last executing test programs: 2m59.435550324s ago: executing program 4 (id=1076): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c009900fb"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000440)=@ethtool_dump={0x3f, 0x4, 0xba2}}) socket$l2tp(0x2, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{&(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000001940), 0x0, &(0x7f00000019c0)=""/28, 0x1c}, 0x3ff}, {{&(0x7f0000001a00)=@phonet, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/172, 0xac}], 0x1, &(0x7f0000001b80)=""/186, 0xba}, 0x7fff}, {{&(0x7f0000001c40)=@sco, 0x80, &(0x7f0000002300)=[{&(0x7f0000001cc0)=""/127, 0x7f}, {&(0x7f0000001d40)=""/127, 0x7f}, {&(0x7f0000001dc0)=""/236, 0xec}, {&(0x7f0000001ec0)=""/203, 0xcb}, {&(0x7f0000002000)=""/139, 0x8b}, {&(0x7f00000020c0)=""/212, 0xd4}, {&(0x7f0000002800)=""/247, 0xf7}, {&(0x7f00000022c0)=""/17, 0x11}], 0x8, &(0x7f0000002380)=""/152, 0x98}, 0x3}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002440)=""/16, 0x10}, {&(0x7f0000002480)=""/151, 0x97}, {&(0x7f0000002540)=""/173, 0xad}, {&(0x7f00000002c0)=""/143, 0x8f}], 0x4}, 0x6}], 0x4, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$video4linux(&(0x7f0000000480), 0xd, 0x123002) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000240)={0x1, 0x0, {0x7, 0xfffff962, 0x3001, 0x0, 0x7, 0x0, 0x2, 0x1}}) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x42, 0x1ff) r3 = inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="7b0a000000000000620a00000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23) inotify_add_watch(r3, &(0x7f0000000040)='./file1\x00', 0x7f7) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000580)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36592f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0a", 0x2}], 0x1}}], 0x1, 0x4000000) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) 2m58.374522141s ago: executing program 4 (id=1085): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4000010}, 0x4000038) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2062) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1fc}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120110028de8e820c6057990a6870102030109021200010809000909044502000e010004ce938b7079af36d5a878dd"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000180)=@string={0x2}}, {0x0, 0x0}, {0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB]}, {0x0, 0x0}]}) syz_usb_control_io$uac2(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc1, @lang_id={0x0, 0x3, 0x41c}}}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00030400000003f72004"]}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000002280)={0x14, 0x0, &(0x7f0000002200)=ANY=[@ANYBLOB="00030203c9000000"]}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) stat(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xffffffffffffffff, 0x0, 0x8) tkill(0x0, 0x7) 2m57.15882281s ago: executing program 4 (id=1088): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020100000e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa000000000000000002001300", @ANYRES32=r0], 0x70}, 0x1, 0x0, 0x0, 0xffffff80}, 0x0) 2m56.668080625s ago: executing program 4 (id=1090): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sync() sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x7a, @mcast1, @mcast2={0xff, 0x5}, 0x8, 0x8, 0xe3e1, 0xcfe}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb}}}}]}, 0x40}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2b) r8 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$uac2(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 2m52.325895334s ago: executing program 4 (id=1099): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000000101ed0c0000000000000000020000030c00018005000340"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x48000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701eefffffffcdbdf25047c0000080001800400ab80"], 0x1c}}, 0xc000) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x51, 0x5, 0x100, 0x1, @remote, @local, 0x7800, 0x40, 0x6, 0xd}}) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@id={0x1e, 0x3, 0xf39eff1550bed52c, {0x4e23, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x1d, 0x0, &(0x7f0000000480)) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000040)={0x2, 0x9a}) bind$tipc(r4, &(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000040000073013000000000199500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 2m51.910828061s ago: executing program 4 (id=1100): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r0, &(0x7f0000001300)='7', 0x1) write(r0, &(0x7f0000000000)="56844b1215c451792d120a02cf2333e8bc2b6e02c8db3a295d037f8ff0adf086b9bed41529396dd66b5a3a0c5510ccf1a1f6c57fbff956b0d5cc0b9d468a448f0c835958106550566c782b87645f77964bd450521a339e90efffef50c35c899d22b1b959a092c7efb4c1c56405d52bc4d9ed0939c9f5a2da5e27b7f9d5b1d25b60543c38c203dfddce0ee92e89f16da2734b42d33ff177e0959b223951bb325bdbc9d4e67af840407e00c01ec086d87ac58010120504c925348174a622f8c4ec79870ca8e3e67c", 0xc7) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) (async) write$char_usb(r0, &(0x7f0000001300)='7', 0x1) (async) write(r0, &(0x7f0000000000)="56844b1215c451792d120a02cf2333e8bc2b6e02c8db3a295d037f8ff0adf086b9bed41529396dd66b5a3a0c5510ccf1a1f6c57fbff956b0d5cc0b9d468a448f0c835958106550566c782b87645f77964bd450521a339e90efffef50c35c899d22b1b959a092c7efb4c1c56405d52bc4d9ed0939c9f5a2da5e27b7f9d5b1d25b60543c38c203dfddce0ee92e89f16da2734b42d33ff177e0959b223951bb325bdbc9d4e67af840407e00c01ec086d87ac58010120504c925348174a622f8c4ec79870ca8e3e67c", 0xc7) (async) 2m36.414233328s ago: executing program 32 (id=1100): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r0, &(0x7f0000001300)='7', 0x1) write(r0, &(0x7f0000000000)="56844b1215c451792d120a02cf2333e8bc2b6e02c8db3a295d037f8ff0adf086b9bed41529396dd66b5a3a0c5510ccf1a1f6c57fbff956b0d5cc0b9d468a448f0c835958106550566c782b87645f77964bd450521a339e90efffef50c35c899d22b1b959a092c7efb4c1c56405d52bc4d9ed0939c9f5a2da5e27b7f9d5b1d25b60543c38c203dfddce0ee92e89f16da2734b42d33ff177e0959b223951bb325bdbc9d4e67af840407e00c01ec086d87ac58010120504c925348174a622f8c4ec79870ca8e3e67c", 0xc7) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) (async) write$char_usb(r0, &(0x7f0000001300)='7', 0x1) (async) write(r0, &(0x7f0000000000)="56844b1215c451792d120a02cf2333e8bc2b6e02c8db3a295d037f8ff0adf086b9bed41529396dd66b5a3a0c5510ccf1a1f6c57fbff956b0d5cc0b9d468a448f0c835958106550566c782b87645f77964bd450521a339e90efffef50c35c899d22b1b959a092c7efb4c1c56405d52bc4d9ed0939c9f5a2da5e27b7f9d5b1d25b60543c38c203dfddce0ee92e89f16da2734b42d33ff177e0959b223951bb325bdbc9d4e67af840407e00c01ec086d87ac58010120504c925348174a622f8c4ec79870ca8e3e67c", 0xc7) (async) 12.330761847s ago: executing program 5 (id=1625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xe, 0x7ffffffe}]}) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0], &(0x7f0000000100)=0xfffffffffffffde4, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x7) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0xe1, 0x0, 0xffffffffffffffff}]}) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x25dfdbff, {0x2, 0x0, 0x20, 0x1, 0x0, 0x0, 0x0, 0x2c43f19b53dfe4bb, 0x2000}, [@RTA_DPORT={0x6, 0x1d, 0x4e23}, @RTA_DST={0x8, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) recvfrom$inet6(r6, 0x0, 0x0, 0x100, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000100)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000b80)={0x44, &(0x7f00000008c0)=ANY=[@ANYBLOB="010c00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r5, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000080)={0x20, 0x5, 0x27, "b857cbd1986c86f0a9dd11d922a562dbb1ea02d204fc6416abce4971dc06220355f1d6f4da3cd9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x3, @pix={0x0, 0x2, 0x33424752, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES8=r7], 0x188}}, 0x0) 9.91489064s ago: executing program 3 (id=1632): syz_usb_connect(0x5, 0x3d, &(0x7f0000000500)=ANY=[@ANYBLOB="12011001c2bc7710fd0b280189ec0102030109022b0001350720ce0904f00002ff01000d0705cbbe1b820f09050f"], 0x0) (async) syz_usb_connect(0x5, 0x3d, &(0x7f0000000500)=ANY=[@ANYBLOB="12011001c2bc7710fd0b280189ec0102030109022b0001350720ce0904f00002ff01000d0705cbbe1b820f09050f"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @hoplimit={{0x14}}, @hopopts={{0x80, 0x29, 0x36, {0x5e, 0xc, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x966, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}], 0xc8}}], 0x1, 0x810) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) membarrier(0x10, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) accept4(r2, 0x0, 0x0, 0x800) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x40100, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f00000002c0)={0x5, 0x0, &(0x7f0000009000/0x3000)=nil}) (async) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f00000002c0)={0x5, 0x0, &(0x7f0000009000/0x3000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x20, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3, 0x6, 0x8, '\x00', 0x2000002}) (async) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3, 0x6, 0x8, '\x00', 0x2000002}) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8802, 0x0) 9.240180543s ago: executing program 5 (id=1634): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$zero(0xffffffffffffff9c, &(0x7f0000006800), 0x8000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x3b, 0x1, {{0x3d1, 0x7, 0x20000000, 0x6, 0x6}, 0x7b}}]}, {0x4f}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x84}}, 0x2) 9.02249777s ago: executing program 5 (id=1635): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = io_uring_setup(0x7983, &(0x7f0000000040)={0x0, 0x400c89d, 0x400, 0xd, 0x800c0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r1], 0x88, 0x4000081}, 0x20008000) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x3, &(0x7f0000000080)=0x5, 0x6, 0x1) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x4}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8.495775353s ago: executing program 2 (id=1640): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r3, &(0x7f0000000900)=[{&(0x7f0000000600)=""/137, 0x89}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r1, r0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r5, &(0x7f00000006c0)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0xc}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="fcebdc", 0x3}], 0x1}}], 0x2, 0xc040) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="bf4b6a", 0x3}], 0x1}}], 0x1, 0x1) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x48, 0x0, &(0x7f0000000cc0)=[@reply={0x40406301, {0x8000001, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @exit_looper], 0x0, 0x0, 0x0}) r7 = socket(0x6, 0x2, 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r8, &(0x7f0000002bc0)=[{{&(0x7f0000002900)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe255}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002940)='B', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x30}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000140)="b5", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0xffffffff, @local, 0x4}, 0x1c, &(0x7f00000006c0)=[{&(0x7f00000001c0)="d7", 0x1}], 0x1}}], 0x3, 0x20044040) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r9) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@RTA_MARK={0x8, 0x10, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 8.365533144s ago: executing program 2 (id=1641): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x200, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xff}]}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000440)={0x2, @sdr={0xa0363159, 0x1}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x7, 0x1, 0x41, 0x6, 0xfc, 0x8, 0xe, 0x3, 0xb, 0x7e, 0xd, 0xea, 0x44, 0x48, 0xae, 0x4}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r0], 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.386536238s ago: executing program 0 (id=1642): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000000c0)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="001306000000ec19d02303f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "4d96197c5834d8ec", "020d0c6fb50f783b7822d8209645d3dd", "c5893928", "ae0fd34d999570ec"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000080), 0x51) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000140)={0x8, 0x0, 0x2, 0x10, 0x4}) shutdown(r0, 0x1) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000440)={0x1, 0x0, @ioapic={0x10000, 0x7ff, 0x8, 0x7ff, 0x0, [{0x7, 0xff, 0x0, '\x00', 0x49}, {0x1, 0x9, 0x7, '\x00', 0x4}, {0x80, 0x0, 0x7f, '\x00', 0x2}, {0x5, 0xb, 0x0, '\x00', 0x2}, {0x3, 0x81, 0x3, '\x00', 0x7}, {0x1, 0x1, 0x3, '\x00', 0x7}, {0x9, 0x3, 0x6, '\x00', 0x6}, {0xd, 0x10, 0x9, '\x00', 0x3}, {0xd, 0x5}, {0x1e, 0x5, 0x7a, '\x00', 0xfb}, {0x40, 0x1, 0x5}, {0xe, 0x5, 0x3, '\x00', 0x7f}, {0x6, 0xf8, 0xd, '\x00', 0x30}, {0xe, 0x6, 0xae, '\x00', 0x9}, {0x10, 0x0, 0x80}, {0x4, 0x0, 0x7, '\x00', 0x40}, {0x1, 0x40, 0x1, '\x00', 0x4}, {0x4, 0x3, 0x1, '\x00', 0xb0}, {0x3, 0x6, 0x8, '\x00', 0x3d}, {0xfc, 0x1, 0xa, '\x00', 0x8c}, {0x4, 0x2, 0x1, '\x00', 0x9}, {0xf8, 0xc1, 0x3, '\x00', 0xf2}, {0x0, 0xff, 0x7, '\x00', 0xfc}, {0x8, 0x2, 0x0, '\x00', 0xa}]}}) 6.686504344s ago: executing program 3 (id=1643): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e00000/0x3000)=nil, 0x3000, &(0x7f0000000000)='/dev/adsp1\x00') r2 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4, 0x2, 0x8d, 0x4, 0x3, 0x6, 0x8, 0x19, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x3, 0x5, 0x8, 0x200}, [{0x4, 0x7, 0x6, 0x3, 0x9, 0x6, 0xffff, 0x5}, {0x6474e551, 0x8, 0x7, 0x3, 0x2, 0xc, 0x8, 0x7fffffff}, {0x6474e551, 0xd, 0x40, 0x6, 0xd2a5, 0x3049, 0x8000, 0x7}]}, 0x98) close(r2) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000e01000/0x1000)=nil, 0x1000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 6.603358079s ago: executing program 3 (id=1644): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32=0x0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r1 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000040)=ANY=[], 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r2) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000000)={0x44, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000884}, 0x40010) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x20, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x5) (async) syz_usb_disconnect(r1) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x53, 0xb5, 0x8, 0x46d, 0x896, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000480)={0x60, 0xe, 0x1, '_'}, 0x0, 0x0}) 5.750379272s ago: executing program 3 (id=1645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$zero(0xffffffffffffff9c, &(0x7f0000006800), 0x8000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x3b, 0x1, {{0x3d1, 0x7, 0x20000000, 0x6, 0x6}, 0x7b}}]}, {0x4f}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x84}}, 0x2) 5.734727898s ago: executing program 5 (id=1646): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xfc, 0x221000) r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) (async) unshare(0xe060400) r6 = memfd_create(0x0, 0x3) unshare(0x2c060000) rt_sigqueueinfo(0x0, 0x21, 0x0) (async) rt_sigqueueinfo(0x0, 0x21, 0x0) pread64(r2, &(0x7f0000000380)=""/140, 0x8c, 0x200000000000000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x36}, 0x0, [0x1688, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x5, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x36}, 0x0, [0x1688, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x5, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r7, &(0x7f0000000a80)=[{&(0x7f0000000240)=""/204, 0xcc}], 0x1, 0x9, 0x0) (async) preadv(r7, &(0x7f0000000a80)=[{&(0x7f0000000240)=""/204, 0xcc}], 0x1, 0x9, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) (async) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x390, 0xffffffff, 0x140, 0x140, 0x1f8, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr=0x40, @loopback, 0x0, 0x0, 'vxcan1\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xe0, 0x140, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@set={{0x40}, {{0x1, [0x5, 0x3, 0x2, 0x6, 0x3], 0x0, 0x2}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x1, 0x1, [0xd, 0x22, 0x39, 0x3, 0x2c, 0x4, 0x27, 0x2f, 0x3e, 0x34, 0x20, 0xc, 0xc, 0x2a, 0x3, 0x1a], 0x3, 0x7, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe, 'syz1\x00', {0x8}}}}, {{@ip={@private, @rand_addr=0x64010101, 0x0, 0x0, 'veth1_virt_wifi\x00', 'dvmrp0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/mnt\x00') setns(r8, 0x0) (async) setns(r8, 0x0) pwritev(r6, &(0x7f0000000a00)=[{&(0x7f0000000040)="d74ded4b490f6434e9f5ba1ad3", 0xd}, {&(0x7f00000001c0)="4ad5485d33599dfe0bc8212b7f340059a2b2f43b08d39911cec5d50a96fcb3470ead6116fc600ba3a5ffb3d3553f0d8b0ab065ea4e0603f893042a92554c4f415cf8cf14e27892e67d2c8013", 0x4c}, {&(0x7f0000000800)="b31a4cd116242b025e739d36fb432d4e86e7348c86028eda9768dc42e4199f0b1517e53fb93e1f48bec20025683e61fbcc3f69518830ee6c0887689d599aeff9f9ad3da5ea416f37ad53abc30836f4cf3497d852ef8e4c5128da3237370a480ab3bc711e8db09bc15cfd9be2549273a61637c4455263cb69e5e92c52e641a26ac3f2222d5b86414d091ee38ea243ae0159b5b5ed8e20a26964acfc47c8a3d69e1ef47ba7088c644047f8", 0xaa}, {&(0x7f00000008c0)="3c3ffaad9f16626a92d88093003e2ecadc2d0199f0f3ea7a05bc51e7a82aa3052d225de4cbfc0c52b00102bfb4bb03ecf0e52d19247733b5b231f7a2bef81d7d3bb0263cdb87d40eb477f0e408f51dd6ecfc205fd3909b651d9d2ab08fb77aaea29b7517659d179f51346927ad99fe4f65fdf9206dd9c97feda0c6b396e525f096ae73c7aebb386b49f02e019842b8ffe1dc67c66e370455bc0b5d35dc981756f6d81b1681d9620358b9a5c6210816da1473eb1eaf2278886e37de140b33a83e502d6f3b61c253ff2b2c36f0f6752db16a5e8fd23d157b93c231aebd5315623acc847ea91e38821b", 0xe8}, {&(0x7f00000009c0)}], 0x5, 0x1, 0x80000000) (async) pwritev(r6, &(0x7f0000000a00)=[{&(0x7f0000000040)="d74ded4b490f6434e9f5ba1ad3", 0xd}, {&(0x7f00000001c0)="4ad5485d33599dfe0bc8212b7f340059a2b2f43b08d39911cec5d50a96fcb3470ead6116fc600ba3a5ffb3d3553f0d8b0ab065ea4e0603f893042a92554c4f415cf8cf14e27892e67d2c8013", 0x4c}, {&(0x7f0000000800)="b31a4cd116242b025e739d36fb432d4e86e7348c86028eda9768dc42e4199f0b1517e53fb93e1f48bec20025683e61fbcc3f69518830ee6c0887689d599aeff9f9ad3da5ea416f37ad53abc30836f4cf3497d852ef8e4c5128da3237370a480ab3bc711e8db09bc15cfd9be2549273a61637c4455263cb69e5e92c52e641a26ac3f2222d5b86414d091ee38ea243ae0159b5b5ed8e20a26964acfc47c8a3d69e1ef47ba7088c644047f8", 0xaa}, {&(0x7f00000008c0)="3c3ffaad9f16626a92d88093003e2ecadc2d0199f0f3ea7a05bc51e7a82aa3052d225de4cbfc0c52b00102bfb4bb03ecf0e52d19247733b5b231f7a2bef81d7d3bb0263cdb87d40eb477f0e408f51dd6ecfc205fd3909b651d9d2ab08fb77aaea29b7517659d179f51346927ad99fe4f65fdf9206dd9c97feda0c6b396e525f096ae73c7aebb386b49f02e019842b8ffe1dc67c66e370455bc0b5d35dc981756f6d81b1681d9620358b9a5c6210816da1473eb1eaf2278886e37de140b33a83e502d6f3b61c253ff2b2c36f0f6752db16a5e8fd23d157b93c231aebd5315623acc847ea91e38821b", 0xe8}, {&(0x7f00000009c0)}], 0x5, 0x1, 0x80000000) 5.647037439s ago: executing program 3 (id=1647): getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000040)={0x18, r3}) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f00000001c0)={0x1, 0x4, 0x12, &(0x7f0000000080)=""/18}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000038, 0x3, 0x2a8, 0xe8, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x6, 0x5, 0x7f, 0x3, 0x2, 0x7, 0x4]}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [0x0, 0xffffffff], [0x0, 0x0, 0xff000000], 'veth1\x00', 'veth0_to_batadv\x00', {0x8499377069aa4b5f}, {}, 0x3a, 0x80, 0x4}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x7fffffff, 0xfffffffc, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r9, 0x4, 0x2400) read$FUSE(r9, &(0x7f0000000d00)={0x2020}, 0x2020) 5.044815091s ago: executing program 2 (id=1649): r0 = socket$xdp(0x2c, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x143002, 0x0) pwritev2(r0, &(0x7f0000000100), 0x0, 0x5408, 0xffffffff, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000140)={0xc, 0x0}) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x50}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x120000000}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x80}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x804) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x1, r2, 0x0, 0x1c000, 0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) copy_file_range(r3, &(0x7f0000000000)=0x10100000003fe, r0, 0x0, 0x6, 0x0) 4.431191824s ago: executing program 1 (id=1650): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="e4010000100001000000000000000000fc420000000000000000000000000000000000000000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1e4}}, 0x44840) 4.430262639s ago: executing program 1 (id=1651): mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x5, 0x493, 0x4) (async) mmap$panthor(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x1011, 0xffffffffffffffff, 0x650) (async) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x3, &(0x7f0000ffc000/0x3000)=nil, 0x1) r0 = userfaultfd(0x80000) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="46ff1c260f09400f21bc48b8ee000000000000000f23c80f21f8350c0050000f23f83e2e3e0f07b9800000c00f3235000800000f30b91c020000b84e2f3327ba000000000f30b9371001c0b808110000ba000000000f30260f1a94340300000066ba2000ed", 0x65}], 0x1, 0x4, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x7, 0x0, 0x2, 0x0, 0x1, 0x0, 0x9}, @efer={0x2, 0x2800}], 0x2) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0x6, 0xa00) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f0000000240)) (async) r3 = syz_io_uring_setup(0x5004, &(0x7f0000000340)={0x0, 0x2af6, 0x800, 0x1, 0x20b, 0x0, r2}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fea000/0x4000)=nil, 0x4000, 0xa, 0x40010, r3, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000004c0), r2) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000680)={'sit0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x890975da40de4e24, 0x80, 0x2, 0x8, {{0x1e, 0x4, 0x1, 0x9, 0x78, 0x68, 0x0, 0x5a, 0x2f, 0x0, @remote, @loopback, {[@timestamp={0x44, 0x20, 0xe7, 0x0, 0x8, [0x4, 0x58, 0x0, 0x7fffffff, 0x35b, 0x800, 0x1]}, @ssrr={0x89, 0x17, 0x41, [@broadcast, @empty, @loopback, @empty, @rand_addr=0x64010100]}, @noop, @ra={0x94, 0x4}, @generic={0x88, 0x8, "d92c850b8292"}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x7, 0xf, "42dfff038cd9d7edac067e5322"}, {0x6, 0x8, "b78b202d98dc"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000700)={'syztnl1\x00', &(0x7f00000006c0)={'gre0\x00', 0x0, 0x40, 0x40, 0x40, 0xc83, {{0x6, 0x4, 0x1, 0x3, 0x18, 0x64, 0x0, 0xfc, 0x4, 0x0, @multicast1, @rand_addr=0x64010100, {[@end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'erspan0\x00', 0x0, 0x10, 0x8000, 0xffffffff, 0xd, {{0x18, 0x4, 0x3, 0x1, 0x60, 0x65, 0x0, 0x69, 0x4, 0x0, @remote, @remote, {[@lsrr={0x83, 0x13, 0x91, [@multicast2, @multicast1, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xe}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0xa, 0x0, 0x4, [0x7, 0x7, 0x9, 0x100]}, @timestamp_addr={0x44, 0x1c, 0xcb, 0x1, 0xa, [{@multicast1, 0x4}, {@remote, 0x87b0}, {@broadcast, 0x3}]}, @ra={0x94, 0x4}]}}}}}) getpeername$packet(r2, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000900)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000a40)={'syztnl2\x00', &(0x7f0000000940)={'gretap0\x00', 0x0, 0x7, 0x8000, 0x2, 0x6, {{0x2a, 0x4, 0x3, 0xa, 0xa8, 0x66, 0x0, 0x0, 0x29, 0x0, @multicast1, @private=0xa010101, {[@timestamp={0x44, 0x24, 0x4b, 0x0, 0x2, [0x6, 0x2, 0x0, 0x5, 0xc, 0x10000, 0x3, 0x0]}, @timestamp={0x44, 0x24, 0x92, 0x0, 0x2, [0x4, 0xa9, 0x4, 0x2, 0x6, 0x5, 0x3, 0x4]}, @timestamp_prespec={0x44, 0x4c, 0xdb, 0x3, 0x8, [{@multicast1, 0x8}, {@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@rand_addr=0x64010102, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@empty, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@rand_addr=0x64010101, 0x1c}, {@remote, 0x118}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x0, 0x1, {{0xc, 0x4, 0x3, 0x35, 0x30, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}, {[@cipso={0x86, 0x13, 0x2, [{0x5, 0x6, "e7691df2"}, {0x5, 0x7, "8458e00edd"}]}, @timestamp={0x44, 0x8, 0xaf, 0x0, 0xb, [0x1]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b80)={'veth1_vlan\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) (async) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000c00)={@ipv4={""/10, ""/2, @private}, 0x0}, &(0x7f0000000c40)=0x14) (async) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000c80)={@empty, @initdev, 0x0}, &(0x7f0000000cc0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000000d00)={0xa1c, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r11}, {0x20c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffff4f4}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x2, 0x4, 0x7fffffff}, {0x2, 0x2, 0x7}, {0x5, 0x7, 0x5, 0xffffff81}, {0x59, 0x5, 0xd}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffeffff}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r14}, {0x11c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7e8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x758f837b}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x79}}}]}}, {{0x8, 0x1, r17}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x3, 0x5, 0x9, 0xf}, {0x101, 0x4, 0x2, 0x9}, {0x0, 0x90, 0xf1}, {0x100, 0x0, 0xd7, 0xffff}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0xa1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 4.360917524s ago: executing program 1 (id=1652): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chmod(&(0x7f0000000300)='./file0\x00', 0x104) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x0, 0x0, 0xfffffffffffffffe, 0xc, 0x100000000000, 0x0, 0x80000000, 0x0, 0x8000, 0x3, r3, r4, 0xffffffff, 0x20000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x21, 0xffffffff, 0x58339298, 0x1002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11}}, 0x50) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r5, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f9fe6aa7bf78821d47b9f4bb4c08de08b1fb642171dd8c7d2d72715b3badd20bac39b1dac98f78f1bbc5af566c5f2ded6e4beedfb436732cf387d87dc5259c9052b4f24db8b1d4442e32164d51960d605aafb8485bfc0877433436c9c8a36ebe6f135eb4ba19992bd09f12fae999affabe0dc40febda31ef6aa8a0816985c1668b9b2792e0160391c7e51a115d5c280f719334c9f4f690969aa86f0d17019da1caf5b1d6a93af24361d42e86f992a768c7753757ce8b5da8ee150420885d", @ANYBLOB="01000040000000000008100000001800018014000200776c"], 0x3c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x4000000e42, 0x9, 0xffffffffffffffff, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x8, 0x7, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.982924291s ago: executing program 2 (id=1653): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fsopen(&(0x7f0000000000)='9p\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f00000000c0)={0x1}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="8183c98c6f3500000000000000000400"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0083324fe9000000b70200eb50000000b703008500000083000000bf09000000000000550901001000000095000000000000001800"/67, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0x7, &(0x7f0000000400)) epoll_create1(0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r6, 0xc0805841, &(0x7f0000000580)={0xffff28c0, 0x94b2, 0x4, 0x2, 0x813}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000200)=0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r8}, 0x8) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000900)={0x7, @win={{0x5e, 0xfffffffd, 0xffffffff, 0x40}, 0x6, 0x2ee3, &(0x7f00000004c0)={{0x7, 0x7, 0xd, 0xfffffffb}}, 0x8, 0x0, 0x2}}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r8, 0x6}, &(0x7f00000001c0)=0xc) 3.918199716s ago: executing program 0 (id=1654): socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000380)='\x02\xc3\xf6\xddM\xd6\x8dwE)\x83\xe1\x1f\x9c\xf5q', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x800, 0x8, 0x100400000, 0x5, 0x10000000, 0xe8}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000bc0)='\x00\x00\x00\x00\x00\x00', 0x6, 0x1000000000003}]) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000840)={&(0x7f0000000540)="2b0a3cb8b84917f556d42cf1d6f943547cb9342efb92c3898d4cda1d100c5719740f77bd19242d0ff9cb993f44b586e7578adaded823ef32fa29b5a59b0418d6c7315f761cf21000aca9c2ca9d9c10857756bcc0f5d2aecbe93783fb14e51c47771dd43ec6b65c35bdfbad1e2581c92c9d34b62e1744e4149cb7a5a4ee447aec525d2732a5df65b6483138066bf810e286dcfc00adbe1c95d5e812e35aa2304dcb721f032a0911ec0387cce8e27b0c8c05487d419680eb6fbe507a47a9ea4c965b7855364e4920ae57bf9067780989bf7283a05383023ff3b3d9d1904bb130eeb5b581d7", &(0x7f0000000640)=""/90, &(0x7f00000006c0)="753f3ff4a75d932ddd601cdb60acf5f6a49918d27404a8b0905140dab243f36739cd35825b905fc1569dd63efadae16da6eef9253904e732f53e96356eda8c9aabee1094c6b2aef97beaef5ce58de2c392c37180e50867237aba204ba62f9ddab17579bd9588671f0c364a05c406ec52e58e01a2e4e30f58e30f6460f734e856008d493de1130c34afe899", &(0x7f0000000780)="f7a74e15d7d0a2639a70d50e17fff45d987a57b5d5ab6836ace88c2490a3321fcd9c2adf8bae3cb82563c29ef520c8d69936f40b5850a400b03542e670a36322fb153da6e02766ac22ad295c0dc67b5c4031cf25437c432ca41f455ab24f9f6ea1f12b176423e8453f6093fc1b22e3ad7db1e876a34ae0f01a9006939170e8aef3f40a39277b85fcecc1036d4b7a0d242d26b0af4201034c91ac54c76b857a8cff399e777301acb0a376aad912255820f214ab4d6f343aaf51c5b3", 0x90c2, r4, 0x4}, 0x38) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r6, 0x0) landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) r7 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r7, 0x15b77000) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000007, 0x200000005c832, r0, 0x9dc0d000) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000004c0)={@empty, @multicast1, 0x0}, &(0x7f0000000500)=0xc) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=r9, @ANYBLOB="03410000420006001800128008000100677265000c00028008001500cc7c03009affaf21c2f8c8e20b338dfb41c36851cbd6acc20aca7319f7a0d023abd7d5a9aa988661d3d18c1208dc7e1857caa51ff841493ac06d9769d774c7a97675b6155c539cb5c8168ae3af43848700def70837e42dda7bcbebba3b9e600e7edda088af75b52411441d76205c9aace003bd7e77614b3110dd10cc38a66ab35c50badda6be330609ce27f7c92e47d00dffdbb1f7980ad48cf4fa905fa6dd120cc6cd3615681f518b48083351b7ab92e530bcc8d60e48aac7153e3a392b12cf56f2bdeb7da7ad1d289d7a"], 0x38}}, 0x880) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.917574247s ago: executing program 1 (id=1655): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) unshare(0x8040480) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) epoll_wait(r2, 0x0, 0x0, 0x2) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x6, 0x0) symlinkat(&(0x7f0000000600)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r3, &(0x7f0000000000)='./file0\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet(0x2b, 0x801, 0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) unshare(0x24020400) r5 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r5, 0xda8d) accept4$inet(r5, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dvb_frontend(0x0, 0x101, 0xa0580) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x4d10, 0x2, 0x2, 0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000540)) keyctl$clear(0x3, 0xfffffffffffffffc) keyctl$restrict_keyring(0xf, 0xfffffffffffffffc, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x8800, 0x0, 0x0) 3.907432327s ago: executing program 5 (id=1656): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="d3e58b8231020e740322c51ba2f7b48615f2b88f8da3685921b3f214f84699ebcebb73d509538c42bf0304b3010255d89323ee9c3216ead2a44358498f5107acef6357c63e0c2b766d058b1d6541c4ffdd0cabb159b2f0d3c7126f872dcaa848f329018ee1cedecfdc5a9a2fea477fe818e1823a1b86a4b734224403cc065fa1ffa6016fef1ccadf030a01b9f78b0585899ee38633a7c2e4716bd5cf22ca5eab86c731c9952206ed98058bd922ad481fb72d8c2dcf02e4bbb574339fd41f5dbced738978c6010ba1d6b8ef7a1efd483800b397237a12da26194663d620400b4cfc02efbb7879335e83616a065adcf8447e84268d713229a9c84588a87acbba23e0b041292722afbc66931472f57f759003c66237c3e495a32646c52beb0e5d3fb887000000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c800) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000009c0)=ANY=[@ANYBLOB="40164fcd020946a18935f74813b046e1136fccfdae0f5007b93b239067351ccf4578c4d5bc4649597b81d65a20bd7a9dcfe7154110c915dff1aab5a604eba7c3df2682e367b5316e6b1d92ca5996dc9fc71ca2f38a03fb0fb465fe23b9155ad0b2386f51b99a05df5c7d8b2757c8a3bdaa34a27c7ef4f6fca9c0a4c282feaf6bed7b81eb94f9c7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @empty, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x5, 0x1, 0x2}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x1, 0xb, 0x38, 0x66, 0x0, 0x5, 0x1, 0x0, @rand_addr=0x64010101, @remote, {[@generic={0x44, 0x4, "dcb2"}, @ssrr={0x89, 0x7, 0x53, [@remote]}, @timestamp={0x44, 0x4, 0x3e, 0x0, 0x5}]}}, @timestamp={0xd, 0x0, 0x0, 0x6, 0x5, 0x7b2, 0x0, 0x8a8}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80101) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000580)={0x53, 0xffffffffffffffff, 0x0, 0xfa, @buffer={0x0, 0x2e, &(0x7f0000000080)=""/46}, &(0x7f00000004c0), 0x0, 0x800, 0x10064, 0xffffffffffffffff, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) socketpair(0x1d, 0x2, 0x2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@deltaction={0x184, 0x31, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbc1}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x81f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x11}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa000000}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4f9}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000080}, 0x4080) 2.977565785s ago: executing program 0 (id=1657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$zero(0xffffffffffffff9c, &(0x7f0000006800), 0x8000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x3b, 0x1, {{0x3d1, 0x7, 0x20000000, 0x6, 0x6}, 0x7b}}]}, {0x4f}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x84}}, 0x2) 2.714503873s ago: executing program 0 (id=1658): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2, 0xc10}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000000}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.240928756s ago: executing program 3 (id=1659): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x200, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xff}]}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000440)={0x2, @sdr={0xa0363159, 0x1}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x7, 0x1, 0x41, 0x6, 0xfc, 0x8, 0xe, 0x3, 0xb, 0x7e, 0xd, 0xea, 0x44, 0x48, 0xae, 0x4}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r0], 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.553394177s ago: executing program 2 (id=1660): socket$inet6_sctp(0xa, 0x1, 0x84) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x144) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000280)={0x57, 0x80, 0x8000, {0xd, 0x3}, {0x12, 0x3}, @const={0x3, {0x4, 0xad, 0x1ff, 0x6}}}) r5 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r5, 0x2007ffd) sendfile(r3, r4, 0x0, 0x1000a3) 1.279356743s ago: executing program 0 (id=1661): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="e4010000100001000000000000000000fc420000000000000000000000000000000000000000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000100000000000000000004000000000000000000000000000000fcffffffffffffff0000000000000000ffffffffffffffffc73b0000000000000000000000000000000000800000000000000000000000000000000000000000ffffffff2dbd700000000000020004004c000000000000001c001700000000002abd700000000000000000000000000000000000480002006362632873657270656e742900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d001400686d61632873686132353629000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000802000080000000aef356316f6f7d6ab0f8637b42ff0300008aa309bdd3f9dcffb669556b74c61e032441fd13571c4c64597441f3cf2a548c89"], 0x1e4}}, 0x44840) 1.233223854s ago: executing program 0 (id=1662): r0 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknodat(0xffffffffffffffff, &(0x7f0000000100)='./file2\x00', 0x8080, 0x30) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x2, &(0x7f0000000140)=[{0x1ff, 0x5, 0x37, 0x5}, {0x7, 0x54, 0x6}]}) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4ad9, &(0x7f0000000300)={0x0, 0x9731, 0x4000, 0x3, 0x145}, &(0x7f00000003c0), 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00') socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000240)=0xd) writev(r5, &(0x7f0000000080)=[{0x0}], 0x1) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902240001000020000904c40102fffd018009059e0210020200000905820200"], 0x0) 631.838528ms ago: executing program 1 (id=1663): prlimit64(0x0, 0x3, &(0x7f0000000140)={0xa, 0x8b}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000000, 0x2010, 0xffffffffffffffff, 0xec776000) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r2, 0x30}) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000140)='mptcp_pm\x00', r2) keyctl$search(0xa, r1, &(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, r2) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={r2, 0xc1, 0x1}, &(0x7f00000002c0)={'enc=', 'oaep', ' hash=', {'sha256-asm\x00'}}, &(0x7f0000000480)="e9c64a4510d1366f1846728fabc617d6b6b1d3d49ffcab447f4de4be715a08a05c72d65540be0c14bd0d7793e299c321d56958794ffbcb6dd8f33958b08bba2e333469bcb7114e5dc7fe99fe309c0c06030865612273e61de4e84a6826632b577f7cb8d54118bda594d640ce182676737c928aa1a06e0931fc6a27cfac0c82d0ec46304bb6348f826b055852e5008ae2374f192e6092092112e9000b2da129a1998dcfa9ca98851ed22353ade2c329149a8ee97f6cbaab8b24354f7bdd36e0c98a", &(0x7f0000000580)=""/1) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x14, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0xb6, 0x0, 0x0, @u32=0x4788}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 387.004972ms ago: executing program 2 (id=1664): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000000c0)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="001306000000ec19d02303f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "4d96197c5834d8ec", "020d0c6fb50f783b7822d8209645d3dd", "c5893928", "ae0fd34d999570ec"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000080), 0x51) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000140)={0x8, 0x0, 0x2, 0x10, 0x4}) shutdown(r0, 0x1) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000440)={0x1, 0x0, @ioapic={0x10000, 0x7ff, 0x8, 0x7ff, 0x0, [{0x7, 0xff, 0x0, '\x00', 0x49}, {0x1, 0x9, 0x7, '\x00', 0x4}, {0x80, 0x0, 0x7f, '\x00', 0x2}, {0x5, 0xb, 0x0, '\x00', 0x2}, {0x3, 0x81, 0x3, '\x00', 0x7}, {0x1, 0x1, 0x3, '\x00', 0x7}, {0x9, 0x3, 0x6, '\x00', 0x6}, {0xd, 0x10, 0x9, '\x00', 0x3}, {0xd, 0x5}, {0x1e, 0x5, 0x7a, '\x00', 0xfb}, {0x40, 0x1, 0x5}, {0xe, 0x5, 0x3, '\x00', 0x7f}, {0x6, 0xf8, 0xd, '\x00', 0x30}, {0xe, 0x6, 0xae, '\x00', 0x9}, {0x10, 0x0, 0x80}, {0x4, 0x0, 0x7, '\x00', 0x40}, {0x1, 0x40, 0x1, '\x00', 0x4}, {0x4, 0x3, 0x1, '\x00', 0xb0}, {0x3, 0x6, 0x8, '\x00', 0x3d}, {0xfc, 0x1, 0xa, '\x00', 0x8c}, {0x4, 0x2, 0x1, '\x00', 0x9}, {0xf8, 0xc1, 0x3, '\x00', 0xf2}, {0x0, 0xff, 0x7, '\x00', 0xfc}, {0x8, 0x2, 0x0, '\x00', 0xa}]}}) 374.877998ms ago: executing program 1 (id=1665): r0 = syz_usb_connect$uac1(0x2, 0xbc, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x582, 0xb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0x25, 0x0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x43}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x4, 0x5, 0xf0}, @extension_unit={0xd, 0x24, 0x8, 0x6, 0x4, 0x4, "e050340277b1"}, @processing_unit={0x7, 0x24, 0x7, 0x2, 0x0, 0x5}, @extension_unit={0xb, 0x24, 0x8, 0x3, 0x4, 0x40, "f39d3ebc"}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x6, 0x5, [0x1, 0x2, 0x5, 0x2, 0x1], 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xbd, 0xf, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x7f, 0x47, 0x5, {0x7, 0x25, 0x1, 0xc, 0x2, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfffb, 0x76c, 0xff, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x4, 0x2, {0x7, 0x25, 0x1, 0xc, 0xf, 0xe}}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x201, 0xd0, 0x2, 0x3, 0xff, 0xd7}, 0x25, &(0x7f00000004c0)={0x5, 0xf, 0x25, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x40, 0x3, 0x5, 0x7, 0x9}, @wireless={0xb, 0x10, 0x1, 0x4, 0x7c, 0x0, 0x40, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x3}]}, 0x9, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1809}}, {0xd2, &(0x7f00000005c0)=@string={0xd2, 0x3, "a8db68fa2e67036fbe24f5d491ea89012ab0bb98a04ba8ebd8d5b54baa4cd0d03240cbe7b9b295444a056a11e13e27d7b85ffb88329c47c3a5fd575cffb833a17f8e0aedf1f1ec78300e3a14938dc994e5b297f3e18b2a5d84a749e2eaa0759f1715c0c68278fbb277cd34b75ea508c722cd03fbb254dbd71e0260895f72f170b69161330d332ba2ba14617cf44ad876bd16dcfb94871bd50ab936b634fed3fd2f7ef9429c4ac1543e6dbc1413f144401d2f3d1bc719c60c30a5bf75ad310ea069c1582f0c9d442cfa02cb5bc579cb0c"}}, {0x10, &(0x7f00000006c0)=@string={0x10, 0x3, "8b1b845cfdb10f1cc2c4cd75c08e"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x2009}}, {0x30, &(0x7f0000000780)=@string={0x30, 0x3, "69dc602de6404074654d452455438588e28867a074615faac5efa4f0f6a6c98282804c0320629fe0a61a51af0c3d"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x41f}}]}) syz_usb_control_io$uac1(r0, &(0x7f00000009c0)={0x14, &(0x7f00000008c0)={0x0, 0xa, 0x3e, {0x3e, 0x21, "71bea5418fd99dd98cade6cf29ad0534affcd1fa6504b7bf48435af790a728f502cfbf4fba34a105fa469589d1a624636e25b957454ed1bda5a8856e"}}, &(0x7f0000000940)={0x0, 0x3, 0x6f, @string={0x6f, 0x3, "2f872be28310b67c90ab6dd07a4e96049473c7806949edec95a93eb088186ef7c8b23e378440854ca6eb74faa8c8395d1f586017d3be3500e6888a3283af425ed1562605ed7c2d796cda86f5f5161c7a12a8a9f02c50eef84117b85d4d23057da329deb3d4447f9764396f3351"}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000a00)={0x20, 0x31, 0xbe, "bb7262cc9342ee0bc48ee7ef13b93b06c2967616caee66653ea287005b223c9a2d9d2f591eb751f076909f40c491745eee2067d74a2878905e013d352c4dfa8f9461d7a553372abb4c10fce530fbb75fcb1cf8f681186748cde6c0baa8c3ebb7c04366130592aaf8d9ab9f815e7130eb36608ad590f9728ee4458fc58c8ffc7046456946700c59fe8e0d91f91e8e75dbc63abb2d921ecd798d95f3644fdd54480a6958aceadec73a701fdd6902218d1437499e7a095a6ff8c0784c17cd4f"}, &(0x7f0000000b00)={0x0, 0xa, 0x1}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x81, 0x2, "a0fd"}, &(0x7f0000000bc0)={0x20, 0x82, 0x3, "283d11"}, &(0x7f0000000c00)={0x20, 0x83, 0x3, 'K\"5'}, &(0x7f0000000c40)={0x20, 0x84, 0x3, "f1a86b"}, &(0x7f0000000c80)={0x20, 0x85, 0x3, "0a7a8c"}}) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x6a040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a0500000000000000000007000001e7ff000073797a30000000003c000000090a010400000000000000000700000008000a400000000009000200badca5381599958f0900010073797a300000000008000540000000215c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c000080080003400000000220000b801ceb00800a0001006c696d69740000000c0002800800044000000001140000001000010000000000000000000084000a"], 0xe0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000180)={r3, &(0x7f0000000000)='[{\']$$\x00', 0x40000, &(0x7f0000000040)={@align=0x9, {0x3, 0x2, 0x9, 0x2}}, 0x7, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)=0x10001}) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x4, @sliced={0x200, [0xa, 0xfc00, 0x5, 0x40, 0x3, 0x3, 0x9, 0x2, 0xfffa, 0x0, 0x6, 0xb, 0x3, 0x2, 0xfff7, 0x208e, 0xcf4c, 0x0, 0x654, 0x3ff, 0x0, 0x8, 0x6, 0x200, 0x4, 0x878, 0x0, 0x2, 0x6, 0x400, 0x3fe6, 0x7f, 0x6000, 0x4, 0x9, 0x3, 0xfff7, 0x6, 0x400, 0x28, 0x6, 0x820f, 0xd, 0x3, 0x0, 0xfff8, 0x8c35, 0x1ff], 0x5}}) sendmsg$nl_xfrm(r4, 0x0, 0x94) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) ioctl$BLKPG(r5, 0x1269, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x10) 0s ago: executing program 5 (id=1666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) close(0x3) socket$netlink(0x10, 0x3, 0xe) kernel console output (not intermixed with test programs): remove unknown binding: 66,0,0/0:1602827721/1602827722 [ 427.090804][T11067] tipc: Failed to remove unknown binding: 66,0,0/0:1602827721/1602827723 [ 427.090862][T11067] tipc: Failed to remove unknown binding: 66,0,0/0:1602827721/1602827722 [ 427.214045][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 427.216324][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 427.217309][ T10] usb 2-1: config 9 has an invalid interface number: 88 but max is 0 [ 427.217326][ T10] usb 2-1: config 9 has no interface number 0 [ 427.217344][ T10] usb 2-1: config 9 interface 88 has no altsetting 0 [ 427.227320][ T10] usb 2-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=52.b8 [ 427.227349][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.227371][ T10] usb 2-1: Product: syz [ 427.227394][ T10] usb 2-1: Manufacturer: syz [ 427.227408][ T10] usb 2-1: SerialNumber: syz [ 427.232423][T11053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.233056][T11053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.234566][ T2155] usb 6-1: USB disconnect, device number 17 [ 427.465122][ T10] ums-datafab 2-1:9.88: USB Mass Storage device detected [ 427.528681][ T10] ums-sddr55 2-1:9.88: USB Mass Storage device detected [ 427.571217][ T10] usb 2-1: USB disconnect, device number 84 [ 427.804110][ T5894] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 427.965666][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 427.975987][ T5894] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 427.990886][ T5894] usb 4-1: config 0 has no interface number 0 [ 428.014102][ T5894] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 428.040100][ T5894] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 428.052238][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.061779][ T5894] usb 4-1: Product: syz [ 428.066604][ T5894] usb 4-1: Manufacturer: syz [ 428.071453][ T5894] usb 4-1: SerialNumber: syz [ 428.085154][ T5894] usb 4-1: config 0 descriptor?? [ 428.091762][T11073] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 428.302111][T11073] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 429.069584][T11086] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 429.078756][ T5901] usb 3-1: usb_control_msg returned -71 [ 429.085733][ T5901] usbtmc 3-1:16.0: can't read capabilities [ 429.220539][ T5901] usb 3-1: USB disconnect, device number 80 [ 429.449779][T11091] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.551959][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 429.667471][ T5894] asix 4-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 198 [ 429.820903][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1334'. [ 429.824331][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 429.847303][ T5894] usb 4-1: USB disconnect, device number 88 [ 429.898448][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 429.977651][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10 [ 430.034235][ T5901] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 430.057557][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25185, setting to 1024 [ 430.082213][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1336'. [ 430.091438][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 430.147494][ T24] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 430.190249][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.223960][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 430.239118][ T24] usb 6-1: config 0 descriptor?? [ 430.250804][ T5901] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 430.298469][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10 [ 430.343999][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25185, setting to 1024 [ 430.414106][ T5894] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 430.443550][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 430.573901][ T5901] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 430.592400][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 430.604030][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.616083][ T5894] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 430.631074][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.644661][ T5901] usb 3-1: config 0 descriptor?? [ 430.692946][ T5894] usb 4-1: config 0 descriptor?? [ 430.703421][ T24] hid (null): invalid report_size 29797 [ 430.719512][ T5894] gspca_main: sq930x-2.14.0 probing 041e:403c [ 430.738053][ T24] hid (null): invalid report_size 29797 [ 430.743761][ T24] hid (null): invalid report_size 24320 [ 430.772302][ T24] hid (null): bogus close delimiter [ 430.796884][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0020/input/input48 [ 430.894013][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0020/input/input49 [ 430.919809][ T5894] gspca_sq930x: reg_r 001f failed -71 [ 430.937759][ T5894] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 431.009644][ T24] kye 0003:0458:5013.0020: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 431.034440][ T5894] usb 4-1: USB disconnect, device number 89 [ 431.132325][ T5901] hid (null): invalid report_size 29797 [ 431.184206][ T5901] hid (null): invalid report_size 29797 [ 431.194388][ T2155] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 431.205593][ T5901] hid (null): invalid report_size 24320 [ 431.211469][ T5901] hid (null): bogus close delimiter [ 431.304901][ T5901] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0021/input/input50 [ 431.412590][ T2155] usb 2-1: Using ep0 maxpacket: 16 [ 431.475195][ T2155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 431.496614][ T5901] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0021/input/input51 [ 431.567884][ T2155] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 431.610743][ T2155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.632285][ T2155] usb 2-1: Product: syz [ 431.643039][ T2155] usb 2-1: Manufacturer: syz [ 431.671344][ T2155] usb 2-1: SerialNumber: syz [ 431.724658][ T2155] usb 2-1: config 0 descriptor?? [ 431.762910][ T5901] kye 0003:0458:5013.0021: input,hiddev1,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 431.798796][ T2155] hub 2-1:0.0: bad descriptor, ignoring hub [ 431.812004][ T2155] hub 2-1:0.0: probe with driver hub failed with error -5 [ 431.861390][ T2155] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 431.955278][ T5901] usb 6-1: USB disconnect, device number 18 [ 432.589268][T11141] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1345'. [ 432.707304][T11141] ..0: renamed from hsr0 (while UP) [ 432.762848][ T2155] usb 3-1: USB disconnect, device number 81 [ 432.779470][T11141] ..0: entered allmulticast mode [ 432.785427][T11141] hsr_slave_0: entered allmulticast mode [ 432.904247][T11141] hsr_slave_1: entered allmulticast mode [ 432.931696][T11141] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check. [ 433.254203][ T2155] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 433.270669][ T29] audit: type=1326 audit(1775992834.295:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd979c819 code=0x7ffc0000 [ 433.376635][ T29] audit: type=1326 audit(1775992834.325:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd979c819 code=0x7ffc0000 [ 433.427652][ T2155] usb 3-1: Using ep0 maxpacket: 8 [ 433.436331][ T2155] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 51, changing to 7 [ 433.455384][ T29] audit: type=1326 audit(1775992834.325:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdbd979c819 code=0x7ffc0000 [ 433.487789][ T2155] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 209, changing to 7 [ 433.502027][ T29] audit: type=1326 audit(1775992834.325:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd979c819 code=0x7ffc0000 [ 433.527576][ T2155] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 433.559151][ T2155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.573537][ T29] audit: type=1326 audit(1775992834.325:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11157 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd979c819 code=0x7ffc0000 [ 433.598278][ T2155] usb 3-1: Product: 尐䫷ｒ漍懏굫ﱍ譈ാ቗뢊芆㇦飦鈾傏鉱㠖꙾䗙﹯샓疫颋勤며洿ṃ짿眡䷻鬦搊酗蟳 [ 433.621396][ T2155] usb 3-1: Manufacturer: 鮑唴ౖ注ꀌ䟢ꐃ㘗ᇾ쎇픤荢ᶦ錡䓽ः镖쐧㟸⒏塜⩊渗긲꺊燯ᜭ䊪磘狲䨆뉀狌ꆆ虺㼣䔗쉿殤鲦包㗏혋∎몓㐙⟃꾷ꑜ벛瘢퍚裘䑛蠎閟敎瀄뚌書櫊ܦ暋㺠泳脀ә䚟䲾಑쫇孮벒龾ഠ [ 433.650239][ T2155] usb 3-1: SerialNumber: syz [ 433.736909][ T5916] usb 2-1: USB disconnect, device number 85 [ 433.838739][T11166] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0 [ 434.203620][ T2155] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 434.215821][ T2155] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 434.238312][ T2155] usb 3-1: unit 1: unexpected type 0x03 [ 434.534819][ T2155] usb 3-1: unit 2 not found! [ 434.601022][ T2155] usb 3-1: USB disconnect, device number 82 [ 434.954279][ T10] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 435.065618][ T35] wlan0: Trigger new scan to find an IBSS to join [ 435.107393][T11175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 435.167215][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 435.176615][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.186628][ T10] usb 2-1: Product: syz [ 435.199008][ T10] usb 2-1: Manufacturer: syz [ 435.204099][ T10] usb 2-1: SerialNumber: syz [ 435.368034][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 435.400103][ T2155] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 435.583985][ T5915] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 435.745284][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 435.764847][ T5915] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 435.776337][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10 [ 435.788481][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25185, setting to 1024 [ 435.804445][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 436.163991][ T5916] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 436.750289][ T10] usb 2-1: USB disconnect, device number 86 [ 436.759975][ T2155] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 436.770125][ T2155] ath9k_htc: Failed to initialize the device [ 436.779650][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 436.826144][ T5915] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 436.853885][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.881551][ T5915] usb 4-1: config 0 descriptor?? [ 436.944996][ T5916] usb 6-1: device descriptor read/64, error -71 [ 437.223200][ T5916] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 437.297385][ T29] audit: type=1326 audit(1775992838.305:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.2.1359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91ab59c819 code=0x0 [ 437.330240][ T5915] hid (null): invalid report_size 29797 [ 437.337524][ T5915] hid (null): invalid report_size 29797 [ 437.343720][ T5915] hid (null): invalid report_size 24320 [ 437.352863][ T5915] hid (null): bogus close delimiter [ 437.383924][ T5916] usb 6-1: device descriptor read/64, error -71 [ 437.499945][ T5916] usb usb6-port1: attempt power cycle [ 437.517516][ T5915] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0022/input/input53 [ 437.629940][ T5915] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0022/input/input54 [ 437.731742][ T5915] kye 0003:0458:5013.0022: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 437.894020][ T5916] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 437.917371][ T5916] usb 6-1: device descriptor read/8, error -71 [ 438.649311][ T10] usb 4-1: USB disconnect, device number 90 [ 438.685327][ T5916] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 438.755998][ T5916] usb 6-1: device descriptor read/8, error -71 [ 438.890661][ T5916] usb usb6-port1: unable to enumerate USB device [ 439.135195][ T49] wlan0: Trigger new scan to find an IBSS to join [ 439.444101][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 439.504041][ T5916] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 440.083169][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 440.124863][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 440.146928][ T5916] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 440.156063][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.174325][ T5916] usb 4-1: Product: syz [ 440.178643][ T5916] usb 4-1: Manufacturer: syz [ 440.183945][ T5916] usb 4-1: SerialNumber: syz [ 440.202418][ T24] usb 6-1: config index 0 descriptor too short (expected 12336, got 36) [ 440.211953][ T5916] usb 4-1: config 0 descriptor?? [ 440.216989][ T24] usb 6-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 440.226032][ T24] usb 6-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 440.236497][ T24] usb 6-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 440.246260][ T24] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 440.264498][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.270852][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.286080][ T5916] hub 4-1:0.0: bad descriptor, ignoring hub [ 440.293942][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.301995][ T5916] hub 4-1:0.0: probe with driver hub failed with error -5 [ 440.317185][ T5916] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 440.756449][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.783076][ T24] usb 6-1: string descriptor 0 read error: -71 [ 440.814365][ T24] usb 6-1: USB disconnect, device number 23 [ 441.345671][ T29] audit: type=1326 audit(1775992842.375:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11233 comm="syz.2.1370" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91ab59c819 code=0x0 [ 441.375116][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1371'. [ 441.379444][ T24] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 441.563938][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 441.572867][ T24] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 441.591057][ T24] usb 2-1: config 179 has no interface number 0 [ 441.649650][T11249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.673533][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 441.718468][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 441.801777][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 441.890329][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 442.274000][ T5916] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 442.285632][ T24] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 442.326705][ T24] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 442.355631][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.462656][ T5916] usb 6-1: Using ep0 maxpacket: 16 [ 442.652207][ T10] usb 4-1: USB disconnect, device number 91 [ 442.670992][T11256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.709002][T11256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.860827][T11232] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 442.868477][ T5916] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 443.007475][ T5915] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 443.017684][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10 [ 443.098233][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25185, setting to 1024 [ 443.178170][ T5916] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 443.207423][ T5916] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 443.218401][T11264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.233780][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.247405][ T5916] usb 6-1: config 0 descriptor?? [ 443.260961][T11266] .30XD: left allmulticast mode [ 443.268963][T11266] sit0: left promiscuous mode [ 443.511072][T11264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.700333][ T5916] hid (null): invalid report_size 29797 [ 443.706494][ T5916] hid (null): invalid report_size 29797 [ 443.712445][ T5916] hid (null): invalid report_size 24320 [ 443.720243][ T5916] hid (null): bogus close delimiter [ 443.750753][ T5916] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0023/input/input55 [ 443.758551][T11272] SET target dimension over the limit! [ 443.804313][T11266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 443.908510][ T5916] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0023/input/input56 [ 444.270867][ T5916] kye 0003:0458:5013.0023: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 444.443601][T11279] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0 [ 445.648192][ T24] usb 2-1: USB disconnect, device number 87 [ 445.654233][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 445.654267][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 445.893621][ T10] usb 6-1: USB disconnect, device number 24 [ 446.096611][T11288] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0 [ 446.136252][T11286] syzkaller0: entered promiscuous mode [ 446.149137][T11286] syzkaller0: entered allmulticast mode [ 446.877262][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 447.064268][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 447.071630][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 447.082141][ T10] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 447.131359][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 447.144619][ T10] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 447.155915][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.164690][ T10] usb 6-1: Product: syz [ 447.168936][ T10] usb 6-1: Manufacturer: syz [ 447.173695][ T10] usb 6-1: SerialNumber: syz [ 447.211905][ T10] usb 6-1: config 0 descriptor?? [ 447.426959][ T10] gs_usb 6-1:0.0: Couldn't get device config: (err=-32) [ 447.453099][ T10] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -32 [ 447.944025][ T5894] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 448.107848][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 448.115506][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 448.159588][ T5894] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 448.177927][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.186201][ T5894] usb 3-1: Product: syz [ 448.199107][ T5894] usb 3-1: Manufacturer: syz [ 448.204042][ T5894] usb 3-1: SerialNumber: syz [ 448.211563][ T5894] usb 3-1: config 0 descriptor?? [ 448.233729][ T5894] hub 3-1:0.0: bad descriptor, ignoring hub [ 448.240011][ T5894] hub 3-1:0.0: probe with driver hub failed with error -5 [ 448.258755][ T5894] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 448.656433][T11309] netlink: 'syz.1.1388': attribute type 5 has an invalid length. [ 449.362921][ T10] usb 6-1: USB disconnect, device number 25 [ 449.609367][T11297] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.771512][T11316] fuse: Unknown parameter 'k/LX&a[ [ 449.771512][T11316] Dc 0E"$'N{Ce{\ [ 449.771512][T11316] "s)]Chxa巓x5DԻ]|Q~2>5K7Exqθ$VX>eǸ0t& [ 449.771512][T11316] 1̑xDN;sm6h|uj]`44k5jLJ>f [ 449.771512][T11316] RKRL+p&prc}?&?՗' [ 449.813929][ T10] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 449.952065][T11323] syzkaller0: entered promiscuous mode [ 449.958011][ T24] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 449.965825][T11323] syzkaller0: entered allmulticast mode [ 449.994529][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 450.013220][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 450.028024][ T10] usb 6-1: string descriptor 0 read error: -22 [ 450.035237][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 450.064855][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.099270][ T10] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 450.117069][ T24] usb 4-1: config 0 has an invalid interface number: 25 but max is 0 [ 450.142755][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.153520][T11323] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.161371][T11323] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.163572][ T24] usb 4-1: config 0 has no interface number 0 [ 450.196200][ T24] usb 4-1: config 0 interface 25 has no altsetting 0 [ 450.255008][ T24] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 450.267420][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.294797][ T10] usb 6-1: unit 1 not found! [ 450.318051][ T10] usb 6-1: unit 237 not found! [ 450.325127][T11323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.343165][ T24] usb 4-1: config 0 descriptor?? [ 450.462251][ T10] usb 6-1: USB disconnect, device number 26 [ 450.486209][T11323] veth1_vlan: left allmulticast mode [ 450.544619][T11329] usb 3-1: USB disconnect, device number 84 [ 450.606458][T11332] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 450.702579][T11323] hsr1: left promiscuous mode [ 450.753056][T11323] syzkaller0: left promiscuous mode [ 450.795440][ T35] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.805722][T11332] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 450.834150][ T35] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.840477][T11332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.856685][T11332] usb 2-1: Product: syz [ 450.860907][T11332] usb 2-1: Manufacturer: syz [ 450.866190][T11332] usb 2-1: SerialNumber: syz [ 450.873737][ T35] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.903881][ T35] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.974540][T11348] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0 [ 451.061004][T11332] usb 2-1: config 0 descriptor?? [ 452.010416][ T35] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.020823][T11332] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 452.042623][ T35] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.073270][ T35] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.094072][ T35] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.746014][ T42] usb 4-1: USB disconnect, device number 92 [ 452.973975][ T5916] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 453.020582][T11369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.039746][T11369] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 453.131244][ T29] audit: type=1326 audit(1775992854.035:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.3.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdad59c819 code=0x7ffc0000 [ 453.202269][ T29] audit: type=1326 audit(1775992854.035:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.3.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdad59c819 code=0x7ffc0000 [ 453.291044][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 453.302429][ T5916] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 453.324425][ T5916] usb 3-1: config 0 has no interface number 0 [ 453.432870][T11374] netlink: 'syz.0.1402': attribute type 15 has an invalid length. [ 453.475181][ T5916] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 453.489277][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.489575][ T29] audit: type=1326 audit(1775992854.035:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.3.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7efdad59c819 code=0x7ffc0000 [ 453.498016][ T5916] usb 3-1: Product: syz [ 453.498038][ T5916] usb 3-1: Manufacturer: syz [ 453.498079][ T5916] usb 3-1: SerialNumber: syz [ 453.608107][T11376] fuse: blksize only supported for fuseblk [ 453.620473][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1403'. [ 453.655593][ T29] audit: type=1326 audit(1775992854.035:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.3.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdad59c819 code=0x7ffc0000 [ 453.744995][ T29] audit: type=1326 audit(1775992854.035:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.3.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efdad59c819 code=0x7ffc0000 [ 453.756769][ T5916] usb 3-1: config 0 descriptor?? [ 453.768066][ T29] audit: type=1326 audit(1775992854.035:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.3.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdad59c819 code=0x7ffc0000 [ 453.803564][ T29] audit: type=1326 audit(1775992854.035:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.3.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdad59c819 code=0x7ffc0000 [ 453.827384][ T29] audit: type=1326 audit(1775992854.035:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.3.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdad59c819 code=0x7ffc0000 [ 453.854510][ T29] audit: type=1326 audit(1775992854.035:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.3.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdad59c819 code=0x7ffc0000 [ 453.861317][ T5916] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 453.877986][ T29] audit: type=1326 audit(1775992854.035:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.3.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdad59c819 code=0x7ffc0000 [ 453.996626][T11327] binder: 11326:11327 ioctl 40044591 0 returned -22 [ 454.003676][T11327] binder: 11326:11327 ioctl c0306201 200000000640 returned -22 [ 454.021970][T11332] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 454.034371][T11332] usb 2-1: USB disconnect, device number 88 [ 454.534448][T11335] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 454.705593][T11335] usb 4-1: Using ep0 maxpacket: 16 [ 454.718211][T11335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.732979][T11335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.752798][T11335] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 454.784244][T11335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.812701][T11335] usb 4-1: config 0 descriptor?? [ 454.814393][T11339] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 455.056073][T11379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.650166][T11379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.653963][T11339] usb 6-1: Using ep0 maxpacket: 16 [ 455.693014][T11339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 455.726874][T11339] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 455.738192][T11339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.747648][T11339] usb 6-1: Product: syz [ 455.752031][T11339] usb 6-1: Manufacturer: syz [ 455.757830][T11339] usb 6-1: SerialNumber: syz [ 455.783222][T11339] usb 6-1: config 0 descriptor?? [ 455.798064][T11339] hub 6-1:0.0: bad descriptor, ignoring hub [ 455.805016][T11339] hub 6-1:0.0: probe with driver hub failed with error -5 [ 455.816784][T11339] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 455.962469][T11335] ntrig 0003:1B96:0008.0024: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.3-1/input0 [ 456.132822][T11379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.204673][T11397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.205147][T11379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.264072][T11397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.354899][T11335] usb 4-1: USB disconnect, device number 93 [ 456.606637][T11407] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0 [ 456.625568][ T5916] usb 3-1: USB disconnect, device number 85 [ 457.983690][ T42] usb 6-1: USB disconnect, device number 27 [ 458.079204][T11419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.580711][T11435] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1415'. [ 458.583987][T11339] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 458.590238][T11435] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1415'. [ 458.608857][T11435] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1415'. [ 458.813993][T11339] usb 2-1: Using ep0 maxpacket: 16 [ 458.862150][T11339] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 458.921874][T11339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10 [ 458.933365][T11339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25185, setting to 1024 [ 458.954247][T11339] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 459.004224][T11339] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 459.045227][T11340] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 459.065696][T11339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.097890][T11339] usb 2-1: config 0 descriptor?? [ 459.229545][T11340] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.246672][T11340] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 459.284014][T11340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.307297][T11340] usb 6-1: config 0 descriptor?? [ 459.405502][T11340] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 459.528007][T11437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.558260][T11437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.652498][T11339] hid (null): invalid report_size 29797 [ 459.674088][T11339] hid (null): invalid report_size 29797 [ 459.684702][T11339] hid (null): invalid report_size 24320 [ 459.700980][T11339] hid (null): bogus close delimiter [ 459.748205][T11339] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0025/input/input58 [ 459.986569][T11339] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0025/input/input59 [ 460.137310][T11339] kye 0003:0458:5013.0025: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 460.446996][T11452] fuse: Unknown parameter '0000000000000000000000000000000000000000006' [ 460.897798][T11459] bond1 (unregistering): Released all slaves [ 461.395936][T11475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1427'. [ 461.414236][T11475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1427'. [ 461.428865][T11475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1427'. [ 461.567086][T11479] syzkaller0: entered promiscuous mode [ 461.572779][T11479] syzkaller0: entered allmulticast mode [ 461.669021][ C1] sd 0:0:1:0: [sda] tag#8398 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 461.673997][T11339] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 461.679540][ C1] sd 0:0:1:0: [sda] tag#8398 CDB: Read(6) 08 00 00 00 00 00 [ 461.823684][T11340] usb 6-1: USB disconnect, device number 28 [ 461.835224][T11339] usb 3-1: Using ep0 maxpacket: 16 [ 461.871316][T11339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 461.909833][T11339] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 461.929699][T11339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.939674][T11339] usb 3-1: Product: syz [ 461.944479][T11339] usb 3-1: Manufacturer: syz [ 461.949311][T11339] usb 3-1: SerialNumber: syz [ 461.963538][T11339] usb 3-1: config 0 descriptor?? [ 461.979477][T11339] hub 3-1:0.0: bad descriptor, ignoring hub [ 461.992206][T11339] hub 3-1:0.0: probe with driver hub failed with error -5 [ 462.019728][T11339] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 462.180176][T11486] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0 [ 462.226376][T11332] usb 2-1: USB disconnect, device number 89 [ 462.736566][T11492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.673993][T11332] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 463.784459][T11339] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 463.823914][T11332] usb 2-1: Using ep0 maxpacket: 16 [ 463.866402][T11332] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 463.942092][T11339] usb 4-1: Using ep0 maxpacket: 16 [ 463.952731][T11339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.976575][T11339] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 463.995657][T11332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10 [ 464.007418][T11332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25185, setting to 1024 [ 464.030549][T11332] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 464.053982][T11339] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 464.063500][T11332] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 464.078713][T11332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.078723][T11339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.113720][T11339] usb 4-1: config 0 descriptor?? [ 464.188023][T11332] usb 2-1: config 0 descriptor?? [ 464.287083][ T5886] usb 3-1: USB disconnect, device number 86 [ 464.460274][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 464.460330][ T29] audit: type=1326 audit(1775992865.485:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.3.1432" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdad59c819 code=0x0 [ 464.726399][T11506] netlink: zone id is out of range [ 464.731624][T11506] netlink: zone id is out of range [ 464.753908][T11506] netlink: zone id is out of range [ 464.776249][T11506] netlink: zone id is out of range [ 464.877656][T11506] netlink: zone id is out of range [ 464.897258][T11508] bridge0: port 3(veth0_to_bridge) entered blocking state [ 464.920269][T11508] bridge0: port 3(veth0_to_bridge) entered disabled state [ 464.948838][T11508] veth0_to_bridge: entered allmulticast mode [ 464.993519][T11508] veth0_to_bridge: entered promiscuous mode [ 465.032472][T11508] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 465.089058][T11508] bridge0: port 3(veth0_to_bridge) entered blocking state [ 465.096909][T11508] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 465.175399][T11506] netlink: zone id is out of range [ 465.181138][T11506] netlink: zone id is out of range [ 465.191308][T11506] netlink: zone id is out of range [ 465.348416][T11506] netlink: zone id is out of range [ 465.353799][T11506] netlink: zone id is out of range [ 465.919642][T11332] usbhid 2-1:0.0: can't add hid device: -71 [ 465.926006][T11332] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 465.942534][T11332] usb 2-1: USB disconnect, device number 90 [ 465.955322][ T42] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 466.076394][T11515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1439'. [ 466.103295][T11515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1439'. [ 466.114341][ T42] usb 6-1: Using ep0 maxpacket: 16 [ 466.136585][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.148180][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.154066][T11515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1439'. [ 466.158968][ T42] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 466.191922][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.206335][ T42] usb 6-1: config 0 descriptor?? [ 466.349646][T11339] usbhid 4-1:0.0: can't add hid device: -71 [ 466.356069][T11339] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 466.384840][T11339] usb 4-1: USB disconnect, device number 94 [ 466.627965][ T42] usbhid 6-1:0.0: can't add hid device: -71 [ 466.644635][ T42] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 466.672719][ T42] usb 6-1: USB disconnect, device number 29 [ 466.685452][T11529] cgroup: fork rejected by pids controller in /syz0 [ 466.707084][T11529] macvtap1: entered promiscuous mode [ 466.712415][T11529] syz_tun: entered promiscuous mode [ 466.724221][T11529] syz_tun: left promiscuous mode [ 466.774139][T11340] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 466.794078][T11339] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 466.926652][T11340] usb 2-1: Using ep0 maxpacket: 32 [ 466.944036][T11339] usb 4-1: Using ep0 maxpacket: 8 [ 466.958566][T11339] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 466.968033][T11339] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 466.979198][T11340] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 466.989165][T11340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.997560][T11339] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 467.011960][T11339] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 467.023931][T11339] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 467.041680][T11339] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 467.051599][T11339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.068468][T11340] usb 2-1: selecting invalid altsetting 3 [ 467.076250][T11340] comedi comedi5: could not set alternate setting 3 in high speed [ 467.084560][T11340] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 467.115395][T11340] usbduxsigma 2-1:128.0: probe with driver usbduxsigma failed with error -22 [ 467.310382][T11339] usb 4-1: usb_control_msg returned -32 [ 467.329347][T11339] usbtmc 4-1:16.0: can't read capabilities [ 467.425909][T11534] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1447'. [ 467.486431][T11534] vlan2: entered promiscuous mode [ 467.503034][T11534] gretap0: entered promiscuous mode [ 467.561373][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 467.571595][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 467.582221][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 467.640922][T11543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 467.736699][T11524] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 467.738328][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 467.752532][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 467.766870][T11339] usb 4-1: USB disconnect, device number 95 [ 467.814579][T11541] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -19 [ 468.306492][ T35] bridge_slave_1: left allmulticast mode [ 468.344075][T11332] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 468.377418][T11556] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 468.417890][ T35] bridge_slave_1: left promiscuous mode [ 468.448129][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.487490][ T35] bridge_slave_0: left allmulticast mode [ 468.520241][ T35] bridge_slave_0: left promiscuous mode [ 468.534191][T11332] usb 3-1: device descriptor read/64, error -71 [ 468.549025][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.754169][ T5916] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 468.805565][T11332] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 468.898259][ T35] gretap0 (unregistering): left promiscuous mode [ 468.979264][T11332] usb 3-1: device descriptor read/64, error -71 [ 469.014962][ T5916] usb 6-1: Using ep0 maxpacket: 16 [ 469.037747][ T5916] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 469.072089][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.127011][T11332] usb usb3-port1: attempt power cycle [ 469.134049][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.152125][ T5916] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 469.186129][ T5916] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 469.228419][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.268725][ T5916] usb 6-1: config 0 descriptor?? [ 469.405169][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.483054][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.517038][ T35] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 469.534048][T11332] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 469.550812][ T35] bond0 (unregistering): Released all slaves [ 469.606487][T11332] usb 3-1: device descriptor read/8, error -71 [ 469.608440][ T35] bond1 (unregistering): Released all slaves [ 469.699279][ T35] bond2 (unregistering): Released all slaves [ 469.784243][ T5835] Bluetooth: hci0: command tx timeout [ 469.909701][T11332] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 470.025744][T11340] usb 2-1: USB disconnect, device number 91 [ 470.119683][T11332] usb 3-1: device descriptor read/8, error -71 [ 470.253570][T11332] usb usb3-port1: unable to enumerate USB device [ 470.834746][T11335] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 470.986627][T11335] usb 2-1: Using ep0 maxpacket: 16 [ 471.009136][T11546] chnl_net:caif_netlink_parms(): no params data found [ 471.018104][T11335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.037277][T11335] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 471.082370][T11335] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 471.107487][T11335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.126726][T11335] usb 2-1: config 0 descriptor?? [ 471.144992][ T42] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 471.157470][T11590] netlink: 496 bytes leftover after parsing attributes in process `syz.2.1454'. [ 471.241137][ T35] macvlan1: left promiscuous mode [ 471.326537][ T35] hsr_slave_0: left promiscuous mode [ 471.333283][ T35] hsr_slave_1: left promiscuous mode [ 471.352992][ T42] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 471.372212][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.381297][ T42] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.397951][ T29] audit: type=1326 audit(1775992872.425:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.1.1452" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffba4d9c819 code=0x0 [ 471.402085][ T42] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 471.429842][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.659806][ T42] usb 4-1: usb_control_msg returned -32 [ 471.684005][ T42] usbtmc 4-1:16.0: can't read capabilities [ 471.838051][ T35] team0 (unregistering): Port device team_slave_1 removed [ 471.854450][ T5835] Bluetooth: hci0: command tx timeout [ 471.867701][ T35] team0 (unregistering): Port device team_slave_0 removed [ 471.974422][ T5916] usbhid 6-1:0.0: can't add hid device: -71 [ 471.980697][ T5916] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 471.996113][ T5916] usb 6-1: USB disconnect, device number 30 [ 472.384967][T11546] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.392251][T11546] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.420910][T11546] bridge_slave_0: entered allmulticast mode [ 472.467499][T11546] bridge_slave_0: entered promiscuous mode [ 472.486178][T11546] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.497896][T11546] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.505845][T11546] bridge_slave_1: entered allmulticast mode [ 472.522006][T11546] bridge_slave_1: entered promiscuous mode [ 472.706918][T11546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.885375][T11546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.015161][T11546] team0: Port device team_slave_0 added [ 473.038017][T11546] team0: Port device team_slave_1 added [ 473.147935][T11546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.161442][T11546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.164236][ T42] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 473.225997][T11546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.246511][T11546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.264234][T11546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.291543][T11546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.368717][ T42] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.395104][ T42] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.421775][ T42] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 473.445133][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 473.460585][ T42] usb 3-1: SerialNumber: syz [ 473.538553][T10104] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 473.694648][T11335] usbhid 2-1:0.0: can't add hid device: -71 [ 473.696519][T11546] hsr_slave_0: entered promiscuous mode [ 473.707504][T11335] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 473.711393][T11546] hsr_slave_1: entered promiscuous mode [ 473.723043][T11546] debugfs: 'hsr0' already exists in 'hsr' [ 473.733976][T11340] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 473.741226][T11546] Cannot create hsr debugfs directory [ 473.755434][T11335] usb 2-1: USB disconnect, device number 92 [ 473.794607][ T42] usb 3-1: 0:2 : does not exist [ 473.806470][ T42] usb 3-1: unit 5: unexpected type 0x0e [ 473.903958][T11340] usb 6-1: device descriptor read/64, error -71 [ 473.919766][T11339] usb 4-1: USB disconnect, device number 96 [ 473.934505][ T5835] Bluetooth: hci0: command tx timeout [ 473.947792][ T42] usb 3-1: USB disconnect, device number 91 [ 474.040667][ T7545] udevd[7545]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.159613][T11340] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 474.213056][T11664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 474.336888][T11340] usb 6-1: device descriptor read/64, error -71 [ 474.445964][T11340] usb usb6-port1: attempt power cycle [ 474.552051][T11339] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 474.557502][T11674] netlink: 'syz.2.1468': attribute type 33 has an invalid length. [ 474.579506][T11674] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1468'. [ 474.612812][T11675] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1468'. [ 474.653222][T11674] `: renamed from team0 (while UP) [ 474.716275][T11339] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 474.725915][T11339] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 474.774238][T11339] usb 4-1: config 0 has no interface number 0 [ 474.784143][ T42] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 474.810810][T11339] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 474.822835][T11339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.831161][T11340] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 474.841600][T11339] usb 4-1: Product: syz [ 474.853181][T11339] usb 4-1: Manufacturer: syz [ 474.859652][T11340] usb 6-1: device descriptor read/8, error -71 [ 474.868750][T11339] usb 4-1: SerialNumber: syz [ 474.913415][T11339] usb 4-1: config 0 descriptor?? [ 474.943204][T11339] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22 [ 474.953977][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 474.969201][ T42] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 474.993123][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10 [ 475.004781][ T5916] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 475.023005][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25185, setting to 1024 [ 475.095238][ T42] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 475.115114][T11340] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 475.122897][ T42] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 475.154639][T11340] usb 6-1: device descriptor read/8, error -71 [ 475.174356][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 475.180682][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.181604][ T5916] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.206877][ T42] usb 2-1: config 0 descriptor?? [ 475.224186][ T5916] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.254083][ T5916] usb 3-1: config 0 interface 0 has no altsetting 0 [ 475.272350][ T5916] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 475.291745][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.325347][T11340] usb usb6-port1: unable to enumerate USB device [ 475.330773][ T5916] usb 3-1: config 0 descriptor?? [ 475.399929][T11546] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 475.421634][T11546] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 475.466280][T11546] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 475.490703][T11546] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 475.521096][T11688] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 475.531795][T11688] block device autoloading is deprecated and will be removed. [ 475.550375][T11688] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 475.831108][T11546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.860782][ T5916] nzxt-smart2 0003:1E71:2009.0026: unknown main item tag 0x0 [ 475.878018][ T5916] nzxt-smart2 0003:1E71:2009.0026: unknown main item tag 0x0 [ 475.897872][ T5916] nzxt-smart2 0003:1E71:2009.0026: unknown main item tag 0x0 [ 475.916226][ T5916] nzxt-smart2 0003:1E71:2009.0026: unknown main item tag 0x0 [ 476.009219][ T5916] nzxt-smart2 0003:1E71:2009.0026: unknown main item tag 0x0 [ 476.017496][ T5835] Bluetooth: hci0: command tx timeout [ 476.057391][ T5916] nzxt-smart2 0003:1E71:2009.0026: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 476.075876][T11546] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.156636][ T5916] usb 3-1: USB disconnect, device number 92 [ 476.177406][T10106] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.184714][T10106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.246812][T10106] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.254208][T10106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.478383][T11699] fido_id[11699]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 476.567848][T11546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.658184][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1470'. [ 476.737597][T11703] bridge0: entered promiscuous mode [ 476.744380][T11703] macsec1: entered promiscuous mode [ 476.749855][T11703] macsec1: entered allmulticast mode [ 476.756707][T11703] bridge0: entered allmulticast mode [ 476.782043][T11703] bridge0: port 4(macsec1) entered blocking state [ 476.813281][T11703] bridge0: port 4(macsec1) entered disabled state [ 476.842776][T11703] bridge0: left allmulticast mode [ 476.855486][T11703] bridge0: left promiscuous mode [ 477.094635][ T42] usbhid 2-1:0.0: can't add hid device: -71 [ 477.138343][ T42] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 477.168841][T11546] veth0_vlan: entered promiscuous mode [ 477.182679][ T42] usb 2-1: USB disconnect, device number 93 [ 477.226597][T11546] veth1_vlan: entered promiscuous mode [ 477.337365][ T5916] usb 4-1: USB disconnect, device number 97 [ 477.409767][T11546] veth0_macvtap: entered promiscuous mode [ 477.457660][T11546] veth1_macvtap: entered promiscuous mode [ 477.575749][T11546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.608887][T11546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.654429][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.708218][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.773704][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.774851][ T42] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 477.825761][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.844743][ T5916] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 477.913366][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.946209][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.984239][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 477.989147][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.998968][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.011301][ T42] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 478.019589][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 478.029050][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.030770][T11733] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1688227217 (3376454434 ns) > initial count (1786943000 ns). Using initial count to start timer. [ 478.043881][ T42] usb 2-1: config 0 has no interface number 0 [ 478.064826][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 478.079175][T11332] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 478.087158][ T5916] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 478.098874][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.145235][ T5916] usb 4-1: config 0 descriptor?? [ 478.151618][ T42] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 478.176344][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.188505][ T42] usb 2-1: Product: syz [ 478.193970][ T42] usb 2-1: Manufacturer: syz [ 478.204441][ T42] usb 2-1: SerialNumber: syz [ 478.225147][ T42] usb 2-1: config 0 descriptor?? [ 478.249370][T11332] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.270548][ T42] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 478.279782][T11332] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 478.299159][T11332] usb 6-1: config 1 has no interface number 1 [ 478.314873][T11332] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 478.344789][T11332] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 478.418610][ T29] audit: type=1326 audit(1775992879.445:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11721 comm="syz.3.1474" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdad59c819 code=0x0 [ 478.420894][T11332] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 478.470937][ T42] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 478.483877][T11332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.491962][T11332] usb 6-1: Product: syz [ 478.520299][ T42] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 478.530287][T11332] usb 6-1: Manufacturer: syz [ 478.535530][T11332] usb 6-1: SerialNumber: syz [ 478.557649][T11726] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 478.806036][T11332] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 478.829165][T11332] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 478.868458][T11723] fuse: Bad value for 'fd' [ 478.971988][T11332] usb 6-1: USB disconnect, device number 35 [ 479.232162][ T6870] udevd[6870]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.409315][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 480.409712][T11340] usb 2-1: USB disconnect, device number 94 [ 480.480625][T11340] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 480.557346][T11340] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 480.620373][T11340] quatech2 2-1:0.51: device disconnected [ 480.686947][ T5916] usbhid 4-1:0.0: can't add hid device: -71 [ 480.693027][ T5916] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 480.765119][ T5916] usb 4-1: USB disconnect, device number 98 [ 480.854366][T11789] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1479'. [ 480.954340][T11794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1479'. [ 481.130288][T11789] netlink: 'syz.1.1479': attribute type 11 has an invalid length. [ 481.596498][T11807] futex_wake_op: syz.3.1483 tries to shift op by 32; fix this program [ 481.603956][ T29] audit: type=1326 audit(1775992882.625:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdad59c819 code=0x7ffc0000 [ 481.654935][T11810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.674038][ T29] audit: type=1326 audit(1775992882.625:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7efdad59c819 code=0x7ffc0000 [ 481.887965][ T29] audit: type=1326 audit(1775992882.625:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdad59c819 code=0x7ffc0000 [ 481.930988][ T29] audit: type=1326 audit(1775992882.625:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efdad59c819 code=0x7ffc0000 [ 481.955189][ T5916] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 481.965790][ T29] audit: type=1326 audit(1775992882.625:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdad59c819 code=0x7ffc0000 [ 482.014046][ T42] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 482.022703][ T29] audit: type=1326 audit(1775992882.625:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdad59c819 code=0x7ffc0000 [ 482.084002][ T29] audit: type=1326 audit(1775992882.695:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdad59c819 code=0x7ffc0000 [ 482.179679][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 482.185290][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 482.197712][ T42] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 482.206395][ T42] usb 6-1: config 0 has no interface number 0 [ 482.221788][ T5916] usb 4-1: unable to get BOS descriptor or descriptor too short [ 482.240538][ T5916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.260137][ T42] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 482.281340][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.290962][ T5916] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 482.311587][ T29] audit: type=1326 audit(1775992882.695:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdad59c819 code=0x7ffc0000 [ 482.311609][ T42] usb 6-1: Product: syz [ 482.311633][ T42] usb 6-1: Manufacturer: syz [ 482.379580][ T29] audit: type=1326 audit(1775992882.705:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11805 comm="syz.3.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efdad59c819 code=0x7ffc0000 [ 482.393958][ T5916] usb 4-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40 [ 482.456733][ T42] usb 6-1: SerialNumber: syz [ 482.462892][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.509837][ T42] usb 6-1: config 0 descriptor?? [ 482.517165][ T5916] usb 4-1: Product: syz [ 482.527016][ T42] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 482.538435][ T5916] usb 4-1: Manufacturer: syz [ 482.548789][ T5916] usb 4-1: SerialNumber: syz [ 482.735401][ T42] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 482.755828][ T42] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 482.860338][ T5916] usb 4-1: unit 2 not found! [ 482.887941][ T5916] usb 4-1: unit 1 not found! [ 482.914134][T11338] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 483.082160][ T5916] usb 4-1: USB disconnect, device number 99 [ 483.188787][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 483.198406][T11332] usb 6-1: USB disconnect, device number 36 [ 483.217242][T11332] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 483.235512][T11335] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 483.271197][T11332] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 483.317048][T11332] quatech2 6-1:0.51: device disconnected [ 483.404624][T11335] usb 2-1: Using ep0 maxpacket: 8 [ 483.420661][T11335] usb 2-1: config 2 has an invalid interface number: 138 but max is 0 [ 483.439940][T11335] usb 2-1: config 2 has no interface number 0 [ 483.456649][T11335] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 483.479010][T11335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.755168][T11833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.764088][T11833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.785515][T11335] usb 2-1: USB disconnect, device number 95 [ 483.794087][ T5916] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 484.016398][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 484.024283][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.040292][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 484.053891][ T5916] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 484.063243][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.084495][ T5916] usb 4-1: config 0 descriptor?? [ 484.326924][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 484.326943][ T29] audit: type=1326 audit(1775992885.355:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11839 comm="syz.3.1490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdad59c819 code=0x0 [ 484.965004][T11855] ip6gre1: entered allmulticast mode [ 485.674600][T11335] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 485.845994][T11335] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 485.858436][T11335] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.872452][T11335] usb 3-1: config 0 has no interface number 0 [ 485.878671][T11335] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 485.889907][T11335] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.902884][T11335] usb 3-1: config 0 interface 52 has no altsetting 0 [ 485.911364][T11335] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 485.920832][T11335] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 485.929138][T11340] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 485.941366][T11335] usb 3-1: Manufacturer: syz [ 485.961885][T11335] usb 3-1: config 0 descriptor?? [ 485.975829][T11335] hub 3-1:0.52: bad descriptor, ignoring hub [ 485.981904][T11335] hub 3-1:0.52: probe with driver hub failed with error -5 [ 485.996054][T11881] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 486.106265][T11340] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 486.218677][T11340] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 486.236673][T11335] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input60 [ 486.251083][T11340] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 486.289241][T11340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.322102][T11874] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 486.340747][T11340] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 486.434379][T11339] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 486.544277][T11332] usb 3-1: USB disconnect, device number 94 [ 486.604825][T11339] usb 6-1: Using ep0 maxpacket: 16 [ 486.622922][T11339] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 486.623530][ T5916] usbhid 4-1:0.0: can't add hid device: -71 [ 486.641700][T11339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10 [ 486.650381][ T5916] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 486.706142][T11339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25185, setting to 1024 [ 486.726103][T11339] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 486.748019][T11885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.781218][ T5916] usb 4-1: USB disconnect, device number 100 [ 486.795822][T11885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.808685][T11339] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 486.851013][T11885] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1500'. [ 486.863971][T11339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.893359][T11339] usb 6-1: config 0 descriptor?? [ 486.900074][T11885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1500'. [ 487.011150][ T5916] usb 2-1: USB disconnect, device number 96 [ 487.280760][T11894] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1505'. [ 487.593982][T11338] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 487.755362][T11338] usb 3-1: Using ep0 maxpacket: 16 [ 487.762893][T11338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.776936][T11338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.787690][T11338] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 487.823737][T11338] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 487.847664][T11338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.872147][T11338] usb 3-1: config 0 descriptor?? [ 487.965364][ T5916] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 488.141807][ T5916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.152501][ T5916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 488.163866][ T5916] usb 4-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 488.174930][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 488.183653][ T5916] usb 4-1: SerialNumber: syz [ 488.359577][T11338] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0027/input/input61 [ 488.401782][T11338] microsoft 0003:045E:07DA.0027: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 488.440432][ T5916] usb 4-1: 0:2 : does not exist [ 488.530125][T11338] usb 3-1: USB disconnect, device number 95 [ 488.599923][ T5916] usb 4-1: USB disconnect, device number 101 [ 488.722560][T11903] fido_id[11903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 488.735775][ T7545] udevd[7545]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.767309][T11907] netlink: 'syz.1.1510': attribute type 39 has an invalid length. [ 489.434434][ T5916] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 489.587678][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 489.615391][ T5916] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 489.643367][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 489.644646][T11339] usbhid 6-1:0.0: can't add hid device: -71 [ 489.660801][T11339] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 489.674618][ T5916] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 489.690801][T11339] usb 6-1: USB disconnect, device number 37 [ 489.703087][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.716841][ T5916] usb 3-1: Product: syz [ 489.736253][ T5916] usb 3-1: Manufacturer: syz [ 489.749827][ T5916] usb 3-1: SerialNumber: syz [ 489.761986][ T5916] usb 3-1: config 0 descriptor?? [ 489.781828][ T5916] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 489.793517][ T5916] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 490.355258][T11338] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 490.379874][ T5916] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 490.387993][ T5916] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 490.424708][T11942] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 490.524119][T11338] usb 4-1: Using ep0 maxpacket: 16 [ 490.535087][T11338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 490.549390][T11338] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 490.559577][T11338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.581729][T11338] usb 4-1: Product: syz [ 490.586716][T11332] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 490.594827][T11338] usb 4-1: Manufacturer: syz [ 490.600844][ T5916] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 490.608684][T11338] usb 4-1: SerialNumber: syz [ 490.613929][ T5916] em28xx 3-1:0.0: No AC97 audio processor [ 490.622385][T11338] usb 4-1: config 0 descriptor?? [ 490.659515][T11338] hub 4-1:0.0: bad descriptor, ignoring hub [ 490.666418][T11338] hub 4-1:0.0: probe with driver hub failed with error -5 [ 490.678025][T11338] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 490.753906][T11332] usb 2-1: Using ep0 maxpacket: 16 [ 490.771002][T11332] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 490.799085][T11332] usb 2-1: can't read configurations, error -22 [ 490.944174][T11332] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 490.985042][ T29] audit: type=1326 audit(1775992892.015:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11948 comm="syz.5.1523" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4bcd9c819 code=0x0 [ 491.103972][T11332] usb 2-1: Using ep0 maxpacket: 16 [ 491.112013][T11332] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 491.120527][T11332] usb 2-1: can't read configurations, error -22 [ 491.127713][T11332] usb usb2-port1: attempt power cycle [ 491.475308][T11332] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 491.516404][T11332] usb 2-1: Using ep0 maxpacket: 16 [ 491.536892][T11332] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 491.554153][T11332] usb 2-1: can't read configurations, error -22 [ 491.694304][T11332] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 491.735640][T11332] usb 2-1: Using ep0 maxpacket: 16 [ 491.744475][T11332] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 491.752683][T11332] usb 2-1: can't read configurations, error -22 [ 491.759551][T11332] usb usb2-port1: unable to enumerate USB device [ 491.924164][T11340] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 492.086116][T11340] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.098093][T11340] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 492.108765][T11340] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 492.125576][T11340] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 492.135288][T11340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.143368][T11340] usb 6-1: Product: syz [ 492.147889][T11340] usb 6-1: Manufacturer: syz [ 492.152554][T11340] usb 6-1: SerialNumber: syz [ 492.166409][T11340] cdc_mbim 6-1:1.0: skipping garbage [ 492.171780][T11340] cdc_mbim 6-1:1.0: CDC Union missing and no IAD found [ 492.181847][T11340] cdc_mbim 6-1:1.0: bind() failure [ 492.401983][T11340] usb 3-1: USB disconnect, device number 96 [ 492.423242][T11340] em28xx 3-1:0.0: Disconnecting em28xx [ 492.437564][T11335] usb 6-1: USB disconnect, device number 38 [ 492.464519][T11340] em28xx 3-1:0.0: Freeing device [ 492.491394][T11968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 492.610190][T11975] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1528'. [ 492.619759][T11975] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1528'. [ 492.646746][T11975] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1528'. [ 493.089122][T11339] usb 4-1: USB disconnect, device number 102 [ 493.102799][T11984] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 493.284519][T11340] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 493.454044][T11335] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 493.465880][T11340] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 493.480231][T11340] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 493.507857][T11340] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 493.537598][T11340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.584312][T11982] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 493.621794][T11340] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 493.629074][T11339] usb 4-1: new low-speed USB device number 103 using dummy_hcd [ 493.643360][T11335] usb 6-1: Using ep0 maxpacket: 16 [ 493.667042][T11335] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 493.766974][T11335] usb 6-1: config 0 interface 0 has no altsetting 0 [ 493.798756][T11335] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 493.809478][T11339] usb 4-1: Invalid ep0 maxpacket: 16 [ 493.816423][T11335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.851842][T11335] usb 6-1: Product: syz [ 493.861592][T11335] usb 6-1: Manufacturer: syz [ 493.870533][T11335] usb 6-1: SerialNumber: syz [ 493.918645][T11335] usb 6-1: config 0 descriptor?? [ 493.960857][T11998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1529'. [ 493.984251][T11339] usb 4-1: new low-speed USB device number 104 using dummy_hcd [ 494.023481][T11998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1529'. [ 494.050803][T11338] usb 3-1: USB disconnect, device number 97 [ 494.164051][T11339] usb 4-1: Invalid ep0 maxpacket: 16 [ 494.174989][T11335] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input62 [ 494.189350][T11339] usb usb4-port1: attempt power cycle [ 494.554219][T11339] usb 4-1: new low-speed USB device number 105 using dummy_hcd [ 494.613961][T11335] rc_core: IR keymap rc-imon-pad not found [ 494.620077][T11335] Registered IR keymap rc-empty [ 494.629018][T11335] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 494.642557][T11339] usb 4-1: Invalid ep0 maxpacket: 16 [ 494.660776][T11335] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 494.697144][T11335] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 494.731061][T11335] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input63 [ 494.769294][T11335] imon 6-1:0.0: iMON device (15c2:0041, intf0) on usb<6:39> initialized [ 494.787500][T11339] usb 4-1: new low-speed USB device number 106 using dummy_hcd [ 494.844609][T11338] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 494.866287][T11339] usb 4-1: Invalid ep0 maxpacket: 16 [ 494.872208][T11339] usb usb4-port1: unable to enumerate USB device [ 495.004053][T11338] usb 2-1: Using ep0 maxpacket: 16 [ 495.034401][T11338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.046217][T11338] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 495.180651][T11338] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 495.193107][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 495.202305][T11335] usb 6-1: USB disconnect, device number 39 [ 495.234521][T11338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.292410][T11338] usb 2-1: config 0 descriptor?? [ 495.728475][ T29] audit: type=1326 audit(1775992896.755:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12001 comm="syz.1.1536" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffba4d9c819 code=0x0 [ 497.412742][T12025] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1543'. [ 497.541548][T12033] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1545'. [ 497.578855][T12033] veth0_to_bridge: left allmulticast mode [ 497.584917][T11332] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 497.605592][ C1] net_ratelimit: 5 callbacks suppressed [ 497.605613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.624737][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.637960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.650520][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.663153][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.675973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.688479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.701120][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.713771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.726542][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.775322][T12033] veth0_to_bridge: left promiscuous mode [ 497.804456][T12033] bridge0: port 3(veth0_to_bridge) entered disabled state [ 497.826907][T12033] bridge_slave_0: left allmulticast mode [ 497.832994][T12033] bridge_slave_0: left promiscuous mode [ 497.839324][T12033] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.855377][T11338] usbhid 2-1:0.0: can't add hid device: -71 [ 497.861442][T11338] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 497.873769][T11338] usb 2-1: USB disconnect, device number 101 [ 497.903473][T12033] bridge_slave_1: left allmulticast mode [ 497.910584][T12033] bridge_slave_1: left promiscuous mode [ 497.917071][T12033] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.932257][T12033] bond0: (slave bond_slave_0): Releasing backup interface [ 497.959718][T12033] bond0: (slave bond_slave_1): Releasing backup interface [ 497.968845][T11332] usb 3-1: Using ep0 maxpacket: 16 [ 497.978951][T11332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 498.000162][T12033] team0: Port device team_slave_0 removed [ 498.012207][T12033] team0: Port device team_slave_1 removed [ 498.021288][T11332] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 498.032653][T12033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.041963][T11332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.050668][T11332] usb 3-1: Product: syz [ 498.056339][T12033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.063553][T11332] usb 3-1: Manufacturer: syz [ 498.069728][T11332] usb 3-1: SerialNumber: syz [ 498.076005][T12033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.087087][T11332] usb 3-1: config 0 descriptor?? [ 498.097514][T12033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.107808][T11332] hub 3-1:0.0: bad descriptor, ignoring hub [ 498.113768][T11332] hub 3-1:0.0: probe with driver hub failed with error -5 [ 498.130160][T11332] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 498.237203][T12043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 498.446936][T12047] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1548'. [ 498.737070][ T5143] Bluetooth: hci5: command 0x0406 tx timeout [ 498.802331][T11339] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 498.933988][T11337] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 498.974483][T11339] usb 6-1: Using ep0 maxpacket: 16 [ 498.985598][T11339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.013864][T11339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.023765][T11339] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 499.087623][T11339] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 499.113899][T11337] usb 2-1: Using ep0 maxpacket: 16 [ 499.122072][T11339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.138305][T11337] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 499.151494][T11337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10 [ 499.164181][T11339] usb 6-1: config 0 descriptor?? [ 499.171231][T11337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25185, setting to 1024 [ 499.188721][T11337] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 499.205884][T11337] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 499.244081][T11337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.271225][T11337] usb 2-1: config 0 descriptor?? [ 499.590480][T11339] microsoft 0003:045E:07DA.0028: item fetching failed at offset 8/34 [ 499.643060][T11339] microsoft 0003:045E:07DA.0028: parse failed [ 499.668357][T11339] microsoft 0003:045E:07DA.0028: probe with driver microsoft failed with error -22 [ 499.793465][T12052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.802756][T12052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.192359][T12057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1551'. [ 500.204527][ T5916] usb 3-1: USB disconnect, device number 98 [ 500.263062][T12057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1551'. [ 500.289403][T12057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1551'. [ 500.351865][T11332] usb 6-1: USB disconnect, device number 40 [ 500.500573][T12063] netlink: 'syz.5.1554': attribute type 1 has an invalid length. [ 500.613929][ T5916] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 500.782967][ T5916] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 500.801656][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.812037][T11332] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 500.821230][ T5916] usb 3-1: Product: syz [ 500.827167][ T5916] usb 3-1: Manufacturer: syz [ 500.832442][ T5916] usb 3-1: SerialNumber: syz [ 500.843713][ T5916] usb 3-1: config 0 descriptor?? [ 500.975319][T11332] usb 6-1: Using ep0 maxpacket: 16 [ 500.985089][T11332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.015198][T11332] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 501.045829][T11332] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 501.075270][T11332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.102219][T11332] usb 6-1: config 0 descriptor?? [ 501.287576][T12059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.302801][T12059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.313580][T12059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.330052][T12059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.394600][T11337] usbhid 2-1:0.0: can't add hid device: -71 [ 501.407216][T11337] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 501.427715][ T29] audit: type=1326 audit(1775992902.455:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12065 comm="syz.5.1556" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4bcd9c819 code=0x0 [ 501.452300][T11337] usb 2-1: USB disconnect, device number 102 [ 501.545336][T11335] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 501.699901][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.706462][T11335] usb 4-1: Using ep0 maxpacket: 32 [ 501.711704][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.727785][T11335] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 501.737286][T11335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.749006][T11335] usb 4-1: config 0 descriptor?? [ 501.758712][T11335] gspca_main: sunplus-2.14.0 probing 041e:400b [ 501.934015][T11337] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 501.962201][T12086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.973526][T12086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.005791][ T5916] usb 3-1: unexpected transceiver, part 0xf6 version 0x03 [ 502.094277][T11337] usb 2-1: Using ep0 maxpacket: 16 [ 502.101624][T11337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 502.116706][T11337] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 502.126380][T11337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.136245][T11337] usb 2-1: Product: syz [ 502.140505][T11337] usb 2-1: Manufacturer: syz [ 502.145190][T11337] usb 2-1: SerialNumber: syz [ 502.154509][T11337] usb 2-1: config 0 descriptor?? [ 502.162477][T11337] hub 2-1:0.0: bad descriptor, ignoring hub [ 502.168635][T11337] hub 2-1:0.0: probe with driver hub failed with error -5 [ 502.179424][T11337] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 502.211674][ T5916] usb 3-1: Firmware version (0.0) predates our first public release. [ 502.222699][ T5916] usb 3-1: Please update to version 0.2 or newer [ 502.230526][ T5916] usb 3-1: atusb_probe: initialization failed, error = -19 [ 502.244929][ T5916] usb 3-1: USB disconnect, device number 99 [ 503.016064][T12086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.025244][T12086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.104652][ T5916] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 503.264061][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 503.271451][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.282823][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.293199][ T5916] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 503.306297][ T5916] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 503.315636][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.327030][ T5916] usb 3-1: config 0 descriptor?? [ 503.544192][T11335] gspca_sunplus: reg_w_riv err -110 [ 503.550126][T11335] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 503.646813][T11332] usbhid 6-1:0.0: can't add hid device: -71 [ 503.659094][T11332] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 503.674363][T11332] usb 6-1: USB disconnect, device number 41 [ 503.777452][ T5916] microsoft 0003:045E:07DA.0029: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 503.799163][ T5916] microsoft 0003:045E:07DA.0029: no inputs found [ 503.811677][ T5916] microsoft 0003:045E:07DA.0029: could not initialize ff, continuing anyway [ 503.920697][T12111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.959229][T12111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.979942][T12111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.997384][T12111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.016227][T12111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.041840][T12111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.061301][T12111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.064218][T12111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.112083][T12121] sctp: [Deprecated]: syz.0.1569 (pid 12121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 504.112083][T12121] Use struct sctp_sack_info instead [ 504.144154][T12121] net_ratelimit: 137 callbacks suppressed [ 504.144206][T12121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.489076][T11340] usb 2-1: USB disconnect, device number 103 [ 504.718201][T12128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.873484][T12131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.948899][T12131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.017459][T12135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1574'. [ 505.073958][T11332] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 505.087017][T12135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1574'. [ 505.114456][T12135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1574'. [ 505.225950][T11332] usb 2-1: Using ep0 maxpacket: 16 [ 505.242266][T11332] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 505.271544][T11332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10 [ 505.288884][T11332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25185, setting to 1024 [ 505.326465][T11332] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 505.360181][T11332] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 505.388226][T11332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.396584][T11338] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 505.418723][T11332] usb 2-1: config 0 descriptor?? [ 505.537240][ T86] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 505.580210][T11338] usb 6-1: Using ep0 maxpacket: 16 [ 505.619715][T11338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.657946][T11338] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 505.732195][T11338] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 505.763770][T11338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.809726][T11338] usb 6-1: config 0 descriptor?? [ 505.886089][T11335] usb 3-1: USB disconnect, device number 100 [ 506.057351][ T29] audit: type=1326 audit(1775992907.085:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12136 comm="syz.5.1575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4bcd9c819 code=0x0 [ 506.450617][T12157] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1581'. [ 506.528879][T12157] loop5: detected capacity change from 0 to 7 [ 506.902799][T12161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.902799][T12157] Dev loop5: unable to read RDB block 7 [ 506.902848][T12157] loop5: unable to read partition table [ 506.998947][T12157] loop5: partition table beyond EOD, truncated [ 507.016651][T12157] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 507.021896][T12161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.366594][T11332] usbhid 2-1:0.0: can't add hid device: -71 [ 508.372785][T11332] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 508.388372][T11332] usb 2-1: USB disconnect, device number 104 [ 508.415000][T12169] bond5: option tlb_dynamic_lb: invalid value (16) [ 508.438448][T12169] bond5 (unregistering): Released all slaves [ 508.565512][T11338] usbhid 6-1:0.0: can't add hid device: -71 [ 508.584702][T11338] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 508.684019][T11338] usb 6-1: USB disconnect, device number 42 [ 508.890631][T12178] sctp: [Deprecated]: syz.0.1585 (pid 12178) Use of int in max_burst socket option. [ 508.890631][T12178] Use struct sctp_assoc_value instead [ 509.280806][T12185] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1587'. [ 509.289971][T12185] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1587'. [ 509.313247][T12185] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1587'. [ 509.937857][T12197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.978138][T12197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.031803][T12188] input: syz0 as /devices/virtual/input/input64 [ 510.247242][T12204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.268202][T12205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.289742][T12204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.376013][ T29] audit: type=1326 audit(1775992911.405:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.3.1594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdad59c819 code=0x0 [ 510.737019][T11332] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 510.815350][T12214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.893936][T11332] usb 3-1: Using ep0 maxpacket: 16 [ 510.904964][T11332] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 510.919151][T11332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10 [ 510.945820][T11332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25185, setting to 1024 [ 510.962370][T11332] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 511.000536][T11332] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 511.004271][T11340] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 511.010716][T11332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.029155][T11332] usb 3-1: config 0 descriptor?? [ 511.174847][T12224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1599'. [ 511.184138][T11340] usb 6-1: Using ep0 maxpacket: 8 [ 511.189299][T12224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1599'. [ 511.215188][T11340] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 511.229147][T12224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1599'. [ 511.240837][T11340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.258202][T11340] usb 6-1: Product: syz [ 511.262561][T11340] usb 6-1: Manufacturer: syz [ 511.283975][T11340] usb 6-1: SerialNumber: syz [ 511.307593][T11340] usb 6-1: config 0 descriptor?? [ 511.330623][T11340] gspca_main: sq930x-2.14.0 probing 2770:930c [ 511.453240][T11332] hid (null): invalid report_size 29797 [ 511.459298][T11332] hid (null): invalid report_size 29797 [ 511.465546][T11332] hid (null): invalid report_size 24320 [ 511.471816][T11332] hid (null): bogus close delimiter [ 511.508564][T11332] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.002A/input/input65 [ 511.607248][T11332] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.002A/input/input66 [ 511.876626][T11340] gspca_sq930x: ucbus_write failed -71 [ 511.884333][T11332] kye 0003:0458:5013.002A: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 511.912811][T11340] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 511.995620][T11340] usb 6-1: USB disconnect, device number 43 [ 512.705354][T12241] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1604'. [ 512.726404][T12241] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1604'. [ 512.747108][T12241] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1604'. [ 512.773401][T12243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.800154][T12243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.033985][T11335] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 513.184113][T11337] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 513.191908][T11335] usb 6-1: Using ep0 maxpacket: 32 [ 513.201512][T11335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.212747][T11335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.224327][T11335] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 513.233501][T11335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.246541][T11335] usb 6-1: config 0 descriptor?? [ 513.328374][T11337] usb 2-1: device descriptor read/64, error -71 [ 513.584097][T11337] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 513.695898][T12259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1608'. [ 513.711797][T12259] netdevsim netdevsim3: Direct firmware load for / [ 513.711797][T12259] failed with error -2 [ 513.726789][T11337] usb 2-1: device descriptor read/64, error -71 [ 513.743676][T11335] usbhid 6-1:0.0: can't add hid device: -71 [ 513.753647][T11335] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 513.763216][T12259] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 513.763216][T12259] [ 513.799845][T11332] usb 3-1: USB disconnect, device number 101 [ 513.845950][T11337] usb usb2-port1: attempt power cycle [ 513.901303][T11335] usb 6-1: USB disconnect, device number 44 [ 514.243957][T11337] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 514.284878][T11337] usb 2-1: device descriptor read/8, error -71 [ 514.535826][T11337] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 514.561328][T12270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 514.617839][T11337] usb 2-1: device descriptor read/8, error -71 [ 514.653967][T11328] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 514.744380][T11337] usb usb2-port1: unable to enumerate USB device [ 514.818300][T11328] usb 6-1: Using ep0 maxpacket: 8 [ 514.891643][T11328] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 514.907717][T11328] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.920464][T12273] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1613'. [ 514.929660][T11328] usb 6-1: Product: syz [ 514.934023][T11328] usb 6-1: Manufacturer: syz [ 514.938651][T11328] usb 6-1: SerialNumber: syz [ 514.948014][T12274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.967612][T11328] usb 6-1: config 0 descriptor?? [ 514.973059][T12274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.986995][T11328] gspca_main: sq930x-2.14.0 probing 2770:930c [ 515.394288][T11328] gspca_sq930x: ucbus_write failed -71 [ 515.411256][T11328] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 515.423323][T11328] usb 6-1: USB disconnect, device number 45 [ 515.459013][T12278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1615'. [ 515.469071][T12278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1615'. [ 515.481062][T12278] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 515.723916][T11337] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 516.024080][T11337] usb 3-1: Using ep0 maxpacket: 8 [ 516.030837][T11337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 516.193351][T11337] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 516.210006][T11337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.236542][T11337] usb 3-1: Product: syz [ 516.246461][T11337] usb 3-1: Manufacturer: syz [ 516.252551][T11337] usb 3-1: SerialNumber: syz [ 516.267758][T11337] usb 3-1: config 0 descriptor?? [ 516.474020][T11328] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 516.703987][T11328] usb 2-1: Using ep0 maxpacket: 16 [ 516.714541][T11328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.726025][T11328] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 516.739403][T11328] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 516.760322][T11328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.808891][T12294] __nla_validate_parse: 2 callbacks suppressed [ 516.808912][T12294] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1620'. [ 516.829024][T12294] IPVS: sh: FWM 3 0x00000003 - no destination available [ 516.878089][T11328] usb 2-1: config 0 descriptor?? [ 517.077572][T11332] usb 3-1: USB disconnect, device number 102 [ 517.299801][T12300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 517.370685][ T29] audit: type=1326 audit(1775992918.395:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.1.1618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffba4d9c819 code=0x0 [ 517.843915][T11340] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 517.843996][T11338] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 518.004247][T11338] usb 3-1: Using ep0 maxpacket: 16 [ 518.016289][T11340] usb 6-1: Using ep0 maxpacket: 16 [ 518.025887][T11338] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 518.039321][T11338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10 [ 518.041444][T11340] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 518.052296][T11338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25185, setting to 1024 [ 518.076921][T11338] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 518.104043][T11338] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 518.104801][T11340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.113577][T11338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.118116][T11338] usb 3-1: config 0 descriptor?? [ 518.155006][T11340] usb 6-1: config 0 descriptor?? [ 518.168856][T11340] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 518.624167][T11338] hid (null): invalid report_size 29797 [ 518.629969][T11338] hid (null): invalid report_size 29797 [ 518.636235][T11338] hid (null): invalid report_size 24320 [ 518.642509][T11338] hid (null): bogus close delimiter [ 518.671077][T11338] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.002B/input/input67 [ 518.777601][T11338] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.002B/input/input68 [ 518.852700][T11338] kye 0003:0458:5013.002B: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 519.202439][T12323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.231921][T12323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.509131][T11328] usbhid 2-1:0.0: can't add hid device: -71 [ 519.532216][T11328] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 519.562455][T11328] usb 2-1: USB disconnect, device number 109 [ 519.638247][T12328] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1631'. [ 519.968242][T12333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.978515][T12332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.990449][T12333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.991852][T12332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.571252][T11328] usb 6-1: USB disconnect, device number 46 [ 520.921359][T11328] usb 3-1: USB disconnect, device number 103 [ 521.159327][T11335] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 521.271893][T12351] : renamed from vlan0 (while UP) [ 521.395986][T11335] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 521.414851][T11335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.422921][T11335] usb 6-1: Product: syz [ 521.434043][T11335] usb 6-1: Manufacturer: syz [ 521.490650][T11335] usb 6-1: SerialNumber: syz [ 521.633907][T11332] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 521.764053][T11332] usb 2-1: device descriptor read/64, error -71 [ 521.774394][T11338] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 521.917881][T11335] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 521.934949][T11335] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 521.944392][T11338] usb 3-1: Using ep0 maxpacket: 16 [ 521.955359][T11338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.983983][T11338] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 521.998168][T11338] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 522.007556][T11332] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 522.015441][T11338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.034587][T11338] usb 3-1: config 0 descriptor?? [ 522.154004][T11332] usb 2-1: device descriptor read/64, error -71 [ 522.264259][T11332] usb usb2-port1: attempt power cycle [ 522.298578][ T29] audit: type=1326 audit(1775992923.325:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12357 comm="syz.2.1641" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91ab59c819 code=0x0 [ 522.613992][T11332] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 522.654707][T11332] usb 2-1: device descriptor read/8, error -71 [ 522.894005][T11332] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 522.916959][T11332] usb 2-1: device descriptor read/8, error -71 [ 523.034536][T11332] usb usb2-port1: unable to enumerate USB device [ 523.159200][T11335] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 523.173418][T11335] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 523.237609][T12365] Invalid argument reading file caps for ./file0 [ 523.319017][T12368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.330049][T12368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.530758][T12367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.541327][T12367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.603055][T11335] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 523.615548][T11335] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 523.627838][T11335] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 523.642744][T11335] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 523.656921][T11335] usb 6-1: USB disconnect, device number 47 [ 524.404077][T12380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 524.624758][T12383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.634082][T12383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.838897][T11338] usbhid 3-1:0.0: can't add hid device: -71 [ 524.851264][T11338] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 524.884003][T11338] usb 3-1: USB disconnect, device number 104 [ 525.679988][T12397] fuse: Bad value for 'fd' [ 525.736703][T12386] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 525.742844][T12386] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 525.758888][T12386] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 525.771060][T12386] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 525.795995][T12386] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 526.084955][T12410] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 12410 comm: syz.0.1654) [ 526.309506][ T29] audit: type=1800 audit(1775992927.125:437): pid=12410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1654" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=47179 res=0 errno=0 [ 526.409261][T11335] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 526.421870][T11332] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 526.623890][T11335] usb 6-1: Using ep0 maxpacket: 32 [ 526.631045][T11335] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 526.639856][T11335] usb 6-1: config 0 has no interface number 0 [ 526.646338][T11335] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 526.663362][T11335] usb 6-1: config 0 interface 89 has no altsetting 0 [ 526.675707][T11335] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 526.685187][T11335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.693341][T11335] usb 6-1: Product: syz [ 526.698637][T11335] usb 6-1: Manufacturer: syz [ 526.703576][T11335] usb 6-1: SerialNumber: syz [ 526.704437][T11332] usb 2-1: Using ep0 maxpacket: 32 [ 526.721508][T11335] usb 6-1: config 0 descriptor?? [ 526.747318][T11332] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 526.762388][T11332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.774578][T11335] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 526.791358][T11335] em28xx 6-1:0.89: Video interface 89 found: [ 526.808333][T11332] usb 2-1: Product: syz [ 526.822867][T11332] usb 2-1: Manufacturer: syz [ 526.842516][T11332] usb 2-1: SerialNumber: syz [ 526.881901][T11332] usb 2-1: config 0 descriptor?? [ 526.928836][T11332] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 526.976391][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 527.368832][T11335] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 527.388639][T12418] kvm: kvm [12417]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xc0000000 [ 527.489962][T12418] kvm: kvm [12417]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x100000000 [ 527.504133][T12418] kvm: kvm [12417]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 527.576635][T12418] kvm: kvm [12417]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 527.610910][T12418] kvm: kvm [12417]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 527.639219][T11332] gspca_ov534_9: reg_w failed -110 [ 527.699041][T12418] kvm: kvm [12417]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 527.736423][T12418] kvm: kvm [12417]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 527.774438][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 527.778743][T12424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.800199][T12418] kvm: kvm [12417]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 527.865737][T12418] kvm: kvm [12417]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 527.885778][T12424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.901395][T12418] kvm: kvm [12417]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 528.174054][T11332] gspca_ov534_9: Unknown sensor 0000 [ 528.174164][T11332] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 528.247357][ T29] audit: type=1326 audit(1775992929.265:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.3.1659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdad59c819 code=0x0 [ 528.964160][ T29] audit: type=1326 audit(1775992929.905:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.0.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288ad9c819 code=0x7ffc0000 [ 528.987588][ T29] audit: type=1326 audit(1775992929.905:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.0.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288ad9c819 code=0x7ffc0000 [ 529.023652][ T29] audit: type=1326 audit(1775992929.905:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.0.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f288ad9c819 code=0x7ffc0000 [ 529.053954][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 529.068186][ T29] audit: type=1326 audit(1775992929.905:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.0.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288ad9c819 code=0x7ffc0000 [ 529.119737][T11340] usb 2-1: USB disconnect, device number 114 [ 529.139327][ T29] audit: type=1326 audit(1775992929.905:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.0.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288ad9c819 code=0x7ffc0000 [ 529.213517][ T29] audit: type=1326 audit(1775992929.905:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.0.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f288ad9c819 code=0x7ffc0000 [ 529.291913][ T29] audit: type=1326 audit(1775992929.905:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.0.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288ad9c819 code=0x7ffc0000 [ 529.355751][T11335] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 529.366738][T11335] em28xx 6-1:0.89: board has no eeprom [ 529.396293][ T29] audit: type=1326 audit(1775992929.905:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.0.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288ad9c819 code=0x7ffc0000 [ 529.403192][T12438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.533895][T11335] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 529.573262][T11335] em28xx 6-1:0.89: analog set to bulk mode. [ 529.603668][T11340] em28xx 6-1:0.89: Registering V4L2 extension [ 529.647449][T11340] em28xx 6-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 529.664229][T11335] usb 6-1: USB disconnect, device number 48 [ 529.678618][T11340] em28xx 6-1:0.89: reading from i2c device at 0x48 failed (error=-19) [ 529.695035][T11335] em28xx 6-1:0.89: Disconnecting em28xx [ 529.706538][T11340] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 529.721254][T11340] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 529.737503][T11340] em28xx 6-1:0.89: No AC97 audio processor [ 529.759965][T11340] usb 6-1: Decoder not found [ 529.774145][T11328] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 529.793866][T11340] em28xx 6-1:0.89: failed to create media graph [ 529.823932][T11340] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 529.845273][T11332] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 529.853929][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 529.879824][T12445] ================================================================== [ 529.887978][T12445] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 529.895374][T12445] Read of size 8 at addr ffff888028850790 by task v4l_id/12445 [ 529.902977][T12445] [ 529.905422][T12445] CPU: 1 UID: 0 PID: 12445 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 529.905442][T12445] Tainted: [L]=SOFTLOCKUP [ 529.905447][T12445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 529.905455][T12445] Call Trace: [ 529.905463][T12445] [ 529.905469][T12445] dump_stack_lvl+0xe8/0x150 [ 529.905491][T12445] print_report+0xba/0x230 [ 529.905506][T12445] ? v4l2_fh_open+0xac/0x420 [ 529.905523][T12445] kasan_report+0x117/0x150 [ 529.905539][T12445] ? v4l2_fh_open+0xac/0x420 [ 529.905557][T12445] v4l2_fh_open+0xac/0x420 [ 529.905573][T12445] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 529.905591][T12445] em28xx_v4l2_open+0x157/0x9a0 [ 529.905604][T12445] ? do_raw_spin_lock+0x12b/0x2f0 [ 529.905618][T12445] v4l2_open+0x1bf/0x3a0 [ 529.905636][T12445] chrdev_open+0x4cd/0x5e0 [ 529.905651][T12445] ? __pfx_chrdev_open+0x10/0x10 [ 529.905665][T12445] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 529.905679][T12445] ? __pfx_chrdev_open+0x10/0x10 [ 529.905692][T12445] do_dentry_open+0x785/0x14e0 [ 529.905711][T12445] vfs_open+0x3b/0x340 [ 529.905726][T12445] ? path_openat+0x2df0/0x3860 [ 529.905739][T12445] path_openat+0x2e08/0x3860 [ 529.905755][T12445] ? __pfx_stack_trace_save+0x10/0x10 [ 529.905768][T12445] ? stack_depot_save_flags+0x33/0x810 [ 529.905788][T12445] ? __pfx_path_openat+0x10/0x10 [ 529.905800][T12445] ? __x64_sys_openat+0x138/0x170 [ 529.905816][T12445] ? do_syscall_64+0x14d/0xf80 [ 529.905836][T12445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.905857][T12445] ? __lock_acquire+0x6b5/0x2cf0 [ 529.905880][T12445] do_file_open+0x23e/0x4a0 [ 529.905902][T12445] ? __pfx_do_file_open+0x10/0x10 [ 529.905928][T12445] ? _raw_spin_unlock+0x28/0x50 [ 529.905947][T12445] ? alloc_fd+0x64b/0x6c0 [ 529.905974][T12445] do_sys_openat2+0x113/0x200 [ 529.906001][T12445] ? __pfx_do_sys_openat2+0x10/0x10 [ 529.906021][T12445] ? exc_page_fault+0x6a/0xc0 [ 529.906035][T12445] ? do_user_addr_fault+0xc6f/0x1340 [ 529.906051][T12445] __x64_sys_openat+0x138/0x170 [ 529.906068][T12445] do_syscall_64+0x14d/0xf80 [ 529.906082][T12445] ? trace_irq_disable+0x3b/0x150 [ 529.906093][T12445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.906104][T12445] ? clear_bhb_loop+0x40/0x90 [ 529.906116][T12445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.906128][T12445] RIP: 0033:0x7f2356fdc407 [ 529.906141][T12445] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 529.906151][T12445] RSP: 002b:00007ffd82e3d290 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 529.906165][T12445] RAX: ffffffffffffffda RBX: 00007f2356f50880 RCX: 00007f2356fdc407 [ 529.906174][T12445] RDX: 0000000000000000 RSI: 00007ffd82e3ef1c RDI: ffffffffffffff9c [ 529.906183][T12445] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 529.906190][T12445] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 529.906197][T12445] R13: 00007ffd82e3d4e0 R14: 00007f2357235000 R15: 000055e73f5d54d8 [ 529.906210][T12445] [ 529.906214][T12445] [ 530.208927][T12445] Allocated by task 11340: [ 530.213339][T12445] kasan_save_track+0x3e/0x80 [ 530.218121][T12445] __kasan_kmalloc+0x93/0xb0 [ 530.222704][T12445] __kmalloc_cache_noprof+0x31c/0x660 [ 530.228375][T12445] em28xx_v4l2_init+0x10b/0x2e70 [ 530.233393][T12445] em28xx_init_extension+0x120/0x1c0 [ 530.238766][T12445] process_scheduled_works+0xb6e/0x18c0 [ 530.244342][T12445] worker_thread+0xa53/0xfc0 [ 530.248947][T12445] kthread+0x388/0x470 [ 530.253133][T12445] ret_from_fork+0x51e/0xb90 [ 530.257751][T12445] ret_from_fork_asm+0x1a/0x30 [ 530.262541][T12445] [ 530.264904][T12445] Freed by task 11340: [ 530.269325][T12445] kasan_save_track+0x3e/0x80 [ 530.274102][T12445] kasan_save_free_info+0x46/0x50 [ 530.279163][T12445] __kasan_slab_free+0x5c/0x80 [ 530.283944][T12445] kfree+0x1c1/0x630 [ 530.287866][T12445] em28xx_v4l2_init+0x1683/0x2e70 [ 530.292991][T12445] em28xx_init_extension+0x120/0x1c0 [ 530.298286][T12445] process_scheduled_works+0xb6e/0x18c0 [ 530.303872][T12445] worker_thread+0xa53/0xfc0 [ 530.308676][T12445] kthread+0x388/0x470 [ 530.312759][T12445] ret_from_fork+0x51e/0xb90 [ 530.317398][T12445] ret_from_fork_asm+0x1a/0x30 [ 530.322258][T12445] [ 530.324639][T12445] The buggy address belongs to the object at ffff888028850000 [ 530.324639][T12445] which belongs to the cache kmalloc-8k of size 8192 [ 530.339114][T12445] The buggy address is located 1936 bytes inside of [ 530.339114][T12445] freed 8192-byte region [ffff888028850000, ffff888028852000) [ 530.353088][T12445] [ 530.355421][T12445] The buggy address belongs to the physical page: [ 530.361860][T12445] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028854000 pfn:0x28850 [ 530.372016][T12445] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 530.380616][T12445] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 530.389133][T12445] page_type: f5(slab) [ 530.393114][T12445] raw: 00fff00000000240 ffff88813fea7280 ffff88813fea5ac8 ffff88813fea5ac8 [ 530.401711][T12445] raw: ffff888028854000 0000000800020001 00000000f5000000 0000000000000000 [ 530.410306][T12445] head: 00fff00000000240 ffff88813fea7280 ffff88813fea5ac8 ffff88813fea5ac8 [ 530.419004][T12445] head: ffff888028854000 0000000800020001 00000000f5000000 0000000000000000 [ 530.427853][T12445] head: 00fff00000000003 ffffea0000a21401 00000000ffffffff 00000000ffffffff [ 530.436607][T12445] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 530.445277][T12445] page dumped because: kasan: bad access detected [ 530.451694][T12445] page_owner tracks the page as allocated [ 530.457399][T12445] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11340, tgid 11340 (kworker/0:12), ts 529612085029, free_ts 529118481968 [ 530.479243][T12445] post_alloc_hook+0x231/0x280 [ 530.484097][T12445] get_page_from_freelist+0x24dc/0x2580 [ 530.489890][T12445] __alloc_frozen_pages_noprof+0x18d/0x380 [ 530.495898][T12445] allocate_slab+0x77/0x660 [ 530.500430][T12445] refill_objects+0x331/0x3c0 [ 530.505133][T12445] __pcs_replace_empty_main+0x2e6/0x730 [ 530.510797][T12445] __kmalloc_cache_noprof+0x392/0x660 [ 530.516534][T12445] em28xx_v4l2_init+0x10b/0x2e70 [ 530.521754][T12445] em28xx_init_extension+0x120/0x1c0 [ 530.527150][T12445] process_scheduled_works+0xb6e/0x18c0 [ 530.532704][T12445] worker_thread+0xa53/0xfc0 [ 530.537416][T12445] kthread+0x388/0x470 [ 530.541500][T12445] ret_from_fork+0x51e/0xb90 [ 530.546091][T12445] ret_from_fork_asm+0x1a/0x30 [ 530.550871][T12445] page last free pid 11340 tgid 11340 stack trace: [ 530.557475][T12445] __free_frozen_pages+0xc2b/0xdb0 [ 530.562608][T12445] __slab_free+0x263/0x2b0 [ 530.567055][T12445] qlist_free_all+0x97/0x100 [ 530.571646][T12445] kasan_quarantine_reduce+0x148/0x160 [ 530.577270][T12445] __kasan_slab_alloc+0x22/0x80 [ 530.582117][T12445] __kmalloc_cache_noprof+0x2ba/0x660 [ 530.587479][T12445] usb_control_msg+0x73/0x3e0 [ 530.592148][T12445] hub_ext_port_status+0x116/0x820 [ 530.597456][T12445] hub_event+0x771/0x4f30 [ 530.601789][T12445] process_scheduled_works+0xb6e/0x18c0 [ 530.607357][T12445] worker_thread+0xa53/0xfc0 [ 530.612045][T12445] kthread+0x388/0x470 [ 530.616108][T12445] ret_from_fork+0x51e/0xb90 [ 530.620710][T12445] ret_from_fork_asm+0x1a/0x30 [ 530.625503][T12445] [ 530.627914][T12445] Memory state around the buggy address: [ 530.633544][T12445] ffff888028850680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 530.641611][T12445] ffff888028850700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 530.649669][T12445] >ffff888028850780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 530.657910][T12445] ^ [ 530.662687][T12445] ffff888028850800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 530.670886][T12445] ffff888028850880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 530.678962][T12445] ================================================================== [ 530.710837][T12445] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 530.718190][T12445] CPU: 1 UID: 0 PID: 12445 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 530.728810][T12445] Tainted: [L]=SOFTLOCKUP [ 530.733159][T12445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 530.743471][T12445] Call Trace: [ 530.746794][T12445] [ 530.749742][T12445] vpanic+0x56c/0xa60 [ 530.753796][T12445] ? __pfx_vpanic+0x10/0x10 [ 530.758416][T12445] panic+0xc5/0xd0 [ 530.762153][T12445] ? __pfx_panic+0x10/0x10 [ 530.766580][T12445] ? preempt_schedule_thunk+0x16/0x30 [ 530.771973][T12445] ? preempt_schedule_thunk+0x16/0x30 [ 530.777478][T12445] ? v4l2_fh_open+0xac/0x420 [ 530.782099][T12445] check_panic_on_warn+0x89/0xb0 [ 530.787070][T12445] ? v4l2_fh_open+0xac/0x420 [ 530.791847][T12445] end_report+0x73/0x180 [ 530.796099][T12445] ? v4l2_fh_open+0xac/0x420 [ 530.800788][T12445] kasan_report+0x128/0x150 [ 530.805307][T12445] ? v4l2_fh_open+0xac/0x420 [ 530.809914][T12445] v4l2_fh_open+0xac/0x420 [ 530.814431][T12445] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 530.820687][T12445] em28xx_v4l2_open+0x157/0x9a0 [ 530.825556][T12445] ? do_raw_spin_lock+0x12b/0x2f0 [ 530.830596][T12445] v4l2_open+0x1bf/0x3a0 [ 530.834853][T12445] chrdev_open+0x4cd/0x5e0 [ 530.839289][T12445] ? __pfx_chrdev_open+0x10/0x10 [ 530.844405][T12445] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 530.850744][T12445] ? __pfx_chrdev_open+0x10/0x10 [ 530.855684][T12445] do_dentry_open+0x785/0x14e0 [ 530.860649][T12445] vfs_open+0x3b/0x340 [ 530.864739][T12445] ? path_openat+0x2df0/0x3860 [ 530.869518][T12445] path_openat+0x2e08/0x3860 [ 530.874116][T12445] ? __pfx_stack_trace_save+0x10/0x10 [ 530.879579][T12445] ? stack_depot_save_flags+0x33/0x810 [ 530.885057][T12445] ? __pfx_path_openat+0x10/0x10 [ 530.890012][T12445] ? __x64_sys_openat+0x138/0x170 [ 530.895044][T12445] ? do_syscall_64+0x14d/0xf80 [ 530.899814][T12445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.905889][T12445] ? __lock_acquire+0x6b5/0x2cf0 [ 530.910837][T12445] do_file_open+0x23e/0x4a0 [ 530.915452][T12445] ? __pfx_do_file_open+0x10/0x10 [ 530.920486][T12445] ? _raw_spin_unlock+0x28/0x50 [ 530.925358][T12445] ? alloc_fd+0x64b/0x6c0 [ 530.929699][T12445] do_sys_openat2+0x113/0x200 [ 530.934389][T12445] ? __pfx_do_sys_openat2+0x10/0x10 [ 530.939601][T12445] ? exc_page_fault+0x6a/0xc0 [ 530.944380][T12445] ? do_user_addr_fault+0xc6f/0x1340 [ 530.949675][T12445] __x64_sys_openat+0x138/0x170 [ 530.954622][T12445] do_syscall_64+0x14d/0xf80 [ 530.959702][T12445] ? trace_irq_disable+0x3b/0x150 [ 530.964912][T12445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.970984][T12445] ? clear_bhb_loop+0x40/0x90 [ 530.975860][T12445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.981762][T12445] RIP: 0033:0x7f2356fdc407 [ 530.986197][T12445] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 531.005905][T12445] RSP: 002b:00007ffd82e3d290 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 531.014330][T12445] RAX: ffffffffffffffda RBX: 00007f2356f50880 RCX: 00007f2356fdc407 [ 531.022658][T12445] RDX: 0000000000000000 RSI: 00007ffd82e3ef1c RDI: ffffffffffffff9c [ 531.030635][T12445] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 531.038709][T12445] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 531.046713][T12445] R13: 00007ffd82e3d4e0 R14: 00007f2357235000 R15: 000055e73f5d54d8 [ 531.054722][T12445] [ 531.058056][T12445] Kernel Offset: disabled [ 531.062376][T12445] Rebooting in 86400 seconds..