000000000), 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r5) 6.321266291s ago: executing program 1 (id=6273): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) (async) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40402, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000040)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="6d9ce28ebd6a43d0a2cc7959cb50ee2488e36de4d8aca1bf2b093de5bd8d9855b9d4924e52f5553f430aca7ed268c6481d23c0bb515976bde465e73982709b99c458f3e3afba8684ccadd558293f6ad59e4a42aee70e6768d607d428ab33a570c88c3de08432b1b23f4814ee72497acf9c6a1130d048496d79fb05460f2241277f7c24ab0f51c49ec932601f254237e939635b464dd7d882b2d743b601f3ed7d6705597b698fb0d90a0e810cfbaa554ed76ee849844b486d52d4263b3d481f", 0xbf}, {&(0x7f0000000180)="41eaa79804ec2b1decf73e8ec46c789006af8ee2c5d643e251df5e81be8227ed2d249356b58e7e6db12765ce57552886ce163fb1d28d15adc150026be26c", 0x3e}], 0x2, &(0x7f0000000200)=[{0xb8, 0x3a, 0x1, "5a8e13acb537f6d4de2747b6c37d96e276de07a54b944defc2d5bf548317e907054fb6b9db47c5f53721728f2e81d043618236790b8661e262c6dbfe7553de9e155e6314194df482e0a1bf2029bc3d2045df29969766126e6ab1212bd3519a631fc05685e4f2bef61174b495aaef2b14b4712cb7903937cbde279f63c6e107e3f43c32e1f5c27915be992a79d993b9a89727f3b7e32fd21a086fa477f56e419afa7b4a89f3"}, {0xf8, 0x112, 0x4, "a740df1619bc63148f31ee81ea25642fe9d384c3591cb4a565f6ba9aad393cbef1ac0c9429f1b619de61bd61fa2aef61e85e1bdd290e89ccfff82a34519ce292c95ca5e8bd20fe7d52674a436b95e7b597d9dd49c21b2e9861b41abc8ed46a76061c778ffe25006a47c53a71089e290acc447bc4d1c9f778a0d6f48b1f7e6b80c70abcdfd4bac0e2aec0c52ed1cabf98cf466fdc895a52f334f72d8a11265f33d5cbfff6a80b5fc6b1438b9a82878e0f69680c037c3ebe1029dd2b68b90f28fb75792a183345b34c50b7be6029c293dafd8f50774b8b90429b0c054aff63787e8d008ad5d971"}, {0xd8, 0x102, 0xd, "3ef99217e0827146ac4c1e19753f6a44d6c6d3f9bcba6d8c4799e92b0fbdb643abf146e904ad81092cf3c8fa47a5576950a96e686d78432f291abad37c73a72a1067da76c88e9b91390118fc1edddf4f647458929e3aa50907ab404d4737e0a0cb8d31426c47eaa53c717ea8dd07d7e6171e336ab332848cd206b3cd632fe37fad7e3e8c07c6408aa78b516720e88df432a9e9651fad061e43a6b3844cc3d6f0908bf5146c926fc36e867fd335a104217321e2e5d6e31222b1b39cb681ee46818036ed7cea86"}, {0xb8, 0x10a, 0x0, "516b0194d07e614252c11477b12f5571dd287cd4bee0e63f316c241610769ad7d92eed571d998258289d79d6e1a21ad8c95b51d45b638e948d5302d93c035ea40c018192a39c1afee681393595f029c884ca0b306f023737c4fedf81e96dd4e52812c72c4ce5d00dfbabee84d8385e1222842607a2bd09bdd4626aa4675f0e3f3af57f38331386a742b2f799276842d9fe614dea392a05c0728333ef78c0b7e44a"}, {0x50, 0x3e, 0x9, "277f3ff08b55dbef13d770f4a5e627feeca2b641c80847a8d25bb773311ea630529443951616207bd84eabf491befaba06d91c6789cd7be26a353c117d3897"}, {0x20, 0x10a, 0x2, "7e5ceee6314c47d810a75a6fcbb093d4"}, {0xd8, 0x110, 0x2, "be41db826e0f2a2c9e0b2b95840eb80af005f35d805223312b22214e4b24947e88d14ea1e099c2e428220218e7fe101c1b626c414806dbe3ca11ab6fcf05d40d0f7dafafc0085c0e38165ce82e6361f958d9dc103ae52070b9546339512fd07173297c84630d378355206a6d7a0d3b7ace75d76aa559a1561b77f17fe05fa4c1b7f161ddfe2f16d3ba1cba7781c4eeeb8240e93223b1fdce4e42d905a5ccee21de892f302b0517d9a9605248535ae253bc643380eb56ee4e3883417761ff049ed4"}, {0xc8, 0x12e, 0x4, "eb090a91173b7c63372b8582fa6e60b392019da0f04402c46933920eeb361007b83c4e0a63b427bbf3d32978c842fcc0e23cbdeb8af6eabfad6bbd040d8117cc12f9043e98317bef030b8e8c40920a14d0a23509080e354400ffc04aff7617cf2217873fcfaf2f6a1fef2f751a877a7bf5e95846e55ee129d012589521862edf0432e6858a0cd53ccf6e94ce1d6fe953ab11be4f5d1072fdbbaa586eeb490b1f9e3cd693d52a7bcdfb0e9a8f7da7b1dac94a65a2d8ad1b"}, {0x18, 0x0, 0x8, "c6b4e0dfeb8c"}], 0x568}, 0x42004) 5.974360646s ago: executing program 9 (id=6274): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 5.929643459s ago: executing program 1 (id=6275): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000040)={0x0, 0x14, 0x2e, "2a69ccab11534c92d9b8d6693a08b89d68cffa8eb75eeed4c94adc80c0dda4449a6af175b0edff377ebd02d43f0d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$setregs(0x15, 0x0, 0x0, &(0x7f00000000c0)) unshare(0x62040200) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) r4 = socket(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20d82, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000900)={0x9, "cca283b8b9e61c812a6493afece2c227ad229647ad7467c11abfb1127c206370"}) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x31, 0xa8, {0xa8, 0x5, "503afe90d5cd3013b28ec45f42897bde2f6d59c0494798f91fdf5b9e9ec3a3cfcf447bc53977026ed313e3d79957bd86651a3b17b0083654f9baa05e12e73c66953167e1f25ec391433c70dbde03e0f48063d50969c6b16adb6a4ab604d439ead14cfc5c27f2552ba5fefcdcc1dcb7b78ced94f3fe6f975c64c3e509c029ea5ff62ef582558424aca66fe3dd124b98e5f3db95510f1becbefe27c74cd14faee2930e678f60f2"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f00000002c0)={0x0, 0xf, 0x1b, {0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x82, 0x81, 0x5, 0xda, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x8, 0x0, 0x68c, 0x7}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x1, 0x3, 0xba, "f74cd94f", "99ca967b"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x1, 0x5, 0x60, 0xff, 0x3}}}, &(0x7f0000000840)={0x84, &(0x7f0000000400)={0x40, 0x11, 0x59, "997007834e31dd463c9043b8bbd61bd79447153c920f25b28f06c8ccae6820a0cb3ef63dac68d0e108b776f09064bf6a00fcc2f1ebd435933fee9ca3afeffc39a08d0a66322aadc07643f1be6d2487ebb2ad369eabf8ac6110"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6a}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x4}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x1e0, 0x2, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x91a}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0xfb}, &(0x7f0000000600)={0x40, 0xb, 0x2, "7517"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000680)={0x40, 0x13, 0x6, @random="86d3201d9fab"}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="94ada49f7a3a"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "19bd"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0xfd}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x80}}) ioctl(r4, 0x8916, &(0x7f0000000000)) unshare(0x40000400) syz_usb_connect(0x3, 0x2f, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x4e, 0xca, 0x79, 0x10, 0x1235, 0x18, 0x1b69, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x2, 0x0, 0x2a, 0x10, 0x0, [{{0x9, 0x4, 0x47, 0x6, 0x0, 0x3e, 0x2f, 0x1e, 0x3}}, {{0x9, 0x4, 0xdc, 0x4, 0x0, 0xa6, 0xf7, 0x8a, 0xa8, [@generic={0x2, 0xd}]}}]}}]}}, 0x0) 5.659088791s ago: executing program 8 (id=6276): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r0, &(0x7f000000a380)={0x2020}, 0x2020) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)={[&(0x7f0000000100)='{.\x00', &(0x7f0000000240)='/@(-{\x00', &(0x7f0000000280)='\x00', &(0x7f0000000300)='rng\x00', &(0x7f0000000380)='/dev/sequencer2\x00']}, &(0x7f0000000600)={[&(0x7f0000000480)='\x00', &(0x7f00000004c0)='(\x00', &(0x7f0000000500)='trusted.overlay.upper\x00', &(0x7f0000000580)='drbg_nopr_sha256\x00', &(0x7f00000005c0)='+/\x00']}) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xf, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) alarm(0x6) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="00fb150306c2f2cedfbaab41ffb39937944de0e129e249bbe0ebab64b8c40e847adbadd28392997b509001baae979487ce9677189b6b58ceb079b2298677df2bd33178098abb8eba6d8ed7a75a82f1e0d8e2d5b5e4a7ddb395030a742120ba211f81207955e0d23bef025d7caddcc4eb52f064c80e1d21c5108977422866a94c26d701976c1f6519ec815bd22072f9742ef4c609ead71eed32e5a506a28199c8b79ef6cdb07cdf3f87533b9fc789abf53d7b5c10848f45d2982b14bec32791c642941c8f0d5de522b1589e567e3cf080e0e0d14f5e503296fd7de904278c9d7fa0f8a4238fa95d362f64df1361e49f55742ee8"], 0x15, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000003340)=[{0x0}, {&(0x7f00000032c0)=""/98, 0x62}], 0x2}, 0x9}], 0x1, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = socket(0x1e, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) r7 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg(r7, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}, {0x0}], 0x2}, 0x4}], 0x100000, 0x10022, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 5.54135163s ago: executing program 9 (id=6277): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x2}, {0xe, 0xffff}}}, 0x24}}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0xfffffffffffffffe}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x44840) 4.957837487s ago: executing program 9 (id=6278): r0 = syz_usb_connect$uac1(0x3, 0xb8, &(0x7f0000000040)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xa, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x9, 0xc}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r10 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0x24, 0x101, 0x70bd22, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r10, 0x5, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000002c0)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94u\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x8c\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000440)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01\xb4\xb6K~\xf2\xdf/Wc\xf8-\t\x15|a\xd3\xdc\x97\xa8T\xb4\x83@~\x99\xc2 \xf24\xe3>\xc3\xfcW\xf9\xda\xee+\x17\xf7\x9cv)D2\xeay\x006\xf9\xa4\x8f\x82W1\xea\xf5\x88\x93\x16\xb2\x84T\x1d\xc1\x8f\x9c\x1b*_\xd0\x8e\x85\r\xa9\"\x05\x1aP\xa7E:\xe4\xba3\xff\x9c\"8i\x7f+I\xcb\xfe]!\xf3\xac\x80\x04\x9e\x02\xe3#\xda\xaa\xd7\xcd\x9c\xd2\x99\xb3\x81\x0e\xdc\xb8\x89\x17tH\xd5\xe2fR\xce\xa9\x8c\xd4\xdf\xe8U@+D\xdf\x16\xb2\x14\xef\xd3}\xa0\xbd\xdfa\x81\x7f\xca3\ax\xa5\x89\xa3R]\xe9\xfc\xec@\x83\xc1\x10\xdc/\x85\xd8\tK =\x99>\x8a`\xae\x9d\x90,\x83\xfeoiA\xa7C\xbcg&.\xbdm\xf3\xf6\x18Uk\xd60xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f00000007c0)=0x93, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0x5f23, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) (async) io_uring_enter(r5, 0x627, 0x24c1, 0x0, 0x0, 0x0) (async) semctl$IPC_RMID(0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde080045000070005c0000009078ac1e0001ac1414aa030090780008005df0fac6cf428f42f160fa86e0a5507a004500000000000000008900007f000001ac1e0101443c00010000000000000000ffffffff000000007f000000000000ac1414aa00000000e000000100000000ac1414000000000083031000"], 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = creat(&(0x7f0000000780)='./file0/file0\x00', 0x40) close(r8) (async) r9 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, r8, 0x0) (async) r10 = userfaultfd(0x80801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) (async) sendmsg$inet(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000680)="df68b09f27ea6613b4b222fbaaff344afe4476c70f84f91300126293c8294dc3dab2260975cf944253e9a4679d45ac343ba2367f29cfdd914689584ada6fe3b96512371439ceb01c04e4198af4f68699f41584c9160c35448c25856598054f15096309f31e3afc48dc67ae9b99444cf7371dc5f0c1c00ee5d654fd65bb8d45953016", 0x82}, {&(0x7f0000000280)="983c0b96f89fbb29ffa4de616a2d081d08c594ee4908aeacac8ce250264103ad7c4dd872571e31a2dcd1b20b467bc6332dfb020491df02b329d5238e04b096b0961150a7b0a77ad81c111b4085164f79ec4759de0f18eacc5c6a8414f177fcde6ffb282c2ed4ecae10c9af1262f69f6115", 0x71}, {&(0x7f0000000140)="974ff2d7b7631d175dacb43952b374b5488e0a33375e8b515d8eef6e1796d3", 0x1f}, {&(0x7f0000000500)="3893647a19a1a705e2c6cecda40254829a2ae7bf1a2d2f137b2ace4885d081ccf163f7aa0c936708c9829c893556c80a3a6fb2ea8c56e9b714187abce11e7dcc0b4919988698a80d905afa913feed9242f940ed2b92d80380ed4600d98e00c599a63e827c26b9e6fa4ae21", 0x6b}], 0x4}, 0x80) (async) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbc1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc00", 0x0, 0x48) (async) read$char_usb(r8, &(0x7f0000000380)=""/190, 0xbe) (async) ioctl$UFFDIO_UNREGISTER(r8, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 4.44632102s ago: executing program 2 (id=6281): r0 = socket$inet(0xa, 0x6, 0x5) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/224, 0xe0}], 0x1, 0x4}) io_uring_enter(r2, 0x847b9, 0x0, 0xe, 0x0, 0x0) listen(r0, 0x8) r5 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x5, 0xfbffffff}, 0x10) r6 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x1c8) ftruncate(r6, 0xee72) sendfile(0xffffffffffffffff, r6, 0x0, 0x8000fffffffe) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000002c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000400)={0x28, 0x5, r7, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) setsockopt$MRT6_PIM(r5, 0x29, 0xcf, &(0x7f0000000280)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xcea, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='j', 0x1}], 0x1}}], 0x1, 0x4000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000100)={r10, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r10, 0x0, 0x10}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={r11, 0x80007}, 0x8) 4.299999928s ago: executing program 7 (id=6282): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) unshare(0x22020600) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048841}, 0x40884) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 3.087199345s ago: executing program 2 (id=6283): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000001b40)) timer_create(0x3, 0x0, &(0x7f0000000400)=0x0) timer_settime(r1, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000600", [0x0, 0x2000000000001]}}) 2.697695544s ago: executing program 2 (id=6284): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x8}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, 0x0, &(0x7f00000009c0)) ioctl$IOMMU_VFIO_IOAS$CLEAR(r3, 0x3b88, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000001c000000000800001c00000000000000"]) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=0x5, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="090700000000040000000500000008001701"], 0x1c}}, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x8, &(0x7f0000003040)={0xff, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c005af07677d18bc"}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x8}) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) (async) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, 0x0, &(0x7f00000009c0)) (async) ioctl$IOMMU_VFIO_IOAS$CLEAR(r3, 0x3b88, 0x0) (async) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000001c000000000800001c00000000000000"]) (async) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=0x5, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="090700000000040000000500000008001701"], 0x1c}}, 0x0) (async) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x8, &(0x7f0000003040)={0xff, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c005af07677d18bc"}}) (async) 2.571912814s ago: executing program 9 (id=6285): r0 = memfd_secret(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0xf96d9019) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) syz_open_dev$vcsn(&(0x7f00000000c0), 0x6c90, 0x40000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x1, 0x1) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x1000, 0x0, 0x3}, 0x20) madvise(&(0x7f000008b000/0x9000)=nil, 0x9000, 0x3) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004440)=""/5) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x1b, 0x5, 0x388, 0x318, 0xf0, 0xffffffff, 0x0, 0x318, 0x538, 0xf0, 0xffffffff, 0x538, 0x538, 0x5, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0xffffffff, 'geneve1\x00', 'gretap0\x00', {}, {0xff}, 0x32, 0x1}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @local, @multicast2, @icmp_id=0x66, @icmp_id=0x200}}}}, {{@ip={@private=0xa010100, @multicast1, 0xff000000, 0xffffffff, 'wg0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x32, 0x2}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x9}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x8, @broadcast, @rand_addr=0x64010100, @gre_key=0x9, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @multicast1, @private=0xa010101, @port=0x4e24, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x2, 0x0, 0x0, 0x6, 0x1], 0x2, 0x3}, {0x4, [0x6, 0x6, 0x0, 0x1, 0x0, 0x1], 0x2, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xfff1, 0xfff1}, {0x5, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x2010}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x2, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xffff, 0xb}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20008001) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x41433000) ftruncate(r0, 0x51a9497) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 2.31168402s ago: executing program 1 (id=6286): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0xb0, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x80, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x54, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) sendto$inet(r3, &(0x7f0000000640)="d95790eb", 0x4, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c000480"], 0x34}}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x503080, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x170bd26, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x2, {@in6_addr=@loopback, 0x800}}}]}, 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xc0, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x6e, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0xc0}}, 0x20000000) 2.177607509s ago: executing program 2 (id=6287): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x1, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) syz_usb_connect$rtl8150(0x3, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = socket$kcm(0x2a, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) sendmsg$kcm(r4, &(0x7f0000001f80)={&(0x7f0000001d00)=@xdp={0x2c, 0x6, r5, 0x3f}, 0x80, 0x0}, 0x0) recvmsg(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) sendmsg(r4, &(0x7f0000000200)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast1}, 0x1, 0x4, 0x3}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38}, 0x40) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a00010028bd70000000000002202000ff000007", @ANYRES32, @ANYBLOB="08000100b6141433080002000a"], 0x34}}, 0xea5bc50b6199d77e) 1.650499435s ago: executing program 2 (id=6288): landlock_create_ruleset(0x0, 0x0, 0x5) syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f00000001c0), &(0x7f00000005c0)) socket$nl_sock_diag(0x10, 0x3, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @empty, 0x65}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502"], 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.618379276s ago: executing program 1 (id=6289): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001d31ad240f0031d5842bb0102030109022d0001000000000904c50003ff01070502"], 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x10b49, 0x9, 0x8, 0x0, 0x1}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x80000003) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000000280)="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", 0x2000, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xc, 0xc8, 0xfa}}}, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580), &(0x7f0000000040)=[0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2, 0x6}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x40440c0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) 1.429686527s ago: executing program 9 (id=6290): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x200180, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{r1}, 0x1, &(0x7f0000000040)=[0x8], 0x7, 0xa}) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) setrlimit(0xf, &(0x7f0000000240)={0x100803, 0xfffffffe}) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffff000, 0x101, &(0x7f0000000080)) getrusage(0xffffffffffffffff, &(0x7f0000000240)) timer_settime(r2, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) shutdown(0xffffffffffffffff, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) gettid() ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00010000000000fbdbdf2581000000000000000008000094000200fe8000000000000000000000000004bb"], 0x30}}, 0x0) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, r6, 0x1d, &(0x7f0000019080)=""/29}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r8, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r8, 0x0) 1.186890443s ago: executing program 7 (id=6291): bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x1, 0x1}}, 0x10) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000fffffffb0000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 977.590623ms ago: executing program 8 (id=6292): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0xe0140, 0x0) r1 = signalfd(r0, &(0x7f0000000040)={[0xc0]}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x80000) fcntl$setpipe(r3, 0x407, 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) recvmmsg(r1, &(0x7f0000007580)=[{{&(0x7f0000001900)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001980)=""/200, 0xc8}, {&(0x7f0000001a80)=""/53, 0x35}, {&(0x7f0000001ac0)=""/104, 0x68}, {&(0x7f0000001b40)=""/109, 0x6d}], 0x4, &(0x7f0000001c00)=""/217, 0xd9}, 0xf7}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d00)=""/113, 0x71}, {&(0x7f0000001d80)=""/63, 0x3f}, {&(0x7f0000001dc0)=""/133, 0x85}], 0x3, &(0x7f0000001ec0)=""/255, 0xff}, 0x3}, {{&(0x7f0000001fc0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000003540)=[{&(0x7f0000002040)=""/79, 0x4f}, {&(0x7f00000020c0)=""/221, 0xdd}, {&(0x7f00000021c0)=""/255, 0xff}, {&(0x7f00000022c0)=""/219, 0xdb}, {&(0x7f00000023c0)=""/145, 0x91}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/175, 0xaf}], 0x7, &(0x7f00000035c0)=""/37, 0x25}, 0x5}, {{&(0x7f0000003600)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000003680)=""/34, 0x22}, {&(0x7f00000036c0)=""/208, 0xd0}, {&(0x7f00000037c0)=""/244, 0xf4}, {&(0x7f00000038c0)=""/231, 0xe7}, {&(0x7f00000039c0)=""/28, 0x1c}, {&(0x7f0000003a00)=""/96, 0x60}], 0x6, &(0x7f0000006300)=""/4096, 0x1000}}, {{&(0x7f0000003b00)=@hci, 0x80, &(0x7f0000004080)=[{&(0x7f0000003b80)=""/242, 0xf2}, {&(0x7f0000003c80)=""/166, 0xa6}, {&(0x7f0000003d40)=""/55, 0x37}, {&(0x7f0000003d80)=""/4, 0x4}, {&(0x7f0000003dc0)=""/18, 0x12}, {&(0x7f0000003e00)=""/146, 0x92}, {&(0x7f0000003ec0)=""/235, 0xeb}, {&(0x7f0000003fc0)=""/173, 0xad}], 0x8, &(0x7f0000004100)=""/126, 0x7e}, 0xf0}, {{&(0x7f0000004180)=@tipc=@name, 0x80, &(0x7f0000004200)=[{&(0x7f0000007300)=""/236, 0xec}], 0x1, &(0x7f0000004240)=""/78, 0x4e}, 0x9}, {{0x0, 0x0, &(0x7f0000007540)=[{&(0x7f0000007400)=""/210, 0xd2}, {&(0x7f0000007500)=""/26, 0x1a}], 0x2}, 0x401}], 0x7, 0x12001, &(0x7f0000007740)) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000900)={r4, "097f5dd106dc1023a07b889a9a3ba190"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000300)={{r1}, r2, 0x2, @inherit={0x60, &(0x7f0000000280)={0x1, 0x3, 0x9, 0x7, {0x4, 0xfffffffffffffda5, 0xca, 0x7fffffffffffffff}, [0x6, 0x586, 0x9]}}, @devid=r4}) read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) 923.213121ms ago: executing program 7 (id=6293): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0xea) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x40810) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000206011e0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a300000000020000780050003001c0000000c0001800800014008000000050014002000000005000500020000000500010006"], 0x68}}, 0x0) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 782.696929ms ago: executing program 8 (id=6294): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sendmsg$NL80211_CMD_DISASSOCIATE(r0, 0x0, 0x814) pipe(&(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) get_mempolicy(0x0, &(0x7f0000000440), 0x4000, &(0x7f0000fff000/0x1000)=nil, 0x2) ioctl$FBIOPUT_CON2FBMAP(r3, 0x4610, &(0x7f0000000000)={0x9}) 513.918592ms ago: executing program 7 (id=6295): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x6846}]}}]}, 0x3c}}, 0x40000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 7 (id=6296): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0xff7f}}, 0x20}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xffffffffffffffd8) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f0000000280)='1', 0x1) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r9, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r10, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) kernel console output (not intermixed with test programs): gurations, error -61 [ 1554.934403][T27709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1554.941539][T27709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.967857][ C1] vkms_vblank_simulate: vblank timer overrun [ 1554.983099][T27709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1555.005083][T27709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1555.013142][T27709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1555.040280][ T3099] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 1555.072165][T27709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1555.204422][ T3099] usb 6-1: too many configurations: 223, using maximum allowed: 8 [ 1555.253101][ T3099] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1555.269568][ T3099] usb 6-1: can't read configurations, error -61 [ 1555.346014][ T3099] usb usb6-port1: attempt power cycle [ 1555.422997][T21753] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1555.476989][T27709] hsr_slave_0: entered promiscuous mode [ 1555.496640][T27709] hsr_slave_1: entered promiscuous mode [ 1555.506854][T27709] debugfs: 'hsr0' already exists in 'hsr' [ 1555.525325][T27709] Cannot create hsr debugfs directory [ 1555.585219][T21753] usb 9-1: Using ep0 maxpacket: 8 [ 1555.591063][T21753] usb 9-1: no configurations [ 1555.603167][T21753] usb 9-1: can't read configurations, error -22 [ 1555.636250][T11130] hsr_slave_0: left promiscuous mode [ 1555.647162][T11130] hsr_slave_1: left promiscuous mode [ 1555.693909][ T3099] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 1555.733374][T21753] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1555.743750][ T3099] usb 6-1: too many configurations: 223, using maximum allowed: 8 [ 1555.784485][ T3099] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1555.792616][ T3099] usb 6-1: can't read configurations, error -61 [ 1555.854408][T27806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5895'. [ 1555.908076][T21753] usb 9-1: Using ep0 maxpacket: 8 [ 1555.924106][T21753] usb 9-1: no configurations [ 1555.928935][T21753] usb 9-1: can't read configurations, error -22 [ 1555.939570][T21753] usb usb9-port1: attempt power cycle [ 1555.955401][ T3099] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 1556.023744][ T3099] usb 6-1: too many configurations: 223, using maximum allowed: 8 [ 1556.047272][ T3099] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1556.056453][ T3099] usb 6-1: can't read configurations, error -61 [ 1556.063923][ T3099] usb usb6-port1: unable to enumerate USB device [ 1556.092255][T18287] Bluetooth: hci4: command tx timeout [ 1556.298445][T21753] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1556.337300][T21753] usb 9-1: Using ep0 maxpacket: 8 [ 1556.343583][T21753] usb 9-1: no configurations [ 1556.348516][T21753] usb 9-1: can't read configurations, error -22 [ 1556.482742][T21753] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1556.503809][T21753] usb 9-1: Using ep0 maxpacket: 8 [ 1556.509788][T21753] usb 9-1: no configurations [ 1556.514986][T21753] usb 9-1: can't read configurations, error -22 [ 1556.521740][T21753] usb usb9-port1: unable to enumerate USB device [ 1556.550573][T11130] team0 (unregistering): Port device team_slave_1 removed [ 1556.610695][T11130] team0 (unregistering): Port device team_slave_0 removed [ 1556.968745][T27818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5897'. [ 1557.468495][ T5945] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1557.624968][ T5945] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1557.642985][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1557.661157][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1557.671904][ T5945] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1557.685195][ T5945] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1557.704979][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.739653][ T5945] usb 2-1: config 0 descriptor?? [ 1557.904735][T11130] IPVS: stop unused estimator thread 0... [ 1558.007146][T27837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5901'. [ 1558.143946][T27840] netlink: 'syz.5.5901': attribute type 4 has an invalid length. [ 1558.164720][ T5945] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0 [ 1558.193197][T18287] Bluetooth: hci4: command tx timeout [ 1558.213550][ T5945] plantronics 0003:047F:FFFF.005A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1558.780017][T27709] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1558.782177][ T5945] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1558.835663][T27709] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1558.851607][T27709] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1558.870712][T27709] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1558.902943][T15917] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1559.023834][ T5945] usb 9-1: Using ep0 maxpacket: 16 [ 1559.056033][ T5945] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1559.065176][T15917] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1559.067871][ T5945] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1559.086671][ T5945] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1559.097883][T15917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.104808][ T5945] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1559.126634][ T5945] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.133482][T15917] usb 6-1: config 0 descriptor?? [ 1559.155221][ T5945] usb 9-1: Product: syz [ 1559.174031][T15917] cp210x 6-1:0.0: cp210x converter detected [ 1559.178068][ T5945] usb 9-1: Manufacturer: syz [ 1559.198365][ T5945] usb 9-1: SerialNumber: syz [ 1559.221263][ T5945] usb 9-1: config 0 descriptor?? [ 1559.246011][T27851] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1559.261501][T27709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1559.294637][ T5945] mcba_usb 9-1:0.0 can0: failed tx_urb -90 [ 1559.307884][ T5945] mcba_usb 9-1:0.0 can0: Failed to send cmd (169) [ 1559.323416][ T5945] mcba_usb 9-1:0.0 can0: failed tx_urb -90 [ 1559.330872][T27709] 8021q: adding VLAN 0 to HW filter on device team0 [ 1559.336859][ T5945] mcba_usb 9-1:0.0 can0: Failed to send cmd (169) [ 1559.356710][ T5945] mcba_usb 9-1:0.0: Microchip CAN BUS Analyzer connected [ 1559.384429][T11130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.391686][T11130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1559.444527][T11130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.451743][T11130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1559.579373][T27856] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5903'. [ 1559.827920][T15917] cp210x 6-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1559.838451][T15917] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 1559.887456][T27709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1559.913729][T15917] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1559.956033][ T5945] usb 2-1: USB disconnect, device number 113 [ 1559.997061][T15917] usb 6-1: USB disconnect, device number 56 [ 1560.061814][T15917] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1560.121310][T15917] cp210x 6-1:0.0: device disconnected [ 1560.191723][T27709] veth0_vlan: entered promiscuous mode [ 1560.225750][T27709] veth1_vlan: entered promiscuous mode [ 1560.315193][T27709] veth0_macvtap: entered promiscuous mode [ 1560.373971][T27709] veth1_macvtap: entered promiscuous mode [ 1560.433212][ T5945] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1560.469450][T27709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1560.566589][T27709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1560.611336][T11130] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.614885][ T5945] usb 2-1: too many configurations: 224, using maximum allowed: 8 [ 1560.665562][ T5945] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1560.670827][T11130] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.695008][T11130] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.696838][ T5945] usb 2-1: can't read configurations, error -61 [ 1560.705330][T11130] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.882509][ T5945] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1561.007130][T27890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5908'. [ 1561.039024][ T6100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1561.048347][ T5945] usb 2-1: too many configurations: 224, using maximum allowed: 8 [ 1561.104520][ T6100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1561.125639][T27893] netlink: 'syz.5.5908': attribute type 4 has an invalid length. [ 1561.126170][ T5945] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1561.172335][ T5945] usb 2-1: can't read configurations, error -61 [ 1561.196649][ T5945] usb usb2-port1: attempt power cycle [ 1561.240383][T11125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1561.249895][T11125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1561.642226][ T5945] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1561.709163][ T5945] usb 2-1: too many configurations: 224, using maximum allowed: 8 [ 1561.742401][ T5945] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1561.787355][ T5945] usb 2-1: can't read configurations, error -61 [ 1561.953566][ T5945] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1561.998673][ T5920] usb 9-1: USB disconnect, device number 12 [ 1562.026992][ T5945] usb 2-1: too many configurations: 224, using maximum allowed: 8 [ 1562.116292][ T5920] mcba_usb 9-1:0.0 can0: device disconnected [ 1562.133866][ T5945] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1562.142736][ T5945] usb 2-1: can't read configurations, error -61 [ 1562.292874][ T5945] usb usb2-port1: unable to enumerate USB device [ 1562.870849][T27916] sctp: [Deprecated]: syz.5.5913 (pid 27916) Use of int in max_burst socket option. [ 1562.870849][T27916] Use struct sctp_assoc_value instead [ 1563.122704][ T5920] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1563.224626][T27933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1563.264113][ T5920] usb 9-1: device descriptor read/64, error -71 [ 1563.412767][ T5945] usb 3-1: new low-speed USB device number 100 using dummy_hcd [ 1563.522643][ T5920] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1563.572620][ T5945] usb 3-1: Invalid ep0 maxpacket: 32 [ 1563.646499][T27953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5921'. [ 1563.662660][ T5920] usb 9-1: device descriptor read/64, error -71 [ 1563.725241][ T5945] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 1563.764477][T27955] netlink: 'syz.1.5921': attribute type 4 has an invalid length. [ 1563.779659][ T5920] usb usb9-port1: attempt power cycle [ 1563.892304][ T5945] usb 3-1: Invalid ep0 maxpacket: 32 [ 1563.898345][ T5945] usb usb3-port1: attempt power cycle [ 1564.038382][T27959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5923'. [ 1564.071414][T27959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1564.087219][T27959] binder: 27958:27959 ioctl 4018620d 0 returned -22 [ 1564.122478][ T5920] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1564.143828][ T5920] usb 9-1: device descriptor read/8, error -71 [ 1564.252285][ T5945] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 1564.272759][ T5945] usb 3-1: Invalid ep0 maxpacket: 32 [ 1564.382421][ T5920] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1564.402206][ T5945] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 1564.405261][ T5920] usb 9-1: device descriptor read/8, error -71 [ 1564.424735][ T5945] usb 3-1: Invalid ep0 maxpacket: 32 [ 1564.430520][ T5945] usb usb3-port1: unable to enumerate USB device [ 1564.525218][ T5920] usb usb9-port1: unable to enumerate USB device [ 1564.882819][ T5920] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1565.032549][T21753] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1565.043517][ T5920] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1565.052727][ T5920] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1565.064596][ T5920] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1565.073770][ T5920] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1565.085111][ T5920] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1565.098568][ T5920] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1565.108085][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1565.116830][ T5920] usb 6-1: Product: syz [ 1565.121100][ T5920] usb 6-1: Manufacturer: syz [ 1565.131854][ T5920] cdc_wdm 6-1:1.0: skipping garbage [ 1565.138458][ T5920] cdc_wdm 6-1:1.0: skipping garbage [ 1565.145495][ T5920] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1565.151447][ T5920] cdc_wdm 6-1:1.0: Unknown control protocol [ 1565.195382][T21753] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1565.205514][T21753] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1565.216743][T21753] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1565.226173][T21753] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1565.237250][T21753] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1565.250828][T21753] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1565.260024][T21753] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1565.268928][T21753] usb 2-1: Product: syz [ 1565.273565][T21753] usb 2-1: Manufacturer: syz [ 1565.286464][T21753] cdc_wdm 2-1:1.0: skipping garbage [ 1565.291712][T21753] cdc_wdm 2-1:1.0: skipping garbage [ 1565.299605][T21753] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 1565.306204][T21753] cdc_wdm 2-1:1.0: Unknown control protocol [ 1565.550337][T21753] usb 2-1: USB disconnect, device number 118 [ 1565.740341][ T30] audit: type=1326 audit(1761152820.893:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27973 comm="syz.7.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c098efc9 code=0x7ffc0000 [ 1565.762833][ C1] vkms_vblank_simulate: vblank timer overrun [ 1565.802640][ T30] audit: type=1326 audit(1761152820.903:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27973 comm="syz.7.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f29c098efc9 code=0x7ffc0000 [ 1566.050450][ T30] audit: type=1326 audit(1761152820.903:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27973 comm="syz.7.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c098efc9 code=0x7ffc0000 [ 1566.074623][ T30] audit: type=1326 audit(1761152820.903:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27973 comm="syz.7.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f29c098efc9 code=0x7ffc0000 [ 1566.097140][ C1] vkms_vblank_simulate: vblank timer overrun [ 1566.105216][ T30] audit: type=1326 audit(1761152820.903:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27973 comm="syz.7.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c098efc9 code=0x7ffc0000 [ 1566.128025][ C1] vkms_vblank_simulate: vblank timer overrun [ 1566.134574][ T30] audit: type=1326 audit(1761152820.903:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27973 comm="syz.7.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f29c098efc9 code=0x7ffc0000 [ 1566.241603][ T30] audit: type=1326 audit(1761152821.053:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27973 comm="syz.7.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c098efc9 code=0x7ffc0000 [ 1566.251586][T27979] netlink: 112 bytes leftover after parsing attributes in process `syz.8.5930'. [ 1566.264096][ C1] vkms_vblank_simulate: vblank timer overrun [ 1566.413685][ T30] audit: type=1326 audit(1761152821.053:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27973 comm="syz.7.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c098efc9 code=0x7ffc0000 [ 1566.489167][ T30] audit: type=1326 audit(1761152821.063:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27973 comm="syz.7.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29c098efc9 code=0x7ffc0000 [ 1566.511771][ C1] vkms_vblank_simulate: vblank timer overrun [ 1566.521137][ T30] audit: type=1326 audit(1761152821.063:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27973 comm="syz.7.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c098efc9 code=0x7ffc0000 [ 1566.543613][ C1] vkms_vblank_simulate: vblank timer overrun [ 1566.965007][T27990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5933'. [ 1567.169890][T27990] netlink: 'syz.2.5933': attribute type 4 has an invalid length. [ 1569.650027][T28021] geneve2: entered promiscuous mode [ 1569.803197][T28027] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5945'. [ 1569.874527][T28035] netlink: 'syz.7.5945': attribute type 4 has an invalid length. [ 1569.975063][T28040] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5948'. [ 1569.985201][T28040] unsupported nlmsg_type 40 [ 1570.113511][ T5945] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1570.324213][ T5945] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1570.333149][ T5945] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1570.434894][ T5945] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1570.482939][ T5945] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1570.498263][ T5945] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1570.577498][ T5945] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1570.591810][ T5945] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1570.679920][ T5945] usb 9-1: Product: syz [ 1570.691154][ T5945] usb 9-1: Manufacturer: syz [ 1570.719023][ T5945] cdc_wdm 9-1:1.0: skipping garbage [ 1570.730596][ T5945] cdc_wdm 9-1:1.0: skipping garbage [ 1570.757643][ T5945] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device [ 1570.767214][ T5945] cdc_wdm 9-1:1.0: Unknown control protocol [ 1571.029247][ T5945] usb 9-1: USB disconnect, device number 17 [ 1573.304746][T28079] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5959'. [ 1573.395300][T28080] netlink: 'syz.8.5959': attribute type 4 has an invalid length. [ 1573.494741][T17442] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1573.702617][T17442] usb 2-1: Using ep0 maxpacket: 32 [ 1573.728335][T17442] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1573.754813][T28090] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5963'. [ 1573.760618][T17442] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1573.814120][T17442] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1573.829134][T17442] usb 2-1: Product: syz [ 1573.835557][T17442] usb 2-1: Manufacturer: syz [ 1573.841676][T17442] usb 2-1: SerialNumber: syz [ 1573.863167][T17442] usb 2-1: config 0 descriptor?? [ 1574.032101][T15917] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1574.093563][T28078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5960'. [ 1574.102732][T28078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5960'. [ 1574.143042][T28078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5960'. [ 1574.174080][T28078] kvm: user requested TSC rate below hardware speed [ 1574.204966][T15917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.216300][T15917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1574.228438][T15917] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1574.242775][T15917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.254317][T15917] usb 3-1: config 0 descriptor?? [ 1574.262119][T17442] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1574.444723][T17442] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1574.458372][T17442] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1574.470589][T17442] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1574.480412][T17442] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1574.487333][T28092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.497293][T17442] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1574.512681][T28092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.523188][T17442] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1574.533280][T17442] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1574.543673][T28092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.552205][T17442] usb 9-1: Product: syz [ 1574.557035][T17442] usb 9-1: Manufacturer: syz [ 1574.557325][T28092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.574622][T28092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.585476][T17442] cdc_wdm 9-1:1.0: skipping garbage [ 1574.585586][T28092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.599220][T17442] cdc_wdm 9-1:1.0: skipping garbage [ 1574.609604][T17442] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device [ 1574.617551][T17442] cdc_wdm 9-1:1.0: Unknown control protocol [ 1574.688682][T15917] usbhid 3-1:0.0: can't add hid device: -71 [ 1574.695339][T15917] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1574.712733][T15917] usb 3-1: USB disconnect, device number 104 [ 1574.901403][T28078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.914112][T28078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.973681][ T3099] usb 2-1: USB disconnect, device number 119 [ 1575.001041][T28104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.010491][T28104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.027396][T28104] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5967'. [ 1575.038455][T15917] usb 9-1: USB disconnect, device number 18 [ 1575.287260][T28115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1576.242976][T15917] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 1576.518142][T15917] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1576.541042][T15917] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1576.568668][T15917] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1576.578846][T15917] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.835153][T15917] aiptek 9-1:17.0: Aiptek using 400 ms programming speed [ 1576.857941][T15917] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input122 [ 1576.898433][T15917] input: failed to attach handler kbd to device input122, error: -5 [ 1576.964827][T15917] usb 9-1: USB disconnect, device number 19 [ 1578.233222][T28145] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5977'. [ 1578.712625][T28154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5981'. [ 1578.792119][ T3099] usb 9-1: new low-speed USB device number 20 using dummy_hcd [ 1578.944850][ T3099] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1578.953152][ T3099] usb 9-1: config 0 has no interface number 0 [ 1578.959354][ T3099] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1578.970551][ T3099] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1578.981411][ T3099] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1578.993632][ T3099] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1579.004847][ T3099] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1579.015771][ T3099] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1579.028979][ T3099] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1579.038754][ T3099] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.052776][ T3099] usb 9-1: config 0 descriptor?? [ 1579.059319][T28150] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1579.066817][T28150] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1579.079589][ T3099] ldusb 9-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1579.133577][T15917] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1579.304319][T15917] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1579.316341][T15917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1579.327694][T15917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1579.337556][T15917] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1579.351303][T15917] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1579.360516][T15917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.375460][T15917] usb 3-1: config 0 descriptor?? [ 1579.394762][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1579.394783][ T30] audit: type=1326 audit(1761152834.553:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28149 comm="syz.8.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080bb8efc9 code=0x7ffc0000 [ 1579.423881][ T30] audit: type=1326 audit(1761152834.553:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28149 comm="syz.8.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080bb8efc9 code=0x7ffc0000 [ 1579.448403][ T30] audit: type=1326 audit(1761152834.563:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28149 comm="syz.8.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f080bb8efc9 code=0x7ffc0000 [ 1579.472284][ T30] audit: type=1326 audit(1761152834.603:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28149 comm="syz.8.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080bb8efc9 code=0x7ffc0000 [ 1579.494780][ C1] vkms_vblank_simulate: vblank timer overrun [ 1579.503079][ T30] audit: type=1326 audit(1761152834.603:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28149 comm="syz.8.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080bb8efc9 code=0x7ffc0000 [ 1579.525549][ C1] vkms_vblank_simulate: vblank timer overrun [ 1579.532628][ T30] audit: type=1326 audit(1761152834.603:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28149 comm="syz.8.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f080bb8efc9 code=0x7ffc0000 [ 1579.563886][ T30] audit: type=1326 audit(1761152834.603:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28149 comm="syz.8.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080bb8efc9 code=0x7ffc0000 [ 1579.587122][ T30] audit: type=1326 audit(1761152834.613:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28149 comm="syz.8.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080bb8efc9 code=0x7ffc0000 [ 1579.609572][ C1] vkms_vblank_simulate: vblank timer overrun [ 1579.617077][ T30] audit: type=1326 audit(1761152834.613:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28149 comm="syz.8.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f080bb8efc9 code=0x7ffc0000 [ 1579.639788][ T30] audit: type=1326 audit(1761152834.643:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28149 comm="syz.8.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080bb8efc9 code=0x7ffc0000 [ 1579.662246][ C1] vkms_vblank_simulate: vblank timer overrun [ 1579.799676][T15917] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0 [ 1579.840169][T15917] plantronics 0003:047F:FFFF.005B: hiddev2,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1580.052027][T28155] netlink: 'syz.2.5981': attribute type 5 has an invalid length. [ 1580.060146][T28155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5981'. [ 1580.128672][T15440] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1580.142666][T15440] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1580.160172][T15440] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1580.175205][T28163] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1580.184265][T28163] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1580.610987][T28164] chnl_net:caif_netlink_parms(): no params data found [ 1580.815638][T28164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.826773][T28164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.836942][T28164] bridge_slave_0: entered allmulticast mode [ 1580.849188][T28164] bridge_slave_0: entered promiscuous mode [ 1580.863298][T28164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.871027][T28164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.879080][T28164] bridge_slave_1: entered allmulticast mode [ 1580.888728][T28164] bridge_slave_1: entered promiscuous mode [ 1580.966935][T28164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1580.985317][T28164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1581.068406][T28164] team0: Port device team_slave_0 added [ 1581.086091][T28164] team0: Port device team_slave_1 added [ 1581.209517][T28164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1581.220889][T28164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1581.262460][T28164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1581.290674][T28164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1581.308789][T28164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1581.342580][T28164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1581.461413][T28164] hsr_slave_0: entered promiscuous mode [ 1581.488644][T28164] hsr_slave_1: entered promiscuous mode [ 1581.522928][T28164] debugfs: 'hsr0' already exists in 'hsr' [ 1581.535253][T28164] Cannot create hsr debugfs directory [ 1581.557057][T17442] usb 9-1: USB disconnect, device number 20 [ 1581.581356][T17442] ldusb 9-1:0.55: LD USB Device #1 now disconnected [ 1581.826006][T21182] usb 3-1: USB disconnect, device number 105 [ 1582.052162][T17442] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1582.202318][T17442] usb 9-1: Using ep0 maxpacket: 32 [ 1582.213966][T17442] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1582.231194][T17442] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1582.250809][T17442] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1582.253702][T18287] Bluetooth: hci3: command tx timeout [ 1582.276282][T17442] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.297609][T17442] usb 9-1: config 0 descriptor?? [ 1582.302526][T21182] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1582.319272][T28164] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1582.331835][T28164] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1582.344834][T28164] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1582.358256][T28164] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1582.463971][T21182] usb 3-1: Using ep0 maxpacket: 16 [ 1582.472983][T21182] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1582.483064][T15917] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1582.491329][T21182] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.497561][T28164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1582.506842][T21182] usb 3-1: config 0 descriptor?? [ 1582.525694][T21182] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1582.547005][T28164] 8021q: adding VLAN 0 to HW filter on device team0 [ 1582.564830][T11123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.572143][T11123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1582.596441][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.603725][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1582.654654][T15917] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1582.682805][T15917] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1582.721611][T15917] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1582.745225][T15917] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1582.768820][T15917] usb 2-1: Product: syz [ 1582.774566][T15917] usb 2-1: Manufacturer: syz [ 1582.785151][T15917] usb 2-1: SerialNumber: syz [ 1582.786882][T17442] ft260 0003:0403:6030.005C: unknown main item tag 0x7 [ 1582.809023][T15917] usb 2-1: config 0 descriptor?? [ 1582.828556][T15917] usb 2-1: selecting invalid altsetting 0 [ 1582.878307][T28164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1582.966434][T17442] ft260 0003:0403:6030.005C: chip code: 6424 8183 [ 1583.030337][T28186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1583.053963][T28186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1583.069728][T28164] veth0_vlan: entered promiscuous mode [ 1583.112787][T28164] veth1_vlan: entered promiscuous mode [ 1583.160836][T14481] usb 2-1: USB disconnect, device number 120 [ 1583.180531][T17442] ft260 0003:0403:6030.005C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0 [ 1583.387863][T28164] veth0_macvtap: entered promiscuous mode [ 1583.597224][T17442] ft260 0003:0403:6030.005C: failed to retrieve status: -71 [ 1583.618328][T17442] ft260 0003:0403:6030.005C: failed to reset I2C controller: -71 [ 1583.705384][T28164] veth1_macvtap: entered promiscuous mode [ 1583.850035][T21182] gspca_sonixj: reg_w1 err -71 [ 1583.880041][T21182] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1583.984670][T21182] usb 3-1: USB disconnect, device number 106 [ 1583.996830][T28164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1584.150853][T28164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1584.231930][T11123] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.332480][T18287] Bluetooth: hci3: command tx timeout [ 1584.399518][T11123] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.525864][T11123] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.567433][T11123] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.725554][T17442] usb 9-1: USB disconnect, device number 21 [ 1584.847837][T11125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1584.912035][T11125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.147749][T28218] input: syz0 as /devices/virtual/input/input124 [ 1585.206821][T11123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.215264][T11123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1586.522702][T18287] Bluetooth: hci3: command tx timeout [ 1587.001627][T28230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1588.584750][T18287] Bluetooth: hci3: command tx timeout [ 1588.609760][T28250] trusted_key: encrypted_key: master key parameter 'ec' is invalid [ 1588.692199][T15917] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1588.721841][T28254] fuse: Unknown parameter '' [ 1588.864183][T15917] usb 2-1: Using ep0 maxpacket: 8 [ 1588.874237][T15917] usb 2-1: config 13 has an invalid interface number: 175 but max is 3 [ 1588.908159][T15917] usb 2-1: config 13 contains an unexpected descriptor of type 0x1, skipping [ 1588.926138][T15917] usb 2-1: config 13 has an invalid interface number: 99 but max is 3 [ 1588.934872][T15917] usb 2-1: config 13 has an invalid interface number: 229 but max is 3 [ 1588.944099][T15917] usb 2-1: config 13 contains an unexpected descriptor of type 0x2, skipping [ 1588.954809][T15917] usb 2-1: config 13 has an invalid interface number: 45 but max is 3 [ 1588.964575][T15917] usb 2-1: config 13 has an invalid interface number: 21 but max is 3 [ 1588.973438][T15917] usb 2-1: config 13 has 5 interfaces, different from the descriptor's value: 4 [ 1588.984890][T15917] usb 2-1: config 13 has no interface number 0 [ 1588.991113][T15917] usb 2-1: config 13 has no interface number 1 [ 1588.998285][T15917] usb 2-1: config 13 has no interface number 2 [ 1589.005293][T15917] usb 2-1: config 13 has no interface number 3 [ 1589.013142][T15917] usb 2-1: config 13 has no interface number 4 [ 1589.021255][T15917] usb 2-1: config 13 interface 175 altsetting 6 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1589.033869][T15917] usb 2-1: config 13 interface 175 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1589.056840][T28268] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6003'. [ 1589.128943][T28267] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6004'. [ 1589.152662][T15917] usb 2-1: config 13 interface 175 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1589.164445][T15917] usb 2-1: config 13 interface 175 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1589.194230][T15917] usb 2-1: config 13 interface 175 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1589.227038][T15917] usb 2-1: config 13 interface 175 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 1589.240760][T15917] usb 2-1: config 13 interface 175 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 1589.251825][T15917] usb 2-1: config 13 interface 175 altsetting 6 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1589.265767][T15917] usb 2-1: config 13 interface 175 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1589.289546][T15917] usb 2-1: config 13 interface 175 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 1589.318219][T15917] usb 2-1: config 13 interface 175 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 1589.348600][T15917] usb 2-1: config 13 interface 175 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1589.362713][T15917] usb 2-1: config 13 interface 99 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 1589.375890][T15917] usb 2-1: config 13 interface 99 altsetting 6 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1589.393741][T15917] usb 2-1: config 13 interface 99 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 1589.405633][T15917] usb 2-1: config 13 interface 99 altsetting 6 endpoint 0x6 has invalid maxpacket 1056, setting to 64 [ 1589.452388][T15917] usb 2-1: config 13 interface 99 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 1589.467431][T15917] usb 2-1: config 13 interface 99 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 1589.479281][T15917] usb 2-1: config 13 interface 99 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 1589.506964][T15917] usb 2-1: config 13 interface 229 altsetting 250 has a duplicate endpoint with address 0xA, skipping [ 1589.520089][T15917] usb 2-1: config 13 interface 229 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 1589.675311][T15917] usb 2-1: config 13 interface 229 altsetting 250 has a duplicate endpoint with address 0xC, skipping [ 1589.687773][T15917] usb 2-1: config 13 interface 229 altsetting 250 has a duplicate endpoint with address 0xC, skipping [ 1589.701218][T15917] usb 2-1: config 13 interface 229 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 1589.716323][T15917] usb 2-1: config 13 interface 229 altsetting 250 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1589.731519][T15917] usb 2-1: config 13 interface 229 altsetting 250 has a duplicate endpoint with address 0xA, skipping [ 1589.748086][T15917] usb 2-1: config 13 interface 229 altsetting 250 has 7 endpoint descriptors, different from the interface descriptor's value: 15 [ 1589.765799][T15917] usb 2-1: config 13 interface 45 altsetting 129 has a duplicate endpoint with address 0xC, skipping [ 1589.788461][T15917] usb 2-1: config 13 interface 45 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1589.802150][ T3099] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1589.820041][T15917] usb 2-1: config 13 interface 45 altsetting 129 has 8 endpoint descriptors, different from the interface descriptor's value: 1 [ 1589.836843][T15917] usb 2-1: config 13 interface 21 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 1589.848354][T15917] usb 2-1: config 13 interface 21 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 1589.874560][T15917] usb 2-1: config 13 interface 175 has no altsetting 0 [ 1589.934738][T15917] usb 2-1: config 13 interface 99 has no altsetting 0 [ 1589.951498][T15917] usb 2-1: config 13 interface 229 has no altsetting 0 [ 1589.999765][ T3099] usb 9-1: Using ep0 maxpacket: 8 [ 1590.017149][ T3099] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1590.028843][T15917] usb 2-1: config 13 interface 45 has no altsetting 0 [ 1590.056590][T15917] usb 2-1: config 13 interface 21 has no altsetting 0 [ 1590.080194][T15917] usb 2-1: Dual-Role OTG device on HNP port [ 1590.090344][T15917] usb 2-1: New USB device found, idVendor=2001, idProduct=331f, bcdDevice=84.ab [ 1590.117516][T15917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.128691][ T3099] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1590.152511][T15917] usb 2-1: Product: Ҧ爓틿጖樤辎טּ툒턟凋줊狺åŒâ—œé¢‰î©¸é¤ºç¬§ç˜ê–퉽嫃껿괃攤巂뇉踖潜ɿ砰㔔པ먌쮯㔨飩䩆â½é ¬ëˆ¥è¾°æµ¶æ‘ã ç­ê“졢瓢୳豧눖岦é¸ë¯æ—ªé©¤î“™î«®á“Œë«‰ç‚†î˜—ä½¹å™î¿¯ç¢¥ï„©ì²±çŸ„䞸槉⺻識柵肿âŠæ¡„ꀽğ뛢륹㶉鎷 [ 1590.224652][ T3099] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1590.244806][T15917] usb 2-1: Manufacturer: ë™ïŽµà­¦à¿½ì‹“ٜ譒ᵉᔹ뤽텼쒿ꪪᰀ굗댅緭엂筃è›á†¹ã‰ëœ¹ã¢ì¼¶à©ãšªê”©î…œíš¥á§¬ì³«éº³Ïºãµ£ã‰¾ì¢Ÿæ±ë·ˆé¦Œã‡˜ïˆ¢ì‰œç”«è³‚泼桻ḟ⢂㱑⳥ꌗ茫⺬ﵢ隽ﳨ﷙⤧峹à·ï»²á€³í‚¾ì¸›âœ¥ë…é´™ç‰ï—„ì–‘ê¨ï“矷 [ 1590.318282][T15917] usb 2-1: SerialNumber: à°„ [ 1590.324051][ T3099] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1590.374368][ T3099] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1590.388305][ T3099] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1590.555958][ T3099] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.974183][ T3099] usb 9-1: GET_CAPABILITIES returned 0 [ 1590.980648][ T3099] usbtmc 9-1:16.0: can't read capabilities [ 1591.001608][T15917] usb 2-1: USB disconnect, device number 121 [ 1591.185830][ T3099] usb 9-1: USB disconnect, device number 22 [ 1592.001609][T28294] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6013'. [ 1592.908927][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1592.908947][ T30] audit: type=1326 audit(1761152848.063:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28311 comm="syz.7.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c098efc9 code=0x7ffc0000 [ 1592.992789][T28322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6023'. [ 1593.002311][ T30] audit: type=1326 audit(1761152848.103:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28311 comm="syz.7.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c098efc9 code=0x7ffc0000 [ 1593.024802][ C1] vkms_vblank_simulate: vblank timer overrun [ 1593.033241][ T30] audit: type=1326 audit(1761152848.103:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28311 comm="syz.7.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f29c098efc9 code=0x7ffc0000 [ 1593.064651][ T30] audit: type=1326 audit(1761152848.103:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28311 comm="syz.7.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c098efc9 code=0x7ffc0000 [ 1593.135270][T28323] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6019'. [ 1593.193131][ T30] audit: type=1326 audit(1761152848.113:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28311 comm="syz.7.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c098efc9 code=0x7ffc0000 [ 1593.253865][ T30] audit: type=1326 audit(1761152848.113:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28311 comm="syz.7.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f29c098efc9 code=0x7ffc0000 [ 1593.264110][ T5920] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1593.276406][ C1] vkms_vblank_simulate: vblank timer overrun [ 1593.510617][ T5920] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.536300][ T30] audit: type=1326 audit(1761152848.113:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28311 comm="syz.7.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c098efc9 code=0x7ffc0000 [ 1593.558834][ C1] vkms_vblank_simulate: vblank timer overrun [ 1593.672306][ T5920] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1593.716614][ T5920] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1593.747250][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.782575][ T30] audit: type=1326 audit(1761152848.113:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28311 comm="syz.7.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f29c098efc9 code=0x7ffc0000 [ 1593.836204][ T5920] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1593.864780][ T30] audit: type=1326 audit(1761152848.113:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28311 comm="syz.7.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c098efc9 code=0x7ffc0000 [ 1593.935736][ T30] audit: type=1326 audit(1761152848.123:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28311 comm="syz.7.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f29c098efc9 code=0x7ffc0000 [ 1593.967640][T28083] udevd[28083]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1593.986530][ T5920] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1594.066641][T28320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1594.091376][T28320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1594.162893][T15917] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1594.186667][ T5920] usb 2-1: USB disconnect, device number 122 [ 1594.324260][T15917] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1594.342057][T15917] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1594.372353][T15917] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1594.394972][T15917] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1594.413161][T15917] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1594.455407][T15917] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1594.473024][T15917] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1594.505105][T15917] usb 9-1: Product: syz [ 1594.517064][T15917] usb 9-1: Manufacturer: syz [ 1594.555580][T15917] cdc_wdm 9-1:1.0: skipping garbage [ 1594.560865][T15917] cdc_wdm 9-1:1.0: skipping garbage [ 1594.588935][T15917] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device [ 1594.609569][T15917] cdc_wdm 9-1:1.0: Unknown control protocol [ 1594.981389][T28360] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6034'. [ 1595.022671][T28365] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6033'. [ 1595.070251][T28360] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6034'. [ 1595.110021][ T5920] usb 9-1: USB disconnect, device number 23 [ 1595.480496][T28372] sctp: [Deprecated]: syz.1.6037 (pid 28372) Use of int in max_burst socket option. [ 1595.480496][T28372] Use struct sctp_assoc_value instead [ 1595.792760][T15917] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1595.944807][T15917] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1595.953540][T15917] usb 2-1: config 0 has no interface number 0 [ 1595.970168][T15917] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1596.027567][T15917] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1596.109865][T15917] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1596.138068][T15917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.166773][T15917] usb 2-1: Product: syz [ 1596.221687][T15917] usb 2-1: Manufacturer: syz [ 1596.250289][T15917] usb 2-1: SerialNumber: syz [ 1596.287786][T15917] usb 2-1: config 0 descriptor?? [ 1596.327578][T28374] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1596.365319][T15917] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1596.443897][T15917] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1596.616430][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1596.616963][T15917] usb 6-1: USB disconnect, device number 57 [ 1596.623086][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1596.623104][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1596.645344][T28336] cdc_wdm 6-1:1.0: Tx URB error: -19 [ 1596.753881][ T3099] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1596.761031][ T5920] usb 2-1: USB disconnect, device number 123 [ 1596.808964][ T5920] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1596.827463][ T5920] cyberjack 2-1:0.69: device disconnected [ 1596.921468][ T6100] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.942157][ T3099] usb 10-1: Using ep0 maxpacket: 16 [ 1596.950880][ T3099] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1596.975048][ T3099] usb 10-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1596.985978][ T3099] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.003323][ T3099] usb 10-1: config 0 descriptor?? [ 1597.085342][ T6100] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.177911][ T6100] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.305469][ T6100] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.352140][T17442] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1597.443635][ T3099] uclogic 0003:28BD:0042.005D: interface is invalid, ignoring [ 1597.635454][ T3099] usb 10-1: USB disconnect, device number 2 [ 1597.642220][T17442] usb 3-1: Using ep0 maxpacket: 8 [ 1597.703246][T17442] usb 3-1: config 0 has no interfaces? [ 1597.714208][T17442] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1597.751457][T17442] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.770406][T17442] usb 3-1: Product: syz [ 1597.775189][T17442] usb 3-1: Manufacturer: syz [ 1597.780640][T17442] usb 3-1: SerialNumber: syz [ 1597.792651][T17442] usb 3-1: config 0 descriptor?? [ 1597.800725][ T6100] bridge_slave_1: left allmulticast mode [ 1597.813288][ T6100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.904770][ T6100] bridge_slave_0: left allmulticast mode [ 1597.920281][ T6100] bridge_slave_0: left promiscuous mode [ 1597.942862][ T6100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.993798][ T6100] tipc: Resetting bearer [ 1598.816195][T28414] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6046'. [ 1599.089891][ T6100] tipc: Disabling bearer [ 1599.520381][ T5920] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1599.672071][ T5920] usb 10-1: Using ep0 maxpacket: 32 [ 1599.678443][ T5920] usb 10-1: no configurations [ 1599.685074][ T5920] usb 10-1: can't read configurations, error -22 [ 1599.832654][ T5920] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1600.002737][ T5920] usb 10-1: Using ep0 maxpacket: 32 [ 1600.009024][ T5920] usb 10-1: no configurations [ 1600.015886][ T5920] usb 10-1: can't read configurations, error -22 [ 1600.045102][ T5920] usb usb10-port1: attempt power cycle [ 1600.298757][T15917] usb 3-1: USB disconnect, device number 107 [ 1600.403227][ T5920] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1600.431158][T28435] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6049'. [ 1600.442786][ T5920] usb 10-1: Using ep0 maxpacket: 32 [ 1600.453275][ T5920] usb 10-1: no configurations [ 1600.458421][ T5920] usb 10-1: can't read configurations, error -22 [ 1600.468071][ T6100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1600.482212][ T6100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1600.494575][ T6100] bond0 (unregistering): Released all slaves [ 1600.511505][T28438] binder: 28434:28438 ioctl 4018620d 0 returned -22 [ 1600.522861][ T6100] bond1 (unregistering): Released all slaves [ 1600.524950][T28438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6049'. [ 1600.593001][ T5920] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1600.650795][ T5920] usb 10-1: Using ep0 maxpacket: 32 [ 1600.660002][ T5920] usb 10-1: no configurations [ 1600.665506][ T5920] usb 10-1: can't read configurations, error -22 [ 1600.679473][ T5920] usb usb10-port1: unable to enumerate USB device [ 1600.822191][T17442] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 1600.822957][ T6100] bond2 (unregistering): Released all slaves [ 1600.859973][T28414] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6046'. [ 1600.869773][T28417] syzkaller0: entered promiscuous mode [ 1600.876470][T28417] syzkaller0: entered allmulticast mode [ 1600.930161][T28451] tipc: Enabling of bearer <åth:ne> rejected, media not registered [ 1600.942468][T11125] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1600.959854][T17442] usb 3-1: device descriptor read/64, error -71 [ 1600.967843][T11125] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1601.017592][T11125] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1601.061489][T11125] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1601.093157][ T6100] tipc: Left network mode [ 1601.136316][T28457] netlink: 'syz.1.6054': attribute type 3 has an invalid length. [ 1601.234111][T17442] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1601.367702][ T6100] hsr_slave_0: left promiscuous mode [ 1601.383569][ T6100] hsr_slave_1: left promiscuous mode [ 1601.383616][T17442] usb 3-1: device descriptor read/64, error -71 [ 1601.393741][ T6100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1601.436934][ T6100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1601.462205][ T5945] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1601.475752][ T6100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1601.485126][ T6100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1601.533176][T17442] usb usb3-port1: attempt power cycle [ 1601.567838][ T6100] veth1_macvtap: left promiscuous mode [ 1601.599230][ T6100] veth0_macvtap: left promiscuous mode [ 1601.605004][ T5945] usb 2-1: device descriptor read/64, error -71 [ 1601.842089][ T5945] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1601.905758][T17442] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1601.943132][T17442] usb 3-1: device descriptor read/8, error -71 [ 1601.981849][ T5945] usb 2-1: device descriptor read/64, error -71 [ 1602.095067][ T5945] usb usb2-port1: attempt power cycle [ 1602.204998][T17442] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 1602.238881][T17442] usb 3-1: device descriptor read/8, error -71 [ 1602.349132][T17442] usb usb3-port1: unable to enumerate USB device [ 1602.416775][ T6100] team0 (unregistering): Port device team_slave_1 removed [ 1602.452200][ T5945] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1602.494968][ T5945] usb 2-1: device descriptor read/8, error -71 [ 1602.523121][ T6100] team0 (unregistering): Port device C removed [ 1602.742098][ T5945] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1602.842858][ T5945] usb 2-1: device descriptor read/8, error -71 [ 1602.861430][T28483] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(16) [ 1602.868192][T28483] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1602.876685][T28483] vhci_hcd vhci_hcd.0: Device attached [ 1602.906143][T28486] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1602.974337][ T5945] usb usb2-port1: unable to enumerate USB device [ 1602.986674][T28483] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(20) [ 1602.993339][T28483] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1603.006423][T28483] vhci_hcd vhci_hcd.0: Device attached [ 1603.063704][T15917] vhci_hcd: vhci_device speed not set [ 1603.129759][T15917] usb 51-1: new full-speed USB device number 2 using vhci_hcd [ 1603.564241][T28484] vhci_hcd: connection reset by peer [ 1603.567368][T28487] vhci_hcd: connection closed [ 1603.570965][T18379] vhci_hcd: stop threads [ 1603.581182][T18379] vhci_hcd: release socket [ 1603.586060][T18379] vhci_hcd: disconnect device [ 1603.593705][T18379] vhci_hcd: stop threads [ 1603.598014][T18379] vhci_hcd: release socket [ 1603.603438][T18379] vhci_hcd: disconnect device [ 1604.668585][ T6100] IPVS: stop unused estimator thread 0... [ 1605.312168][T17442] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1605.476778][T17442] usb 9-1: Using ep0 maxpacket: 16 [ 1605.486065][T17442] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1605.505189][T17442] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1605.527229][T17442] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1605.557412][T17442] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1605.578770][T17442] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.604381][T17442] usb 9-1: Product: syz [ 1605.615935][T17442] usb 9-1: Manufacturer: syz [ 1605.626416][T17442] usb 9-1: SerialNumber: syz [ 1605.644143][T17442] usb 9-1: config 0 descriptor?? [ 1605.652842][T28514] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1605.717290][T17442] mcba_usb 9-1:0.0 can0: failed tx_urb -90 [ 1605.742335][T17442] mcba_usb 9-1:0.0 can0: Failed to send cmd (169) [ 1605.748933][T17442] mcba_usb 9-1:0.0 can0: failed tx_urb -90 [ 1605.778187][T17442] mcba_usb 9-1:0.0 can0: Failed to send cmd (169) [ 1605.802006][T17442] mcba_usb 9-1:0.0: Microchip CAN BUS Analyzer connected [ 1605.859723][T28536] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3356708090 (26853664720 ns) > initial count (9735166528 ns). Using initial count to start timer. [ 1605.915558][T28541] kvm: Disabled LAPIC found during irq injection [ 1606.192522][ T5920] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1606.345861][ T5920] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1606.357404][ T5920] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.362080][T17442] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1606.380101][ T5920] usb 10-1: config 0 descriptor?? [ 1606.413027][T14481] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1606.525328][T17442] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 1606.536902][T17442] usb 2-1: config 0 has no interface number 0 [ 1606.543706][T17442] usb 2-1: config 0 interface 11 has no altsetting 0 [ 1606.550926][T17442] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1606.560559][T17442] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.577346][T17442] usb 2-1: config 0 descriptor?? [ 1606.582474][T14481] usb 3-1: Using ep0 maxpacket: 8 [ 1606.598693][T14481] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1606.609090][T14481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.620607][T17442] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 1606.640283][T14481] usb 3-1: config 0 descriptor?? [ 1606.646051][T17442] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 87 [ 1606.674266][T17442] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 7 [ 1606.693484][T17442] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 1606.701650][T17442] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 1606.718491][T17442] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 1606.726763][T17442] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 1606.735186][T17442] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 1606.743866][T17442] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 1606.754867][T17442] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1606.781097][T17442] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 1606.798586][ T5920] ath6kl: Failed to submit usb control message: -71 [ 1606.809779][ T5920] ath6kl: unable to send the bmi data to the device: -71 [ 1606.835069][T17442] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 1606.847021][ T5920] ath6kl: Unable to send get target info: -71 [ 1606.863454][ T5920] ath6kl: Failed to init ath6kl core: -71 [ 1606.874922][ T5920] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1606.889521][T28543] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1606.902505][T17442] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 1606.907008][ T5920] usb 10-1: USB disconnect, device number 7 [ 1606.918307][T14481] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1606.931794][T28543] bond2 (unregistering): Released all slaves [ 1606.938885][T17442] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 1606.978834][T17442] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 1606.987497][T17442] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 1607.007715][T17442] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1607.682965][ T5495] mcba_usb 9-1:0.0 can0: bit-timing not yet defined [ 1607.737183][T14481] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1607.749032][T14481] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1607.762756][T14481] usb 3-1: USB disconnect, device number 112 [ 1608.010832][T17442] usb 9-1: USB disconnect, device number 24 [ 1608.051448][T17442] mcba_usb 9-1:0.0 can0: device disconnected [ 1608.253567][T15917] vhci_hcd: vhci_device speed not set [ 1608.645314][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1608.645337][ T30] audit: type=1800 audit(1761152863.763:2559): pid=28586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.6075" name="bus" dev="ramfs" ino=152303 res=0 errno=0 [ 1608.952876][ T30] audit: type=1800 audit(1761152864.103:2560): pid=28549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6072" name="/" dev="fuse" ino=9 res=0 errno=0 [ 1609.104879][ T5945] usb 2-1: USB disconnect, device number 2 [ 1609.136229][ T5945] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1609.205476][ T5945] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1609.285711][ T5945] keyspan 2-1:0.11: device disconnected [ 1609.693951][T14481] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1609.843105][T14481] usb 9-1: device descriptor read/64, error -71 [ 1610.092547][T14481] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1610.278608][T28636] xt_connbytes: Forcing CT accounting to be enabled [ 1610.312117][T14481] usb 9-1: device descriptor read/64, error -71 [ 1610.312999][T21753] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1610.452562][T14481] usb usb9-port1: attempt power cycle [ 1610.642561][T21753] usb 3-1: Using ep0 maxpacket: 32 [ 1610.650039][T21753] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1610.660517][T21753] usb 3-1: config 0 has no interface number 0 [ 1610.682730][T21753] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1610.730632][T21753] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1610.754901][T21753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.888115][T21753] usb 3-1: Product: syz [ 1610.947741][T21753] usb 3-1: Manufacturer: syz [ 1610.957091][T21753] usb 3-1: SerialNumber: syz [ 1611.033796][T21753] usb 3-1: config 0 descriptor?? [ 1611.060011][T21753] smsc75xx v1.0.0 [ 1611.063822][T14481] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1611.094382][T14481] usb 9-1: device descriptor read/8, error -71 [ 1611.484568][T28634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6084'. [ 1611.582104][T14481] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1611.602910][T14481] usb 9-1: device descriptor read/8, error -71 [ 1611.712661][T14481] usb usb9-port1: unable to enumerate USB device [ 1611.798173][T21753] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1611.871736][T21753] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1612.822478][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.828862][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.382366][T28667] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1613.502084][ T5945] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1613.512750][T28667] usb 10-1: device descriptor read/64, error -71 [ 1613.697496][T21753] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 1613.727892][T21753] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 1613.758676][T21753] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1613.772458][T28667] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1613.772854][ T5945] usb 2-1: Using ep0 maxpacket: 8 [ 1613.794484][T21753] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1613.820256][ T5945] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1613.823720][T21753] usb 3-1: USB disconnect, device number 113 [ 1613.835879][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.844377][ T5945] usb 2-1: config 0 descriptor?? [ 1613.922578][T28667] usb 10-1: device descriptor read/64, error -71 [ 1614.063601][T28667] usb usb10-port1: attempt power cycle [ 1614.179055][T28686] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6097'. [ 1614.425343][T28667] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1614.453258][T28667] usb 10-1: device descriptor read/8, error -71 [ 1614.465141][ T5945] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1614.477884][ T5945] asix 2-1:0.0: probe with driver asix failed with error -61 [ 1614.832110][T28667] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1614.853237][T28667] usb 10-1: device descriptor read/8, error -71 [ 1614.970403][T28667] usb usb10-port1: unable to enumerate USB device [ 1615.718527][T28711] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6105'. [ 1615.772509][T28711] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6105'. [ 1615.899852][T28711] sit2: entered allmulticast mode [ 1616.045200][ T5945] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1616.229985][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 1616.243866][ T5945] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1616.271883][ T5945] usb 3-1: config 0 has no interface number 0 [ 1616.287828][ T5945] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1616.301990][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.310091][ T5945] usb 3-1: Product: syz [ 1616.331604][ T5945] usb 3-1: Manufacturer: syz [ 1616.336468][ T5945] usb 3-1: SerialNumber: syz [ 1616.384705][ T5945] usb 3-1: config 0 descriptor?? [ 1616.404651][ T5945] hub 3-1:0.89: bad descriptor, ignoring hub [ 1616.410764][ T5945] hub 3-1:0.89: probe with driver hub failed with error -5 [ 1616.439872][ T5945] option 3-1:0.89: GSM modem (1-port) converter detected [ 1616.517045][T28667] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1616.564136][T28728] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6109'. [ 1616.592831][T17442] usb 2-1: USB disconnect, device number 3 [ 1616.602831][ T5945] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1616.680350][ T5945] usb 3-1: USB disconnect, device number 114 [ 1616.684905][T28667] usb 10-1: Using ep0 maxpacket: 16 [ 1616.718378][T28721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1616.752513][T28721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1616.798634][T28667] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1616.808739][ T5945] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1616.816139][T28667] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1616.869755][T28667] usb 10-1: can't read configurations, error -71 [ 1616.871478][ T5945] option 3-1:0.89: device disconnected [ 1617.833925][T28754] loop7: detected capacity change from 0 to 7 [ 1617.848309][T28754] Dev loop7: unable to read RDB block 7 [ 1617.860497][T28754] loop7: unable to read partition table [ 1617.866784][T17442] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1617.878573][T28754] loop7: partition table beyond EOD, truncated [ 1617.887119][T28754] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1617.981582][T28758] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6119'. [ 1618.029066][T17442] usb 3-1: Using ep0 maxpacket: 32 [ 1618.036470][T17442] usb 3-1: config 0 has an invalid interface number: 76 but max is 3 [ 1618.049535][T17442] usb 3-1: config 0 has an invalid interface number: 166 but max is 3 [ 1618.058811][T17442] usb 3-1: config 0 has an invalid interface number: 93 but max is 3 [ 1618.070560][T17442] usb 3-1: config 0 has an invalid interface number: 138 but max is 3 [ 1618.161562][T17442] usb 3-1: config 0 has no interface number 0 [ 1618.170612][T17442] usb 3-1: config 0 has no interface number 1 [ 1618.188352][ T5200] Dev loop7: unable to read RDB block 7 [ 1618.196284][ T5200] loop7: unable to read partition table [ 1618.208763][T17442] usb 3-1: config 0 has no interface number 2 [ 1618.216908][ T43] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1618.226745][ T5200] loop7: partition table beyond EOD, truncated [ 1618.233073][T17442] usb 3-1: config 0 has no interface number 3 [ 1618.242158][T17442] usb 3-1: config 0 interface 76 altsetting 11 bulk endpoint 0x5 has invalid maxpacket 64 [ 1618.258220][T17442] usb 3-1: config 0 interface 76 altsetting 11 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1618.332742][T17442] usb 3-1: config 0 interface 76 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 1618.345900][T17442] usb 3-1: config 0 interface 76 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 1618.362198][T17442] usb 3-1: config 0 interface 76 altsetting 11 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1618.375287][ T43] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1618.392561][ T43] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1618.432074][T17442] usb 3-1: config 0 interface 76 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 1618.444762][ T43] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1618.492081][T17442] usb 3-1: config 0 interface 76 altsetting 11 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1618.507709][ T43] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1618.532795][T28767] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6118'. [ 1618.542286][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.552446][T17442] usb 3-1: config 0 interface 76 altsetting 11 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1618.582051][T17442] usb 3-1: config 0 interface 76 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 1618.596952][ T43] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1618.615598][T28770] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6118'. [ 1618.633641][T17442] usb 3-1: config 0 interface 76 altsetting 11 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1618.680711][T28771] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6118'. [ 1618.706142][T17442] usb 3-1: config 0 interface 76 altsetting 11 has a duplicate endpoint with address 0x4, skipping [ 1618.744230][T17442] usb 3-1: config 0 interface 166 altsetting 251 has a duplicate endpoint with address 0x1, skipping [ 1618.763521][T28767] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6118'. [ 1618.772823][T17442] usb 3-1: config 0 interface 93 altsetting 12 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1618.772863][T17442] usb 3-1: config 0 interface 93 altsetting 12 has a duplicate endpoint with address 0x9, skipping [ 1618.772898][T17442] usb 3-1: config 0 interface 93 altsetting 12 bulk endpoint 0xA has invalid maxpacket 16 [ 1618.772927][T17442] usb 3-1: config 0 interface 93 altsetting 12 has a duplicate endpoint with address 0x2, skipping [ 1618.772952][T17442] usb 3-1: config 0 interface 93 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 1618.772976][T17442] usb 3-1: config 0 interface 93 altsetting 12 has a duplicate endpoint with address 0xA, skipping [ 1618.773017][T17442] usb 3-1: config 0 interface 138 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 1618.773041][T17442] usb 3-1: config 0 interface 76 has no altsetting 0 [ 1618.773062][T17442] usb 3-1: config 0 interface 166 has no altsetting 0 [ 1618.773082][T17442] usb 3-1: config 0 interface 93 has no altsetting 0 [ 1618.773102][T17442] usb 3-1: config 0 interface 138 has no altsetting 0 [ 1618.777050][T17442] usb 3-1: New USB device found, idVendor=04f2, idProduct=affa, bcdDevice=2e.19 [ 1618.906167][T17442] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.914594][T17442] usb 3-1: Product: à±èº†ê°¡îš¡ä¸§ç¤–ꪶk䢃伣䵀鼻ã‹â–‡ï»ç””ä—ƒá·í‰¤ë§¸å¾¨á±…阶ê³è’©å‰¡å—±ä“ å’®å櫫黮慬çºã„矃௫횬䀼扠㔉⾭ㆼ롪딼꣭刂཭ꡠᤑ루줽僅驂௧ⵈΌꮀ䄪æ›ãˆ–葌維悸精냾ꆴ饕듩ㄸ认è’ã–黷≅觉䰂㪎Ꜿ㦙âˆï’‹é”Œë›åŠ¸ã¢¢â•œæ£¡êº†ë²¨æ³…Ꮎã¹â‡´è…ä†å¢§é³žì½˜å´ê¦æ†‚Ὤê³â [ 1618.946190][ C1] vkms_vblank_simulate: vblank timer overrun [ 1619.078796][ T43] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1619.097411][T17442] usb 3-1: Manufacturer: ജ覊긤ུ䩙儶ᦓ蚄ꇎæ•è–Ñ櫨⊋î¥è…±ç §ëŠæ±©å¡»â·±ë¨«ã‚•î¾§à·Šâ¦•ï“Œè˜–柤簽м駕솫߮鉜短彵霣䀹곂槽⤓葔挣ï¿å– á®„íµãŸ“â…¬è‹ï¥»ï¢Œ [ 1619.143923][ T43] usb 10-1: USB disconnect, device number 14 [ 1619.162191][T17442] usb 3-1: SerialNumber: 懗侗ä›î°¿Ä秎ཥ⒨즞ǧ價岢᧘乗èºë¼ªä±¢è¾¹ä™—å¢ï¨¾è¯¨èŠƒéŒŽã“¯é½œí›„ìŠê’¢îš®ïŒ¶è„›ç”›ä˜æ¿•ä½Ÿè†‰á‘‡ê€‰ì½Žæ£´êƒ¨ç¨•é§„㪰鷑ìªå‰„槿梼ç¨ç€©ìŠ‰ë…¦ç†‹ÓƒåŠ¡ï’¨ê¥’뀃䛅⫶芑骦ડê±ã¸—寓徑풃糑埣㟉建䢆⣘á²â«‘ [ 1619.188496][ C1] vkms_vblank_simulate: vblank timer overrun [ 1619.211435][T28771] macsec0 (unregistering): left allmulticast mode [ 1619.231711][T28771] macsec0 (unregistering): left promiscuous mode [ 1619.250865][T28771] bridge0: port 3(macsec0) entered disabled state [ 1619.279161][T17442] usb 3-1: config 0 descriptor?? [ 1619.289363][T28751] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1619.309911][T28751] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1619.662544][T17442] usb 3-1: USB disconnect, device number 115 [ 1619.861425][T28789] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6121'. [ 1619.998596][T28792] netlink: 'syz.9.6122': attribute type 10 has an invalid length. [ 1620.021117][T28792] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6122'. [ 1620.552059][ T5945] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1620.633547][T28792] team0: entered promiscuous mode [ 1620.638660][T28792] team_slave_0: entered promiscuous mode [ 1620.689653][T28792] team_slave_1: entered promiscuous mode [ 1620.697183][T28792] team0: entered allmulticast mode [ 1620.711851][T28792] team_slave_0: entered allmulticast mode [ 1620.736491][T28792] team_slave_1: entered allmulticast mode [ 1620.758424][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 1620.768844][T28792] bridge0: port 3(team0) entered blocking state [ 1620.799039][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1620.810957][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1620.834099][ T5945] usb 2-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 1620.847380][T28792] bridge0: port 3(team0) entered disabled state [ 1620.867033][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.880759][ T5945] usb 2-1: Product: syz [ 1620.889827][T28792] bridge0: port 3(team0) entered blocking state [ 1620.896303][T28792] bridge0: port 3(team0) entered forwarding state [ 1620.912188][ T5945] usb 2-1: Manufacturer: syz [ 1620.917002][ T5945] usb 2-1: SerialNumber: syz [ 1620.929350][ T5945] usb 2-1: config 0 descriptor?? [ 1620.982598][T28641] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1621.133473][T28641] usb 3-1: Using ep0 maxpacket: 32 [ 1621.140959][T28641] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1621.151150][T28641] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 1621.165871][T28641] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.177792][T28641] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1621.187654][T28641] usb 3-1: config 128 has no interface number 0 [ 1621.194367][T28641] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 170, changing to 11 [ 1621.265073][T28641] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 42744, setting to 1024 [ 1621.277194][ T5945] usb 2-1: USB disconnect, device number 4 [ 1621.304845][T28641] usb 3-1: config 128 interface 127 has no altsetting 0 [ 1621.330583][T28641] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1621.346052][T28641] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.363899][T28641] usb 3-1: Product: syz [ 1621.368340][T28641] usb 3-1: Manufacturer: syz [ 1621.382425][T28641] usb 3-1: SerialNumber: syz [ 1621.398286][T28797] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1621.536380][T28814] fuseblk: Bad value for 'source' [ 1621.562098][T17442] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1621.649465][T28641] usb 3-1: USB disconnect, device number 116 [ 1621.679139][T28083] udevd[28083]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1621.722169][T17442] usb 10-1: Using ep0 maxpacket: 32 [ 1621.731751][T17442] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1621.750526][T17442] usb 10-1: config 0 has no interface number 0 [ 1621.768664][T17442] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1621.792844][T17442] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.812137][T17442] usb 10-1: Product: syz [ 1621.827126][T17442] usb 10-1: Manufacturer: syz [ 1621.831883][T17442] usb 10-1: SerialNumber: syz [ 1621.859274][T17442] usb 10-1: config 0 descriptor?? [ 1621.934374][T17442] smsc95xx v2.0.0 [ 1622.352264][T17442] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1622.424548][T17442] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1622.906636][T17442] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1622.967130][T17442] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 1623.002458][T17442] usb 10-1: USB disconnect, device number 15 [ 1624.192977][T28641] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 1624.268728][T28871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6141'. [ 1624.386997][T28641] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1624.441234][T28641] usb 9-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1624.481174][T28641] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1624.523046][T28641] usb 9-1: Product: syz [ 1624.527284][T28641] usb 9-1: Manufacturer: syz [ 1624.531912][T28641] usb 9-1: SerialNumber: syz [ 1624.591387][T28641] usb 9-1: config 0 descriptor?? [ 1624.649215][T28641] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1624.705141][T28641] pctv452e: pctv452e_power_ctrl: 1 [ 1624.705141][T28641] [ 1624.730612][T28641] usb 9-1: selecting invalid altsetting 3 [ 1624.742170][T17442] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1624.752424][T28641] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1624.752424][T28641] [ 1624.803052][T28641] dvb-usb: bulk message failed: -22 (5/0) [ 1624.826894][T28641] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1624.876804][T28641] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 1624.901522][T28641] usb 9-1: USB disconnect, device number 29 [ 1624.942224][T17442] usb 10-1: Using ep0 maxpacket: 16 [ 1624.973665][T17442] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 1624.990335][T17442] usb 10-1: config 0 has no interface number 0 [ 1625.005780][T17442] usb 10-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1625.020957][T28892] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6147'. [ 1625.030478][T17442] usb 10-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1625.041052][T17442] usb 10-1: config 0 interface 8 has no altsetting 0 [ 1625.048178][T17442] usb 10-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1625.057982][T17442] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.073461][T17442] usb 10-1: config 0 descriptor?? [ 1625.192073][ T5904] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1625.383772][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1625.432042][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1625.473428][ T5904] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1625.516623][T17442] usbhid 10-1:0.8: can't add hid device: -71 [ 1625.529105][T17442] usbhid 10-1:0.8: probe with driver usbhid failed with error -71 [ 1625.542029][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.601881][ T5904] usb 3-1: config 0 descriptor?? [ 1625.618127][T17442] usb 10-1: USB disconnect, device number 16 [ 1625.996078][T28917] fuse: Bad value for 'group_id' [ 1626.102886][T28917] fuse: Bad value for 'group_id' [ 1626.159977][ T5904] uclogic 0003:256C:006D.005E: failed retrieving string descriptor #100: -71 [ 1626.182111][ T5904] uclogic 0003:256C:006D.005E: failed retrieving pen parameters: -71 [ 1626.210527][ T5904] uclogic 0003:256C:006D.005E: failed probing pen v1 parameters: -71 [ 1626.266282][ T5904] uclogic 0003:256C:006D.005E: failed probing parameters: -71 [ 1626.295225][ T5904] uclogic 0003:256C:006D.005E: probe with driver uclogic failed with error -71 [ 1626.348410][ T5904] usb 3-1: USB disconnect, device number 117 [ 1626.911737][ T30] audit: type=1326 audit(1761152881.973:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28935 comm="syz.1.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2d78efc9 code=0x7ffc0000 [ 1627.122109][ T30] audit: type=1326 audit(1761152881.973:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28935 comm="syz.1.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2d78efc9 code=0x7ffc0000 [ 1627.171050][ T30] audit: type=1326 audit(1761152881.973:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28935 comm="syz.1.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0b2d78efc9 code=0x7ffc0000 [ 1627.279239][ T30] audit: type=1326 audit(1761152881.973:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28935 comm="syz.1.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2d78efc9 code=0x7ffc0000 [ 1627.353691][ T30] audit: type=1326 audit(1761152881.973:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28935 comm="syz.1.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2d78efc9 code=0x7ffc0000 [ 1627.569805][ T30] audit: type=1326 audit(1761152881.973:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28935 comm="syz.1.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0b2d78efc9 code=0x7ffc0000 [ 1627.785426][ T30] audit: type=1326 audit(1761152881.973:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28935 comm="syz.1.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2d78efc9 code=0x7ffc0000 [ 1627.883626][ T30] audit: type=1326 audit(1761152881.973:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28935 comm="syz.1.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2d78efc9 code=0x7ffc0000 [ 1627.982963][ T30] audit: type=1326 audit(1761152881.973:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28935 comm="syz.1.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f0b2d78efc9 code=0x7ffc0000 [ 1628.144153][ T30] audit: type=1326 audit(1761152881.973:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28935 comm="syz.1.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2d78efc9 code=0x7ffc0000 [ 1629.522186][ T5904] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 1629.693656][ T5904] usb 10-1: config 0 has an invalid interface number: 11 but max is 0 [ 1629.708600][ T5904] usb 10-1: config 0 has no interface number 0 [ 1629.719621][ T5904] usb 10-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1629.738013][T28979] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6164'. [ 1629.752251][ T5904] usb 10-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1629.777977][ T5904] usb 10-1: config 0 interface 11 has no altsetting 0 [ 1629.816311][ T5904] usb 10-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 1629.836550][ T5904] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.859820][ T5904] usb 10-1: config 0 descriptor?? [ 1629.865730][T17442] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1629.892865][T28963] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1629.906176][ T5904] keyspan 10-1:0.11: Keyspan 4 port adapter converter detected [ 1629.936490][ T5904] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 81 [ 1629.944637][ T5904] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 1 [ 1629.967067][ T5904] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1630.000597][ T5904] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 82 [ 1630.032687][ T5904] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 2 [ 1630.043075][T17442] usb 9-1: Using ep0 maxpacket: 32 [ 1630.051153][ T5904] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1630.073021][T17442] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1630.084528][T17442] usb 9-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1630.104218][ T5904] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 83 [ 1630.125009][T17442] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.133481][ T5904] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 3 [ 1630.160002][T17442] usb 9-1: config 0 descriptor?? [ 1630.173371][ T5904] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1630.234422][ T5904] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 84 [ 1630.267208][ T5904] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 4 [ 1630.441832][ T5904] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1630.462252][ T5904] usb 10-1: USB disconnect, device number 17 [ 1630.501214][ T5904] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1630.524754][ T5904] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1630.545379][ T5904] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1630.559195][ T5904] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1630.593845][ T5904] keyspan 10-1:0.11: device disconnected [ 1630.636176][T28975] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6163'. [ 1630.650764][T28975] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6163'. [ 1630.670908][T17442] kye 0003:0458:5013.005F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1630.693478][T17442] kye 0003:0458:5013.005F: unknown main item tag 0x7 [ 1630.705718][T17442] kye 0003:0458:5013.005F: hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.8-1/input0 [ 1630.748330][T17442] kye 0003:0458:5013.005F: tablet-enabling feature report not found [ 1630.756574][T27772] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1630.789624][T17442] kye 0003:0458:5013.005F: tablet enabling failed [ 1630.897876][T17442] usb 9-1: USB disconnect, device number 30 [ 1630.922341][T27772] usb 3-1: Using ep0 maxpacket: 8 [ 1630.953678][T27772] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1630.985452][T27772] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1631.003875][T27772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.013254][T21753] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1631.029871][T27772] usb 3-1: config 0 descriptor?? [ 1631.067034][T27772] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22 [ 1631.198510][T21753] usb 2-1: Using ep0 maxpacket: 8 [ 1631.209784][T21753] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1631.227861][T21753] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1631.240772][T21753] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1631.246775][T29010] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6173'. [ 1631.251604][T21753] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1631.275077][T21753] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1631.290226][T21753] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1631.309400][T21753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.314778][T28992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1631.347951][T28992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1631.545295][T29018] fuse: Bad value for 'fd' [ 1631.555996][T21753] usb 2-1: usb_control_msg returned -32 [ 1631.564661][T21753] usbtmc 2-1:16.0: can't read capabilities [ 1631.634755][T29021] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6175'. [ 1631.647754][T29021] SET target dimension over the limit! [ 1631.868650][T29023] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6177'. [ 1631.914847][T29023] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1632.629029][T29030] usbtmc 2-1:16.0: usb_clear_halt returned -32 [ 1633.425661][ T5904] usb 3-1: USB disconnect, device number 118 [ 1633.889069][T29052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6184'. [ 1633.889743][T29051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.905810][T29051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1634.314453][T29051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1634.458768][T29051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1635.457390][T29052] geneve2: entered promiscuous mode [ 1635.462936][T29052] geneve2: entered allmulticast mode [ 1635.490120][ T5904] usb 2-1: USB disconnect, device number 5 [ 1635.837784][T29071] x_tables: duplicate underflow at hook 2 [ 1635.982138][ T5904] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1636.073480][T17442] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1636.137327][ T30] kauditd_printk_skb: 196 callbacks suppressed [ 1636.137348][ T30] audit: type=1326 audit(1761152891.293:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29078 comm="syz.1.6193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b2d78efc9 code=0x0 [ 1636.186422][ T5904] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1636.196851][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.217790][ T5904] usb 9-1: config 0 descriptor?? [ 1636.254403][T17442] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1636.277090][T17442] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1636.296682][ T5904] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1636.326510][T17442] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1636.356600][T17442] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1636.394644][T17442] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1636.423013][T17442] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1636.432807][T17442] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1636.464883][T17442] usb 3-1: Product: syz [ 1636.480548][T17442] usb 3-1: Manufacturer: syz [ 1636.537641][T17442] cdc_wdm 3-1:1.0: skipping garbage [ 1636.560473][T17442] cdc_wdm 3-1:1.0: skipping garbage [ 1636.667858][T17442] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1636.678190][T17442] cdc_wdm 3-1:1.0: Unknown control protocol [ 1636.860938][T29064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1636.871427][T29064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1636.904155][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1636.910830][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1636.920834][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1636.927468][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1636.937484][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1636.944155][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1636.950657][ T43] usb 3-1: USB disconnect, device number 119 [ 1636.956961][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1636.956991][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1636.957011][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1637.207945][ T5904] usb 9-1: USB disconnect, device number 31 [ 1637.242977][T29097] dlm: non-version read from control device 4 [ 1637.271023][T29097] netlink: 'syz.1.6197': attribute type 9 has an invalid length. [ 1637.529349][T29100] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1637.599557][T29100] bond2 (unregistering): Released all slaves [ 1638.422617][T21754] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1638.493393][ T5920] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1638.592821][T21754] usb 9-1: Using ep0 maxpacket: 32 [ 1638.610033][T21754] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.631771][T21754] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 7 [ 1638.644714][T21754] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1638.664224][ T5920] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1638.695777][T21754] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.704336][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.716646][T21754] usb 9-1: Product: syz [ 1638.730439][T21754] usb 9-1: Manufacturer: syz [ 1638.739299][ T5920] usb 3-1: Product: syz [ 1638.748379][T21754] usb 9-1: SerialNumber: syz [ 1638.755915][ T5920] usb 3-1: Manufacturer: syz [ 1638.771317][ T5920] usb 3-1: SerialNumber: syz [ 1638.786981][T21754] usb 9-1: config 0 descriptor?? [ 1638.827194][ T5920] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1638.859296][T21754] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1639.932633][ T5920] usb 3-1: USB disconnect, device number 120 [ 1639.949546][T21754] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1639.962468][T21754] ath9k_htc: Failed to initialize the device [ 1639.991865][ T5920] usb 3-1: ath9k_htc: USB layer deinitialized [ 1640.839897][T29156] netlink: 'syz.7.6214': attribute type 3 has an invalid length. [ 1640.877986][T29156] netlink: 'syz.7.6214': attribute type 2 has an invalid length. [ 1640.887454][T29156] netlink: 'syz.7.6214': attribute type 8 has an invalid length. [ 1640.895792][T29156] netlink: 'syz.7.6214': attribute type 9 has an invalid length. [ 1640.904670][T29156] netlink: 'syz.7.6214': attribute type 10 has an invalid length. [ 1640.912953][T29156] netlink: 'syz.7.6214': attribute type 11 has an invalid length. [ 1640.921067][T29156] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6214'. [ 1641.053020][ T5904] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1641.214306][ T5904] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1641.223515][ T5904] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1641.235585][T21754] usb 9-1: USB disconnect, device number 32 [ 1641.260935][ T5904] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1641.325093][ T5904] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1641.356331][ T5904] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1641.369959][ T5904] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1641.381781][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1641.393632][ T5904] usb 3-1: Product: syz [ 1641.397854][ T5904] usb 3-1: Manufacturer: syz [ 1641.432371][ T5904] cdc_wdm 3-1:1.0: skipping garbage [ 1641.453209][ T5904] cdc_wdm 3-1:1.0: skipping garbage [ 1641.474880][ T5904] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1641.501288][ T5904] cdc_wdm 3-1:1.0: Unknown control protocol [ 1641.735347][T29157] delete_channel: no stack [ 1642.026191][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1642.032846][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1642.039384][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1642.046000][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1642.052333][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1642.058965][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1642.065258][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1642.071892][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1642.078736][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1642.085364][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1642.092541][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1642.099203][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1642.106279][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1642.112916][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1642.119644][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1642.126362][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1642.132890][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1642.139532][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1642.145889][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1642.152493][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1642.159719][ T43] usb 3-1: USB disconnect, device number 121 [ 1642.165814][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1642.540496][T29178] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6219'. [ 1643.337561][ T5920] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1643.502453][ T5920] usb 10-1: Using ep0 maxpacket: 16 [ 1643.539528][ T5920] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1643.583921][ T5920] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1643.598663][ T5920] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.628090][ T5920] usb 10-1: Product: syz [ 1643.651649][ T5920] usb 10-1: Manufacturer: syz [ 1643.669436][ T5920] usb 10-1: SerialNumber: syz [ 1643.705904][ T5920] usb 10-1: config 0 descriptor?? [ 1643.733016][ T5920] hub 10-1:0.0: bad descriptor, ignoring hub [ 1643.751428][ T5920] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1643.791447][ T5920] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1643.950792][T29185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1644.005869][T29185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1644.071101][T28667] usb 10-1: USB disconnect, device number 18 [ 1644.242816][ T5920] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1644.370106][T29212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6229'. [ 1644.420875][T29212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1644.482437][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 1644.490075][ T5920] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1644.499085][ T5920] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1644.510984][ T5920] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1644.521015][ T5920] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1644.534906][ T5920] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1644.544283][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.552145][T17442] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1644.562343][ T5920] usb 2-1: Product: syz [ 1644.566583][ T5920] usb 2-1: Manufacturer: syz [ 1644.571214][ T5920] usb 2-1: SerialNumber: syz [ 1644.694262][T17442] usb 9-1: device descriptor read/64, error -71 [ 1644.764253][T29220] fuse: Unknown parameter '00000000000000000000006' [ 1644.775841][T29220] program syz.2.6232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1644.799790][ T5920] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 1644.812939][ T5920] usb 2-1: 2:1 : invalid channels 0 [ 1644.860610][ T5920] usb 2-1: USB disconnect, device number 6 [ 1644.911248][T28083] udevd[28083]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1644.942747][ T43] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1644.955531][T17442] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1644.982980][T29222] veth0_to_bridge: entered promiscuous mode [ 1645.085490][T29221] veth0_to_bridge: left promiscuous mode [ 1645.102336][T17442] usb 9-1: device descriptor read/64, error -71 [ 1645.114059][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1645.132813][ T43] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1645.145708][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.164558][ T43] usb 10-1: config 0 descriptor?? [ 1645.222780][T17442] usb usb9-port1: attempt power cycle [ 1645.522767][T28667] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1645.572096][T17442] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1645.646028][T29218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1645.665356][T29218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1645.686528][T28667] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1645.707253][T28667] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1645.730299][T28667] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.761595][T28667] usb 3-1: config 220 has no interface number 2 [ 1645.769915][T28667] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1645.804429][T28667] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1645.821919][T28667] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1645.853438][T28667] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1645.877183][T28667] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1645.926097][T28667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.963972][T28667] usb 3-1: Product: syz [ 1645.968400][T28667] usb 3-1: Manufacturer: syz [ 1645.992259][T28667] usb 3-1: SerialNumber: syz [ 1646.222557][ T43] keytouch 0003:0926:3333.0060: fixing up Keytouch IEC report descriptor [ 1646.236513][ T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0060/input/input127 [ 1646.266568][T17442] usb 9-1: device descriptor read/8, error -71 [ 1646.327740][T28667] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1646.342395][T28667] uvcvideo 3-1:220.0: No valid video chain found. [ 1646.349238][T28667] usb 3-1: selecting invalid altsetting 0 [ 1646.364005][T28667] usb 3-1: selecting invalid altsetting 0 [ 1646.370037][T28667] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1646.399748][T28667] usb 3-1: USB disconnect, device number 122 [ 1646.413051][ T43] keytouch 0003:0926:3333.0060: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 1646.522033][T17442] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1646.545934][T17442] usb 9-1: device descriptor read/8, error -71 [ 1646.672599][T17442] usb usb9-port1: unable to enumerate USB device [ 1647.148261][T29243] cgroup: fork rejected by pids controller in /syz1 [ 1647.822657][T17442] usb 9-1: new full-speed USB device number 37 using dummy_hcd [ 1647.852580][ T43] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1647.856528][T21754] usb 10-1: USB disconnect, device number 19 [ 1648.034256][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 1648.045682][T17442] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.091363][ T43] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a5, bcdDevice=eb.4c [ 1648.206859][T17442] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1648.222046][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.239656][T17442] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1648.271093][ T43] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1648.287252][T17442] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.302614][T17442] usb 9-1: config 0 descriptor?? [ 1648.316871][T17442] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1648.323864][ T43] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1648.331344][ T43] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1648.345794][T17442] dvb-usb: bulk message failed: -22 (3/0) [ 1648.365084][T17442] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1648.377959][T17442] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1648.483270][ T43] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1648.504508][T17442] usb 9-1: media controller created [ 1648.531217][ T43] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1648.568680][T17442] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1649.050083][T29937] program syz.9.6245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1649.077164][ T43] usb 3-1: dvb_usb_v2: found a 'Terratec H7 Rev.4' in warm state [ 1649.242440][ T43] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1649.565694][T17442] dvb-usb: bulk message failed: -22 (6/0) [ 1649.590342][T17442] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1649.603154][ T43] dvbdev: DVB: registering new adapter (Terratec H7 Rev.4) [ 1649.633826][T17442] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input128 [ 1649.649478][ T43] usb 3-1: media controller created [ 1649.667728][ T43] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1649.688935][ T43] usb 3-1: dvb_usb_v2: MAC address: 00:00:00:00:00:00 [ 1649.697264][T17442] dvb-usb: schedule remote query interval to 150 msecs. [ 1649.727047][T17442] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1649.787439][T17442] usb 9-1: USB disconnect, device number 37 [ 1649.810380][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. Stopping sshd: [ 1650.137449][T17442] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1650.336341][ T43] usb 3-1: USB disconnect, device number 123 stopped /usr/sbin/sshd (pid 5587) OK [ 1650.697991][T30074] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1650.720436][T30074] syzkaller1: linktype set to 32 [ 1650.906239][T30082] random: crng reseeded on system resumption Stopping crond: stopped /usr/sbin/crond (pid 5573) OK Stopping dhcpcd... [ 1652.733204][T30115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6258'. [ 1652.804732][T30115] netlink: 'syz.2.6258': attribute type 4 has an invalid length. stopped /sbin/dhcpcd (pid 5494) Stopping network: [ 1654.379058][T30141] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6264'. [ 1655.084012][ T5904] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1655.402131][ T43] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1655.484502][ T5904] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1655.566225][ T5904] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1655.662478][ T43] usb 10-1: Using ep0 maxpacket: 32 [ 1655.672029][ T5904] usb 9-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1655.721290][ T43] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 173, changing to 7 [ 1655.732650][T17442] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1655.773272][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.802486][ T43] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1655.845012][ T5904] usb 9-1: config 0 descriptor?? [ 1655.862681][ T43] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1655.862734][T30163] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6269'. [ 1655.902276][ T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.916203][T30163] netlink: 'syz.7.6269': attribute type 4 has an invalid length. [ 1655.942559][ T43] usb 10-1: Product: အ筷钌䗸춘벾ç–ﹲ貓븭鶣藰䚱ï«á¸°é„é £æ”䜇蕼郺矋Ẳ漊౓Ï鼘⻘쎩滽Ჸ徑ì³î‘˜ëº¬è™ŒÕ§ç‡ˆÒŒé•–뢿렺퀳ﬨ۞ᵡ毢奀ïŽï··î£‰í‘Ÿë²¹ë½½î¦°ì¾¾ã‘鑃ëŠî³–霓é“먉밚Ⴣߩ䱽꡷๻㻚⒥邺퀚鰬ëµÈ誜먲ᣜ뼈å¬èµŒç‚Çžé³ëœ·á®­ã›¥ëˆºá¡¹à´¤êµ¶æ¶Œêº«ê½¥íŒ½×£ê­£å£”á¤ç€•æ ¼í–‘æŒ´êŸŠã —è‚ [ 1655.975290][ C1] vkms_vblank_simulate: vblank timer overrun [ 1656.035865][T17442] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1656.044310][ T43] usb 10-1: Manufacturer: ì€à²“゘ٻᓭ诸밄è¿âº¥ì¨›à©¨á“‡î‘†îº§æ¡¥äµ²å˜ã”œãœ°æƒ¦ë …衄繆葬ﳧﻱ딙⮙ê±ç¶£â€è¹°æ½ºê´¤ë“‘♒膭ོ [ 1656.060437][ T43] usb 10-1: SerialNumber: 悔誊衴瘝籞ꪗëµæ‰²â ¯é”µè‹ã¾šç¼³à­„啜⒖밺緵誱ऊᚴ렧ã…淔唌ï™æ©ì¨œç†šÉ‹è²¼êžºà¯„äªäŠ‡à¾ä ‚ä½æ¯»ì·¨î­‰à­§â³ è©Žç‡ê¶â›’㺠酦슊샊ӯ涋痳ⷡ箜홎洫ä§éš·é°äªä©¨ [ 1656.060674][T17442] usb 2-1: not running at top speed; connect to a high speed hub [ 1656.128983][T17442] usb 2-1: config 129 has an invalid interface number: 135 but max is 1 [ 1656.147499][T17442] usb 2-1: config 129 has no interface number 1 [ 1656.155012][T17442] usb 2-1: config 129 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1656.196855][T17442] usb 2-1: config 129 interface 135 has no altsetting 0 [ 1656.244896][T17442] usb 2-1: config 129 interface 0 has no altsetting 0 [ 1656.275656][T17442] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 1656.286006][T17442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.346556][T17442] usb 2-1: Product: syz [ 1656.367179][T17442] usb 2-1: Manufacturer: syz [ 1656.392358][T17442] usb 2-1: SerialNumber: syz [ 1656.535698][ T43] usb 10-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1656.720393][T17442] au0828: au0828: Device initialization failed. OK [ 1656.748641][ T43] usb 10-1: USB disconnect, device number 20 [ 1656.759007][T17442] au0828: au0828: Device must be connected to a high-speed USB 2.0 port. [ 1656.857679][T17442] usb 2-1: USB disconnect, device number 7 [ 1656.956247][T28083] udevd[28083]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1657.168617][ T30] audit: type=1326 audit(1761152912.323:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30183 comm="syz.9.6272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571c18efc9 code=0x7ffc0000 [ 1657.194647][ C1] vkms_vblank_simulate: vblank timer overrun Stopping iptables: [ 1657.510709][ T30] audit: type=1326 audit(1761152912.383:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30183 comm="syz.9.6272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571c18efc9 code=0x7ffc0000 [ 1657.536687][ C1] vkms_vblank_simulate: vblank timer overrun [ 1657.675747][ T30] audit: type=1326 audit(1761152912.393:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30183 comm="syz.9.6272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f571c18efc9 code=0x7ffc0000 [ 1657.815044][ T30] audit: type=1326 audit(1761152912.593:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30183 comm="syz.9.6272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571c18efc9 code=0x7ffc0000 [ 1657.837612][ C1] vkms_vblank_simulate: vblank timer overrun [ 1657.877032][T30196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1657.900495][ T30] audit: type=1326 audit(1761152912.593:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30183 comm="syz.9.6272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571c18efc9 code=0x7ffc0000 [ 1657.923039][ C1] vkms_vblank_simulate: vblank timer overrun [ 1658.010197][ T5904] usbhid 9-1:0.0: can't add hid device: -71 [ 1658.018203][ T5904] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1658.036009][ T5904] usb 9-1: USB disconnect, device number 38 [ 1658.135073][ T30] audit: type=1326 audit(1761152912.593:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30187 comm="syz.9.6272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f571c1c1885 code=0x7ffc0000 [ 1658.157646][ C1] vkms_vblank_simulate: vblank timer overrun [ 1658.164037][ T43] usb 2-1: new high-speed USB device number 8 using dummy_hcd OK [ 1658.236812][ T30] audit: type=1326 audit(1761152912.593:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30183 comm="syz.9.6272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f571c18efc9 code=0x7ffc0000 [ 1658.312647][ T30] audit: type=1326 audit(1761152912.743:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30187 comm="syz.9.6272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f571c18efc9 code=0x7ffc0000 Stopping system message bus: [ 1658.373261][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1658.387961][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1658.406872][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1658.432442][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1658.483672][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1658.529266][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.575605][ T43] usb 2-1: config 0 descriptor?? [ 1658.819233][ T43] hdpvr 2-1:0.0: firmware version 0x69 dated Ì«SL’Ù¸Öi:¸hÏúŽ·^îÔÉJÜ€ÀݤDšjñu°íÿ7~½Ô? [ 1658.870971][ T43] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 1659.245816][ T5904] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1659.422334][ T5904] usb 10-1: Using ep0 maxpacket: 16 [ 1659.445089][ T5904] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1659.477062][ T5904] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.534320][ T5904] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1659.595455][ T5904] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1659.643754][ T5904] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.686330][ T5904] usb 10-1: Product: syz [ 1659.690697][ T5904] usb 10-1: Manufacturer: syz [ 1659.712923][T30230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.731691][ T5904] usb 10-1: SerialNumber: syz [ 1659.782892][T30230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 done [ 1660.480794][ T5904] usb 10-1: 0:2 : does not exist [ 1660.529404][ T5904] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1660.559312][ T5904] usb 10-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1660.596908][ T5904] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1660.665036][ T5904] usb 10-1: 5:0: failed to get current value for ch 1 (-22) [ 1660.831744][ T5904] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1660.905347][ T5904] usb 10-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1661.000344][ T5904] usb 10-1: USB disconnect, device number 21 [ 1661.224400][T30249] i2c i2c-0: Invalid block read size 255 [ 1661.498967][ T43] hdpvr 2-1:0.0: Could not setup controls [ 1661.558873][ T43] hdpvr 2-1:0.0: registering videodev failed [ 1661.683218][ T43] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 1661.739753][ T43] usb 2-1: USB disconnect, device number 8 [ 1662.502058][ T5920] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1662.512747][T28667] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1662.690562][T28667] usb 3-1: Using ep0 maxpacket: 8 [ 1662.710804][ T5920] usb 2-1: config 0 has an invalid interface number: 197 but max is 0 [ 1662.750259][T28667] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.761718][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.780238][T28667] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1662.842868][ T5920] usb 2-1: config 0 has no interface number 0 [ 1662.849064][ T5920] usb 2-1: config 0 interface 197 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1662.875593][T28667] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1662.917135][T28667] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1662.951624][ T5920] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 1662.964204][T30287] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6293'. [ 1662.973549][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.981767][ T5920] usb 2-1: Product: syz [ 1662.988208][T28667] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1662.998321][T28667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.012511][ T5920] usb 2-1: Manufacturer: syz [ 1663.020036][ T5920] usb 2-1: SerialNumber: syz [ 1663.031765][T30287] netlink: 'syz.7.6293': attribute type 4 has an invalid length. [ 1663.034499][T28667] usbtmc 3-1:16.0: bulk endpoints not found [ 1663.065070][ T5920] usb 2-1: config 0 descriptor?? [ 1664.013552][T28163] ------------[ cut here ]------------ [ 1664.019643][T28163] WARNING: CPU: 1 PID: 28163 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0xff/0x290 [ 1664.031260][T28163] Modules linked in: [ 1664.036530][T28163] CPU: 1 UID: 0 PID: 28163 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 1664.046300][T28163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1664.056465][T28163] Workqueue: hci5 hci_conn_timeout [ 1664.061642][T28163] RIP: 0010:hci_conn_timeout+0xff/0x290 [ 1664.067609][T28163] Code: 48 89 df e8 53 1d 09 00 eb 07 e8 dc 55 7c f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 e7 c4 fe ff e8 c2 55 7c f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 1664.087811][ C1] vkms_vblank_simulate: vblank timer overrun [ 1664.094943][T28163] RSP: 0018:ffffc90003f97a30 EFLAGS: 00010293 [ 1664.101067][T28163] RAX: ffffffff8a43ae2e RBX: ffff888048de0000 RCX: ffff8880230b1e40 [ 1664.109221][T28163] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1664.117414][T28163] RBP: 00000000ffffffff R08: ffff888048de0013 R09: 1ffff110091bc002 [ 1664.125594][T28163] R10: dffffc0000000000 R11: ffffed10091bc003 R12: dffffc0000000000 [ 1664.133635][T28163] R13: ffff888052113818 R14: ffff888048de0948 R15: ffff888048de0010 [ 1664.141684][T28163] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 1664.150708][T28163] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1664.157628][T28163] CR2: 00007f68c08f5212 CR3: 00000000302ba000 CR4: 00000000003526f0 [ 1664.165698][T28163] Call Trace: [ 1664.169049][T28163] [ 1664.172199][T28163] ? process_scheduled_works+0x9ef/0x17b0 [ 1664.177967][T28163] process_scheduled_works+0xae1/0x17b0 [ 1664.183651][T28163] ? __pfx_process_scheduled_works+0x10/0x10 [ 1664.189709][T28163] worker_thread+0x8a0/0xda0 [ 1664.194404][T28163] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1664.200783][T28163] ? __kthread_parkme+0x7b/0x200 [ 1664.205843][T28163] kthread+0x711/0x8a0 [ 1664.209964][T28163] ? __pfx_worker_thread+0x10/0x10 [ 1664.215169][T28163] ? __pfx_kthread+0x10/0x10 [ 1664.219833][T28163] ? _raw_spin_unlock_irq+0x23/0x50 [ 1664.225174][T28163] ? lockdep_hardirqs_on+0x9c/0x150 [ 1664.230402][T28163] ? __pfx_kthread+0x10/0x10 [ 1664.235095][T28163] ret_from_fork+0x4bc/0x870 [ 1664.239738][T28163] ? __pfx_ret_from_fork+0x10/0x10 [ 1664.244945][T28163] ? __switch_to_asm+0x39/0x70 [ 1664.249738][T28163] ? __switch_to_asm+0x33/0x70 [ 1664.254995][T28163] ? __pfx_kthread+0x10/0x10 [ 1664.259635][T28163] ret_from_fork_asm+0x1a/0x30 [ 1664.264501][T28163] [ 1664.267560][T28163] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1664.274892][T28163] CPU: 1 UID: 0 PID: 28163 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 1664.284459][T28163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1664.294535][T28163] Workqueue: hci5 hci_conn_timeout [ 1664.299709][T28163] Call Trace: [ 1664.303025][T28163] [ 1664.305976][T28163] dump_stack_lvl+0x99/0x250 [ 1664.310601][T28163] ? __asan_memcpy+0x40/0x70 [ 1664.315227][T28163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1664.320460][T28163] ? __pfx__printk+0x10/0x10 [ 1664.325103][T28163] vpanic+0x237/0x6d0 [ 1664.329123][T28163] ? __pfx_vpanic+0x10/0x10 [ 1664.333759][T28163] panic+0xb9/0xc0 [ 1664.337553][T28163] ? __pfx_panic+0x10/0x10 [ 1664.342077][T28163] __warn+0x31b/0x4b0 [ 1664.346099][T28163] ? hci_conn_timeout+0xff/0x290 [ 1664.351146][T28163] ? hci_conn_timeout+0xff/0x290 [ 1664.356128][T28163] report_bug+0x2be/0x4f0 [ 1664.360492][T28163] ? hci_conn_timeout+0xff/0x290 [ 1664.365464][T28163] ? hci_conn_timeout+0xff/0x290 [ 1664.370432][T28163] ? hci_conn_timeout+0x101/0x290 [ 1664.375485][T28163] handle_bug+0x84/0x160 [ 1664.379843][T28163] exc_invalid_op+0x1a/0x50 [ 1664.384390][T28163] asm_exc_invalid_op+0x1a/0x20 [ 1664.389276][T28163] RIP: 0010:hci_conn_timeout+0xff/0x290 [ 1664.394864][T28163] Code: 48 89 df e8 53 1d 09 00 eb 07 e8 dc 55 7c f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 e7 c4 fe ff e8 c2 55 7c f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 1664.414500][T28163] RSP: 0018:ffffc90003f97a30 EFLAGS: 00010293 [ 1664.420599][T28163] RAX: ffffffff8a43ae2e RBX: ffff888048de0000 RCX: ffff8880230b1e40 [ 1664.428591][T28163] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1664.436596][T28163] RBP: 00000000ffffffff R08: ffff888048de0013 R09: 1ffff110091bc002 [ 1664.444602][T28163] R10: dffffc0000000000 R11: ffffed10091bc003 R12: dffffc0000000000 [ 1664.452648][T28163] R13: ffff888052113818 R14: ffff888048de0948 R15: ffff888048de0010 [ 1664.460663][T28163] ? hci_conn_timeout+0xfe/0x290 [ 1664.465654][T28163] ? process_scheduled_works+0x9ef/0x17b0 [ 1664.471435][T28163] process_scheduled_works+0xae1/0x17b0 [ 1664.477179][T28163] ? __pfx_process_scheduled_works+0x10/0x10 [ 1664.483222][T28163] worker_thread+0x8a0/0xda0 [ 1664.487842][T28163] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1664.494216][T28163] ? __kthread_parkme+0x7b/0x200 [ 1664.499189][T28163] kthread+0x711/0x8a0 [ 1664.503300][T28163] ? __pfx_worker_thread+0x10/0x10 [ 1664.508444][T28163] ? __pfx_kthread+0x10/0x10 [ 1664.513120][T28163] ? _raw_spin_unlock_irq+0x23/0x50 [ 1664.518390][T28163] ? lockdep_hardirqs_on+0x9c/0x150 [ 1664.523629][T28163] ? __pfx_kthread+0x10/0x10 [ 1664.528265][T28163] ret_from_fork+0x4bc/0x870 [ 1664.532886][T28163] ? __pfx_ret_from_fork+0x10/0x10 [ 1664.538034][T28163] ? __switch_to_asm+0x39/0x70 [ 1664.542814][T28163] ? __switch_to_asm+0x33/0x70 [ 1664.547597][T28163] ? __pfx_kthread+0x10/0x10 [ 1664.552239][T28163] ret_from_fork_asm+0x1a/0x30 [ 1664.557116][T28163] [ 1664.560714][T28163] Kernel Offset: disabled [ 1664.565050][T28163] Rebooting in 86400 seconds..