last executing test programs: 10m37.030651143s ago: executing program 0 (id=518): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1061, 0x80, 0x4, 0x1ab}, 0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)="0eee3dadc2b5bb3ab89230eb28d8", 0xe}, {&(0x7f0000001500)="0b34a6760a11b145ad98f34695257d651517048db0e1cf984855f2e4ed39626657e4151ff02ed84719db293d33fccf426e4ee15576", 0x35}], 0x3, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x8) renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000000000007000000000000000100000000000000000000fffffdfd000000000000000000000000000000000001"]) 10m34.258628887s ago: executing program 0 (id=528): syz_emit_ethernet(0x2e, &(0x7f00000016c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@timestamp={0x44, 0x4}]}}, @echo}}}}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x400, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x9, 0x8) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x2) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000ac0)={0x23, 0x3, 0x11, 0x3, 0x0, 0x2, 0x0}) (async) syz_emit_ethernet(0xb3, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaea00000000000286dd60020000007d0601fe8000000000000000000000000000bbfecb7d8cdc599df169076d4bc8800000000000004f021211e6249ebc5911eac1ad6da11fceb3ffffffd68779cdd761da093a837acb5a4d5fa37e21883d12a90460f2a4440708a6d72880b9dd754822e9288b8012ea0b2dc3ec0e465a6fc52996281443ec2a1e742eaa2ee6f1ac86c9532b97cbdb66690000e5c22c7a11914b2107c670d156aaa950635d83bb885a8cd3bcccc1eec4", @ANYRES32=r1, @ANYRES32=0x41424344, @ANYBLOB="5002004090780000739071d2a27168b9d8dc35af3e9172c10ac45a13b837be93c827672fcd6c83543fed613d1502a85fca6cb1570c4ae35451bae9dac0fc2f4d5f441452d67ec62769d1136d90b14a4014a55f186de144d5b0602419904b373e4c83f5bcaeaf0920b5191393ec82657245"], 0x0) (async) recvmmsg(r3, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/243, 0xf3}, {&(0x7f0000002cc0)=""/94, 0x5e}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/247, 0xf7}, {&(0x7f0000003e40)=""/150, 0x96}, {&(0x7f0000003f00)=""/233, 0xe9}, {&(0x7f0000004000)=""/4, 0x4}], 0x8, &(0x7f00000040c0)=""/85, 0x55}, 0x1}, {{&(0x7f0000004140)=@x25={0x9, @remote}, 0x80, &(0x7f0000004380)=[{&(0x7f00000041c0)=""/228, 0xe4}, {&(0x7f00000042c0)}, {&(0x7f0000004300)=""/124, 0x7c}], 0x3}, 0x2}], 0x2, 0x40000002, &(0x7f0000004440)={0x77359400}) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000004480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @igmp={{0xa, 0x4, 0x0, 0x8, 0x48, 0x66, 0x0, 0x8, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@end, @ssrr={0x89, 0x7, 0xbf, [@private=0xa010100]}, @noop, @ra={0x94, 0x4}, @generic={0xdc, 0x5, "a80fd5"}]}}, {0x17, 0x4, 0x0, @broadcast, "e1bd934b8210de83fb8efd39fefdce44cbb6af44671e2340"}}}}}, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x5, 0x61f) syz_emit_ethernet(0x1e2, &(0x7f0000000540)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x1, 0x6, "08f268", 0x1ac, 0x6, 0x1, @remote, @private2, {[@srh={0x3b, 0x8, 0x4, 0x4, 0x5, 0x18, 0x3, [@remote, @private2, @mcast1, @local]}, @fragment={0x3c, 0x0, 0xd, 0x1, 0x0, 0x7, 0x64}, @hopopts={0x3a, 0x20, '\x00', [@enc_lim={0x4, 0x1, 0xd1}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x8}, @generic={0x0, 0xd5, "562bd8a39f6090066096f1c8aa36322e43612aa579d2d7e42cd6e032c34320d2c58370f17840fb313f77d93ffe5d8ccaf56bbf10f7f611ef4f14170de981f60decf3df841c64abba264f588d082c04de00c32241b308c50051c05b92879e3155b1493d0d23f9924895122d469de5aa35195d404c82d16a289ec6f32a6fa67eb2761a61b5031ed57135a1ece74a27a853344cefd02ddddd874a7692bb0148728df2a0fbe91744b804ff9a10f917cf13482ac7e67bc4de9a8657646722b7bf5a6da1fedeb988f4c65492d74ccb924c19a75f75f1f003"}, @pad1, @padn]}], {{0x4e21, 0x4e23, r4, r5, 0x0, 0x0, 0x13, 0xc2, 0x3, 0x0, 0x6, {[@sack={0x5, 0x1e, [0x3, 0x3, 0x3979, 0xcfec, 0x0, 0x4, 0x0]}, @window={0x3, 0x3, 0x7}, @mptcp=@capable={0x1e, 0xc, 0x6, 0x8, 0x1, 0x4}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0x2}]}}}}}}}}, 0x0) (async) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000002ac0)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001500)="18d672754095cc9ea6c89d11837389d22ba1f6b1a0e13ae51fac9d7fc549544cedf7a5f1a78659253b576576454e1272a2c8878fd33b64d26bda2391a643367b0b14dac8dfc2a44941e57553320b23b264aade7c3b9f", 0x56}, {&(0x7f0000001580)="7c94bf7c5ff96a002e3235f3408f9a8d5f4c0d7ce21712875aff2b56470726e6c1aecd", 0x23}], 0x2, &(0x7f0000001700)=[@iv={0x80, 0x117, 0x2, 0x67, "7f9c450ddd8330205661f265045e452ce5cf4b2c4006bbe214ae08f0c471f26cd35f4f5d20b5efc53c795d277baa4e9cb623cf93c86bee7e8379dbd74b4d302584f8da27f276286be86b9d7a66ee6da195dec4c7a33f6295da9556193b419f30f69566d7425173"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xfc}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}, @op={0x18}], 0xf8, 0x840}, {0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001800)="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", 0x1000}], 0x1, &(0x7f0000001640)=[@op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x48, 0x24000080}, {0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002800)="d72bb1a96f9e21536946ed8ebf4180996cd26d12d2c12fc7669417b9c8a26a16da9f41b73c6da60fac0050f533578d15d4f7f605b99087c078b99049f9185aad5af4b5e3f19c84d12c9bc2da6b844e2cbd785968508944", 0x57}, {&(0x7f0000002880)="b9929217558afb183c5f1e55", 0xc}, {&(0x7f00000028c0)="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", 0xfd}, {&(0x7f00000029c0)="f402b08e7dc69727b0c6580f580c9d07e164a7966345f592566e573d06e0458e274487ba38a2d5305f5d2b797d8a3c9542fe571485a05c4f51d0fbf6229a393ae39b0aa48ee6a557eb64ba99bafe78bc9a16ffb2e0b028fb6d9b", 0x5a}], 0x4, &(0x7f0000002a80)=[@op={0x18}], 0x18, 0x4000}], 0x3, 0x8804) write$tun(r0, &(0x7f00000004c0)={@void, @val={0x2, 0x3, 0x0, 0x811, 0xc000, 0x6}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x6, 0x1034, 0x68, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010100, @multicast1, {[@noop]}}, {{0x4e22, 0x4e22, r1, r5, 0x1, 0x0, 0x7, 0x80, 0x2, 0x0, 0x240a, {[@sack_perm={0x4, 0x2}, @mss={0x2, 0x4, 0xca}]}}, {"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"}}}}, 0x103e) r7 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) write$tun(r7, &(0x7f0000000080)={@val={0x0, 0x8035}, @val={0x2, 0x0, 0xa83, 0x9ab, 0x9da, 0x7}, @eth={@random="95817960d97a", @local, @void, {@llc_tr={0x11, {@snap={0x0, 0x0, 'g', "fc1b10", 0xa00}}}}}}, 0x24) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0xe, [{{0x9, 0x4, 0x0, 0xf3, 0x2, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xc, 0xea, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x40, 0x9}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x2, 0x3, 0xf8, 0x20, 0x7f}, 0x1a, &(0x7f0000000080)={0x5, 0xf, 0x1a, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x7, 0x7, 0xf2c2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x88, 0x94, 0x79, 0xe, 0x41}]}, 0x4, [{0x6a, &(0x7f00000000c0)=@string={0x6a, 0x3, "9db919af864f7b914fb209a19b233ed172989ad7ebb900f4162d14593a8ed9c11f1ac8c747465dc99009fd786516bb91d2bcaaa3882e5c6dfaea16c58c33b657fa2c86e22beb085453e54986119688330fc5a7de4f51f72cbdfe3564bdca429329faf6df84e1cfae"}}, {0xd9, &(0x7f0000000140)=@string={0xd9, 0x3, "0b569f4d4f5006772b2dd635b79912700d7a340e037eb1c02653b749cb98540455706055c18926ab81cfb730e8a62e60f2487eb4b1fc9d3cfe5958f20d098c5e439dcb7162f4b881045a2398bedaa8dc96d147c46305440a6c99f144cf92fe0437a44266bcade14438fe5e5d9955f7275dc16f7435d83e89d6f501dc4a9cd68edfb3c64d178c79b0dccb7f45f5a82dd5b54b3173ee62dccfea60c8ed3ba250dcbd8b74d1903a67709aed7a60035ba86d25d7e725ed82b3a1848bd09ecbbccbd1f758bc3268422e98466c08f4ef1d1e092d29b011fac5a0"}}, {0xff, &(0x7f0000000240)=@string={0xff, 0x3, "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"}}, {0xbe, &(0x7f0000000340)=@string={0xbe, 0x3, "a8af03e62f144437ea3fa09330609122d058844222297400ac0d1b3dfb937389337c17931fcfbad9e1a4f783295709341274a0d51ab336a2286ef155024a5085e413c988fbcd76346ddc4549a888f1432f0fb96811fdc2df81122abcf8121925c66e7136927de5efed6368bbb53e0c79f59518212c91de3e44ee3235d6333f280bc08d0cf0b697c77347b4eaf360f5fbc7141cbe4804fdeb674f7a3d6ec46c14ba68ec96fd6d91069273810917d92b48d940f4533a74be9576b2d420"}}]}) 10m30.952295253s ago: executing program 0 (id=536): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000300)=""/182, 0xb6}], 0x1, 0x2, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 10m29.057508503s ago: executing program 0 (id=542): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) rt_sigqueueinfo(0x0, 0xe, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') fsopen(0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) 10m26.020417375s ago: executing program 0 (id=552): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES32], 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000280)='0\x00', 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100300000008d422031500000000000109022d0001000010010904000701030001000921010100012205000005180b00a39e243a000000000000000000"], 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x800) r5 = syz_io_uring_setup(0x1f8, &(0x7f0000000080)={0x0, 0x6c0e, 0x2, 0xfffffffd}, &(0x7f0000000440), &(0x7f0000000100)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock(&(0x7f0000357000/0x9000)=nil, 0x9000) syz_io_uring_setup(0x25e9, &(0x7f00000017c0)={0x0, 0x82e6, 0x1, 0x1, 0x24e}, &(0x7f0000000040)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0xb15, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000430001"], 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000000000"], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) 10m24.196812292s ago: executing program 0 (id=555): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x3}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3ea, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x947, 0x9, 0x1, 0x2, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0xfffffffb, 0x8, 0x5, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x3a, 0x6, 0xf667, 0xfffffffc, 0x2007, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xcb, 0x1, 0x10, 0xffffffa8, 0x1, 0x9, 0x0, 0x1, 0x1c1000, 0x9, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0x468a, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x5, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x3, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x2, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0xc0000001, 0xfffffff4, 0x100]}}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x61, 0x2}, @ramp={0x0, 0x0, {0x8, 0x0, 0xfffe, 0x1}}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) close(r7) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) 10m23.211872322s ago: executing program 32 (id=555): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x3}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3ea, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x947, 0x9, 0x1, 0x2, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0xfffffffb, 0x8, 0x5, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x3a, 0x6, 0xf667, 0xfffffffc, 0x2007, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xcb, 0x1, 0x10, 0xffffffa8, 0x1, 0x9, 0x0, 0x1, 0x1c1000, 0x9, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0x468a, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x5, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x3, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x2, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0xc0000001, 0xfffffff4, 0x100]}}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x61, 0x2}, @ramp={0x0, 0x0, {0x8, 0x0, 0xfffe, 0x1}}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) close(r7) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) 12.468868975s ago: executing program 2 (id=2642): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c00020904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a000008db05810300040000000904010000000000000904010102020d0000090582021000000000090503024086b8821d86e9882339b7cee09f71c4a1728b6e2ca8ae39f7e238347c5e1f5d92a319b485bdb4aa0c633ff656835e1d764591956706cff72253fb2e0bdfcddcd897511552b8a80432ced57de5cac0c7141fe8c40e2bb6fcce2cf739e32bdf9e55756b47aff711"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x900}, 0x860) (async, rerun: 32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (rerun: 32) r1 = socket(0xa, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x0, 0x4}, 0x90) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x5, 0x1, 0x3, 0xa80, 0x5, 0x8, 0x4, 0x8000009, 0x5, 0x707f, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_io_uring_setup(0x26d, &(0x7f0000000200)={0x0, 0xc6ea, 0x2000, 0x0, 0x2ba}, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_SQES(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x10010, r2, 0x10000000) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000000), &(0x7f0000000040)=0x14) (rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 10.271394819s ago: executing program 5 (id=2647): sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x1090, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x20003, 0x10020f5b, 0x0, [{}, {}, {}, {0x0, 0x35}, {0x20}, {0x5}, {}, {0x1, 0x6}, {0x0, 0x1}, {0xf, 0x1, 0x2, '\x00', 0x1}, {0x0, 0x0, 0xfe}, {}, {0xfe}, {0x0, 0x0, 0x2}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0xa, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x3, 0x0, 0xfa}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}]}}) ioctl$KVM_RUN(r2, 0x8004ae98, 0x20e10000) 9.496049934s ago: executing program 5 (id=2649): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_ifindex=r3, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 9.083697121s ago: executing program 2 (id=2650): r0 = socket(0xb, 0x800, 0x79) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000861a1820830447370200010203010902120001000000000904d9"], 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x4}, 0xc) bpf$MAP_CREATE(0x14, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x2, 0x1, 0x10, 0x0, 0x230d}, 0xc) 9.025372286s ago: executing program 5 (id=2651): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040080) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}]}, 0x68}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040080) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x3, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}]}, 0x68}}, 0x0) (async) 8.680732018s ago: executing program 5 (id=2653): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000081000000080003", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000006006600c78800001a003300983d0500505050505050ffff"], 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) syz_usb_connect(0x2, 0xa1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003546ab520b1134200e4f50102030109028f0001050300030904f6040306a4000809050101000208fe0209050310ff0308"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) socket$nl_audit(0x10, 0x3, 0x9) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 8.317317812s ago: executing program 3 (id=2655): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe8000fff0000000000000000000001a2703000000000000000000000000000000000000000000000000000000000000ff0f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f000000000000000000000029bd7000000000000a00040000000000000000001c00200000004e2200000000ac1414bb00000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040002005e2100000000640101010000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB='\a'], 0x17c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 8.207277405s ago: executing program 3 (id=2656): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/50, 0x8000, 0x800, 0x0, 0x1}, 0x20) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) (async) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) 7.997565829s ago: executing program 3 (id=2657): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=@newqdisc={0x1c8, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x198, 0x2, [@TCA_GRED_LIMIT={0x23, 0x5, 0xb96}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x0, 0xfffffff9, 0x5, 0x3ff, 0x8, 0x148, 0x8, 0x2, 0x6c6, 0xc, 0x1c, 0xa, 0x9, 0x3, 0xfffffffd}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x9}, @TCA_GRED_LIMIT={0x8, 0x5, 0xc}, @TCA_GRED_PARMS={0x38, 0x1, {0xfffffffe, 0x40, 0x5, 0x8, 0x5, 0x1005, 0x7, 0x9, 0x3d, 0xc88a, 0x20, 0x16, 0x1, 0x1, 0x5, 0x5}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x51d}]}}]}, 0x1c8}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0x6, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0xf5, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x5c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@nested={0x48, 0x27, 0x0, 0x1, [@nested={0x43, 0xa4, 0x0, 0x1, [@generic="45f3e17c22ac5b14a72827b56695b3324dcda451b64deccd45e4282fa912da5e62b24ff042bdaba66e1987bdc3dc3512f40b328c344ac79176ee7597f2b865"]}]}]}, 0x5c}}, 0x4044) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="980000000002010400000000000000000a00000004000180440003800400028005000100000000002c000180140003000000000000000000000000000000000014000400fe8000000000000000000000000000bb06000340000200003c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x98}, 0x1, 0x0, 0x0, 0x48080}, 0x20000000) 7.988462946s ago: executing program 4 (id=2658): openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000001000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x1, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r3], 0x1000f) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x34, 0x12, 0xdbf44c00c5896d57, 0x10000010, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x401}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000094}, 0x40010) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa270005d70000fe08060001"], 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000d40)={{}, "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"}) 7.481361685s ago: executing program 1 (id=2659): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x20, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0x8}, {0x0, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x80800) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x40, 0x6, @remote}, 0x14) syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6076b2af00062f00fc000004cba1414ec4b4b50000000000ff0200000000000000000000000000010000883e"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x22, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}]}, 0x2}, 0x1) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000480)="13", 0x1}], 0x1) syz_emit_ethernet(0x8e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6082d2f300583c00fe880000000000000000000000000001ff0200000000000000000000000000012c"], 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6082d2f30018"], 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff690000001d00010000001800b57f00000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, r0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="01005a8a6eaa84f5af5c76f3de597ca9d7c482c40b1d4ab894d426918adbfaaea41649346d65c00c27686718d352a123fe760d54aa1b5141c32b54dbe2be609d3cf8f8a2b5c69ee12a3052c4f716a5f7d0dba40d1b714d0bb19dace68ca049f4a8e9314780f5027392811f8b05d5255bc7a8b0b57138291129c45b08adf17798f5d9", 0x82, r0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 7.02312038s ago: executing program 3 (id=2660): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x0) brk(0x400000ffc000) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r3 = syz_io_uring_setup(0x62ce, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0x0, 0xffffffff}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) writev(r2, &(0x7f0000001800)=[{&(0x7f00000001c0)='*', 0x1}], 0x1) io_uring_enter(r3, 0x567, 0x0, 0x8, 0x0, 0x0) io_setup(0x67, &(0x7f0000000800)=0x0) io_destroy(r6) io_setup(0xe, &(0x7f0000000880)) io_cancel(r6, &(0x7f00000070c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2100) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x0, 0x0, 0x1, 0x0, 0xb}]}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x1005, &(0x7f0000001840)=""/4101, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fcntl$setflags(r7, 0x2, 0x1) 6.52846571s ago: executing program 1 (id=2661): r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x5bcd, 0x104003) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000900)={0x3}) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x23a, &(0x7f0000000380)={0x0, 0x1fffff, 0x10100, 0x0, 0x20, 0x0, r4}, &(0x7f0000000400), &(0x7f00000001c0)) accept$alg(r4, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) timer_create(0x1, &(0x7f0000000180)={0x0, 0x29, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)=0x0) timer_gettime(r6, &(0x7f0000000240)) r7 = socket$alg(0x26, 0x5, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000000)={0x20, 0x1, 0x80, 0x3d, 0x0, 0x6, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$alg(r7, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r9 = accept4(r7, 0x0, 0x0, 0x0) sendto$packet(r9, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffcf6, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000003c0)={'xfrm0\x00', &(0x7f0000000380)=@ethtool_channels={0x3d, 0x85, 0xa, 0x7, 0x3, 0x1, 0x200, 0x10000}}) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xc6943) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={0x0, 0x0, 0x80800, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r10, 0xc00464c9, &(0x7f0000000140)={r11}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000800)={r11}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f00000000c0)={r11}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r12, 0x1000, &(0x7f0000002a80)=""/4096}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 6.292486389s ago: executing program 5 (id=2662): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x10, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80006}}}, 0x108) close(r3) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2d, 0x3, {0x0, 0x0, 0x0, 0x0, 0x38b2b, 0x8100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private0}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x16}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x8, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x12, 0xa01, 0x800000, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008000) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfdc5e000) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r8, 0x8907, 0x0) sendmsg$can_bcm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000640)={0x7, {{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}}, 0x1, 0x7, [{{0xa, 0x4e20, 0x4, @local, 0x5}}, {{0xa, 0x4e24, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x30}}, {{0xa, 0x4e21, 0x7, @mcast2, 0x2f1}}, {{0xa, 0x4e24, 0x1000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}}, {{0xa, 0x4e20, 0x0, @remote, 0x7}}, {{0xa, 0x4e22, 0x7fff, @empty, 0x100}}, {{0xa, 0x4e22, 0x6, @loopback, 0x1}}]}, 0x410) read(r8, &(0x7f0000001480)=""/4096, 0x38) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x3, 0x1, 0x307, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) 5.841412038s ago: executing program 2 (id=2663): openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) syz_open_dev$vim2m(0x0, 0x8, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000005ec0)={0x2, &(0x7f0000005e80)=[{0x35, 0x0, 0xe1, 0x5}, {0x8001, 0x3, 0x5, 0x1}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)="b927db", 0x3, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x800, @loopback}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000500)='net/ip_tables_targets\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="940000001d00000227bd7000fddbdf25a5000000", @ANYRES32=0x0, @ANYBLOB="02004007060005000100000008000b000000000014000100fe80000000000000000000000000002708000800", @ANYRES32=0x0, @ANYBLOB="0aff0700000000000000000008000a0008000000ee029f131bd62027080008001e0000004a96399dcdaf21d51578380514000300070000000500000004000000040000001c000e8005000100f13ec71ef8c7c5fb04000200"], 0x94}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) preadv(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x3, 0x80) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x20000004) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x0, 0xfffffffffffffffe, 0x15, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="a844ad0746178bf2c1e32344204d156049fb9225b9", 0x0, 0x2, 0x4, 0x3, 0x0}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="10000000161409"], 0x10}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r7) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7, 0xf2}, 0x20) truncate(&(0x7f0000000080)='./file1\x00', 0x7) 5.709929929s ago: executing program 4 (id=2664): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x64c842, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x64c842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0) sendmsg(r1, 0x0, 0x4000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) (async) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) (async) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(r2, 0x40000000) unshare(0x22020600) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="40019e230028005338e2dd3e77317c90bccebc148b2eb541494a562a30cd9d553ef2136ab53de76330f2800f68c7d7e3bfb3cd0b90f170de88d6c7cde88bed5014d3a3bb981bf86dfacfc7d8ebd1cf62a9528ed469daf0df40cb5ec312af76c2006c8355614c7a851e2744977a069003c5e2eee73c02f2c57f0a41e634e69cb4152d00ca65169e4a6c0e6ac9cec772fb7d30a361328e1761e5a47e093eb31396517fba81eaf9be9399ac8b8381f886150c5ea6229f800000000031c04f1cef6032f45cb70282d6"], 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) 4.310511647s ago: executing program 1 (id=2665): inotify_init1(0x80800) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x2) (async) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x82000714) inotify_rm_watch(r1, r2) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x0) (async) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}, 0x0, {0x3}}) (async) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r3) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 4.201945344s ago: executing program 2 (id=2666): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\a'], 0x17c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.121154439s ago: executing program 1 (id=2667): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup3(r1, r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0x800, @local, 0x391f}, @in={0x2, 0x4e22, @private=0xa010100}], 0x4c) sendto$inet(r2, &(0x7f0000000080)="e42fc1f2ef1f8956c39321aa779c3a6cf2eace939968c79441d9ed4acd540bf0169ea876a30dcc7b1f348983770f57298ecfae05e96c4d595edc4570f6b77addbe322e15a06fcfc68389de14a9c88e48f382e78ff45c6e5716f1fbad22789cb895779d1775b3", 0x66, 0x20004804, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140)=@int=0x10, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x84, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x2, @local, 0x3}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e22, 0x74e, @empty, 0x8}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0x7ff, @loopback, 0x7}, @in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000002c0)={r3, 0x5}, &(0x7f0000000300)=0x8) write$uinput_user_dev(r2, &(0x7f0000000340)={'syz0\x00', {0x5e5a, 0x5, 0x0, 0x401}, 0x13, [0x53ff, 0x6, 0x1, 0x9, 0x3, 0x7f, 0x8, 0x9, 0x19e, 0x7cda, 0x9, 0x9, 0x7, 0x2, 0x6, 0x6, 0xe84, 0x9, 0xfffffff8, 0x17, 0x8, 0x9, 0x2, 0x1c4, 0x6, 0x7, 0x1, 0x1, 0x2f2, 0x5, 0x296, 0x1, 0x0, 0x3, 0x10000, 0x4, 0xe0, 0x61d, 0x100, 0x3, 0x4327, 0x9, 0xf, 0x0, 0x1eb, 0x2, 0x3ff, 0x8, 0x80000000, 0x4, 0x3, 0x5, 0x4, 0x40, 0x6, 0x4, 0x6, 0x2, 0x1, 0x6, 0x80, 0x2, 0x8, 0x3], [0x8, 0x0, 0xc, 0x45, 0xffff492f, 0xb, 0x9, 0x0, 0x10000, 0x97f7, 0x8001, 0x2, 0x5, 0xfa, 0x9, 0x6, 0x2, 0x8, 0x0, 0x6, 0x8851365, 0x4, 0xfffffe74, 0x1, 0x0, 0x101, 0x7, 0x401, 0xffffff47, 0x4, 0x4, 0xe, 0x200, 0x3, 0x6, 0x3, 0x0, 0x9, 0xfdb, 0x10001, 0x200, 0xfffffffb, 0x8, 0x8, 0xffff0ba0, 0x9, 0x401, 0x400, 0x7fffffff, 0x81, 0x9, 0x7fff, 0x3ff, 0x6, 0x13, 0x7, 0x1, 0x5, 0x1, 0xc, 0x6, 0x7, 0x7, 0xc048], [0x3, 0x8, 0x6, 0xf, 0x10, 0x7fffffff, 0x5, 0x1, 0x2, 0xc, 0x2, 0x5f20, 0xd, 0xb6d0, 0x4, 0xfffffff8, 0x10000, 0x0, 0x3, 0x1, 0x9, 0x8, 0x1, 0x5, 0x0, 0x2d, 0x7, 0x6, 0x8, 0x60, 0xba2, 0x101, 0x233, 0x3, 0x7, 0xfd6, 0x3, 0x74, 0x2, 0x8, 0xadd, 0x4, 0x0, 0x8b, 0x9, 0x1, 0x9, 0x0, 0x5, 0x6, 0xfff, 0x7, 0xfffffff7, 0x4, 0xffff, 0xf, 0xe2d, 0x3, 0xb, 0xe, 0x80, 0x7ff, 0x10001, 0x7fff], [0x4, 0x7, 0x4, 0x1c000, 0x1000, 0x2, 0x9, 0x1, 0xe, 0x800, 0x7, 0x5, 0x0, 0x7, 0x4, 0x0, 0x1, 0x5, 0x5, 0x92, 0x3, 0x7, 0x2, 0x0, 0x6, 0xfffff92e, 0x0, 0x7, 0x9, 0x3, 0x4, 0x1, 0xe, 0x1, 0x3, 0x2, 0xc55, 0x3, 0x8, 0x49f, 0x10, 0x2, 0x9, 0xf, 0x82e, 0x7, 0x8, 0x40, 0x2, 0x2, 0x7, 0x0, 0x8, 0x3, 0x536ca65b, 0x9, 0xfff, 0x3, 0xfff, 0xbe64, 0x1, 0xab, 0x5, 0x401]}, 0x45c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000007c0)={0x0, 0x0}) ptrace(0x11, r4) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000840)={0xc}) execveat(r2, &(0x7f0000000880)='./file0\x00', &(0x7f0000000940)={[&(0x7f00000008c0)='}\x00', &(0x7f0000000900)='\x00']}, &(0x7f0000000b00)={[&(0x7f0000000980)='\x00', &(0x7f00000009c0)='syz0\x00', &(0x7f0000000a00)='\xb6\x00][\\!\x00', &(0x7f0000000a40)='[{[[-.^-,\x00', &(0x7f0000000a80)='syz0\x00', &(0x7f0000000ac0)='@*%\x00']}, 0x800) r5 = syz_io_uring_setup(0x270d, &(0x7f0000000b40)={0x0, 0x77e7, 0x4000, 0x0, 0x12b, 0x0, r2}, &(0x7f0000000bc0), &(0x7f0000000c00)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000d80)=@IORING_OP_STATX={0x15, 0x40, 0x0, r2, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000d40)='./file0\x00', 0x8, 0x100, 0x0, {0x0, r7}}) r9 = socket$inet6(0xa, 0x800, 0x6) sendto$inet6(r9, &(0x7f0000000dc0)="b9f512957aa2532bb003156495bf3198a9ceddb854d0d61b69e1f4212e9a09e3aa08bba1b779ace4c5c88b3e655df66afccaf25242026a039f2c3c17a4d813ac90669427cfec569814bee98b84bd954ecd284dad8527247648eb1b33e0ba45909fe2927f545b433e104e8e160cf27cd5e9fb3725019bc63f6f40d416ffa0036279a7921b0bb7c8e629", 0x89, 0x4004000, &(0x7f0000000e80)={0xa, 0x4e20, 0xfffffffd, @remote, 0x5}, 0x1c) quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000200, r8, &(0x7f0000000ec0)='./file0\x00') r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r10, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x28, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x32}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x814) ptrace$setregs(0xf, r4, 0xe, &(0x7f0000001040)="4241ea6672606e54b431becf610ff0aa884951ddf68123d4c29fed2d9556349abbbb7958ea983f08a65b67d4a8fe54e3d923bfb82389fdb0f47864daabb2b4587c20cf01cd02ac8658b69bcd11b95f39f45eb7a7745b3b321e3fe0ea7e8685c8404fda3d9d87a5268a0fa9e57ada0ae383b18a0013ddf8fa7683959eb6f3231a38ca2de12070e4e5f8389b819d6bb98ec335098d55cdabdf1e89493888e3c8a531756890ad5af582d594b5ca40b14482c9ea33c835ec918775be9f5a481bd9b7676ccc6aa329832f099cbf16cf17e190f7772fad35a38e4cf57c53c4634f1f813ede85c812c1cb3d914cdbaf8926b6280c763d17") r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001180), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001240)={'syztnl1\x00', &(0x7f00000011c0)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x6, 0x8001, 0x58, @private2, @loopback, 0x40, 0x8, 0x1, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001300)={'sit0\x00', &(0x7f0000001280)={'gre0\x00', 0x0, 0x7, 0x7, 0x4e9, 0x1551, {{0xe, 0x4, 0x3, 0x6, 0x38, 0x68, 0x0, 0x6a, 0x2f, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x24, 0xa4, 0x3, 0x2, [{@multicast2, 0x7}, {@multicast1, 0xa029f2f6}, {@multicast1, 0x7}, {@empty, 0x2000000}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000013c0)={'ip6_vti0\x00', &(0x7f0000001340)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0xe, 0x5, 0x24, @private1, @private1, 0x40, 0x708, 0x3a94, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000014c0)={'gretap0\x00', &(0x7f0000001400)={'ip_vti0\x00', 0x0, 0x80, 0x7890, 0x5, 0x7ff, {{0x1e, 0x4, 0x3, 0x0, 0x78, 0x64, 0x0, 0x2, 0x2f, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x20, 0x3, [{0x2, 0xe, "5c20eaccc5f1b184f55a5ea2"}, {0x5, 0xc, "77ad16f1484226a0cd27"}]}, @timestamp={0x44, 0x20, 0xd5, 0x0, 0x4, [0x200, 0xe, 0x7, 0x527714ca, 0x480, 0x9, 0x3]}, @end, @ssrr={0x89, 0x1f, 0x7c, [@empty, @remote, @broadcast, @multicast2, @multicast2, @empty, @broadcast]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000001600)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001500)={0x84, r12, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xd4}, @ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xfd}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xaf}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xd1}]}, 0x84}, 0x1, 0x0, 0x0, 0x44000}, 0x90) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000001680)={{0x4, 0x6}, 'port0\x00', 0x83, 0x20442, 0x80000001, 0x1, 0x0, 0xb4, 0x800, 0x0, 0x1, 0x7e}) 3.706788999s ago: executing program 2 (id=2668): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x20040600) r2 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prctl$PR_SET_KEEPCAPS(0x8, 0x1) fcntl$getflags(r1, 0x401) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff030000000905820300ab"], 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000180)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r4}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRES64=r3], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004000000000000c9"], 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000000c060103000000000000368e25e26ffbeefe0100070000000900020073797a300000"], 0x28}, 0x1, 0x0, 0x0, 0x24004055}, 0x2004c010) r7 = syz_clone3(&(0x7f0000000480)={0x40000000, 0x0, 0x0, 0x0, {0x31}, &(0x7f0000000200)=""/54, 0x36, &(0x7f0000000300)=""/193, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x2, r7, 0x0, 0x0) syz_io_uring_setup(0xc8f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffff8}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, 0x0, 0x0, 0x4) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x6, 0x1, &(0x7f0000000780)="f2f5b0ed90181a5a4460661dac7a3330b06c6134e40ad71fca0c0facaf51aaadccbc09edcf0591dd05310c075cfc803ee0fde540d298efbfcb9e43ecf05dafc18ce9214ce3a9878d1ccb962ba6cee25562997da2f8936508b246d70ff21fd9dfafcd43b15b58473290a4ad91b04ce853dc55cec7f7c510cac1567b5b370c988ac172611d65749fb258601d94d32154f20d81364b7c143be1c27d482c4bb05b5f56388b3e126d4dd91f8e3e4bd3e81c36bb03c47adb96fac39b84101691bb8facca92aac89299eaf1a3e4d2", 0x6, 0x0, 0x1, {0x2}}) 3.503328245s ago: executing program 1 (id=2669): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) 3.197316086s ago: executing program 3 (id=2670): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_emit_ethernet(0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) timer_getoverrun(r0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x40, 0x7, 0xa1, {0xa1, 0x22, "3d98c274de722235876a23ea7cd0c3801780fdcc719a7b439ee82c407c03923c329867b6e48a13d15e8333b90e4180b62a59af75f00d02ad9bdcb578f2680deba471b7f9019ec76c2f40f27dda30553c9ebd2c113930e76d5c7e32ff90de0c5a8f19b6194c03905ac08abb4259906bf21c146d20784fd750a253a7ae139197126cbdcc78147ffa1229137c010069cc2136589e333d8b04038bf780a708425a"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000240)={0x20, 0xf, 0xec, "ada91a98f17c11cdc305b10fb1a800f63e56f28525218a09115896d77268fcfbf71038a97f06af5695618de8eb720501afb1b23d8f3d7d1229e5c0fe432c2e20dfb05982f54d226e629583fec172f4a268a3419ff2918c8228375aeef314ced12600b43ba361755697b3de358a4b184d4a3ea1b430f1c11395286067870f5efae2fed22439a7fdd476ddb2ca1fdbbe5c56ae4c9994f88cb2afd5a37b620cf24e364d08980678cc6a9f5384b8e220f6f3bfd4149b5fd431aaaaeb214b78f87f0639c82e276062740557bc1970107d8e86c6d0d1b564cd352c27103a72c4200c050a42ad58552a4cf081a7c7e4"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 3.196654119s ago: executing program 5 (id=2671): set_mempolicy(0x6, 0x0, 0xe0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000aa4000/0x1000)=nil, 0x1000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_open_dev$media(0x0, 0x7, 0x88600) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mlock(&(0x7f0000b37000/0x4000)=nil, 0x4000) r4 = memfd_create(&(0x7f0000001ac0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\xfe\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\t\x00\x00\x00\x00\x00\x00\x00sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x0f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x80\xd2\xd5\xd2@z9\xf4Ef\xc0\xa1\x14\xff\xf7\xfc\x92u\x99\xdaH:\xcchd\x8e\xaad\xfc<\xac\x98u#!t\x97\xdb\x13\x005*C\xc0qe\x88\x176\xc4>\xc07\x18\xeb\xe0\x96\xa6\x11[E\xea\x1en\xcdQ\xac\xa5\xab\'n\x80\x917\x1d\xc6!|\xbd\x96\x18\xa6\xd3\xa9*(\xb0\xbem\x1dN\x8dr\x87\xcf\xa5^\x1b6D\x00\x00\x00\x00\x00\xa8\xfe\x9d\xbbr\x83\xa5\xd6\x9f\x10\xb1\xd0\vR\x06\xa7}\x97v\x8e\xb7\xf4\aS\x97\x18\xd4\xd2\xc8\x92\xfa\x96z5\xb4\xa8\x16\xc4\x10\x16_\xfb\x94}\a\x99n\x9b\xa5_\xdbQ\tU\"G3\xe2\xeff\xf3Pg\x7f0\xf9x\x7fTg\xd3\xc0\xdb\xcc\xc0\x8dI\x8b.Y\x97\x0eh\xb4', 0x2) fcntl$addseals(r4, 0x409, 0x7) ftruncate(r4, 0x3) 2.995126338s ago: executing program 4 (id=2672): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000081000000080003", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000006006600c78800001a003300983d0500505050505050ffff"], 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) syz_usb_connect(0x2, 0xa1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003546ab520b1134200e4f50102030109028f0001050300030904f6040306a4000809050101000208fe0209050310ff0308"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) socket$nl_audit(0x10, 0x3, 0x9) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 2.261537284s ago: executing program 4 (id=2673): socket$nl_route(0x10, 0x3, 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x24000420) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) read(r0, &(0x7f0000000640)=""/215, 0xd7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write(r3, &(0x7f0000000240)="94", 0x1) write$6lowpan_enable(r2, &(0x7f00000001c0)='1', 0x1) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256c", 0xc3}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x82000714) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) request_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0) tee(r2, r6, 0x8f5, 0x100000000000000) r8 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x8, [@volatile={0xf, 0x0, 0x0, 0x9, 0x1}, @enum64={0xf, 0x3, 0x0, 0x13, 0x1, 0x6, [{0xa, 0x1, 0x4}, {0x6, 0x4, 0x8}, {0x8, 0x1, 0xb}]}]}, {0x0, [0x2e, 0x61, 0x30, 0x0, 0x30, 0x2e]}}, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x25, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0xffe2) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r11 = dup(r10) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)=""/231, 0xe7}], 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) getsockname$packet(r11, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000006d000100"/20, @ANYRES32=r12, @ANYBLOB="000000000000000018003480"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write(r4, 0x0, 0x0) 1.917181157s ago: executing program 4 (id=2674): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ecm(0x3, 0x79, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x1, 0x1, 0x3, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x7, 0x24, 0x6, 0x0, 0x0, "5c17"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1000, 0x400, 0xd}, [@country_functional={0x10, 0x24, 0x7, 0x70, 0x1, [0x0, 0x3, 0x3, 0x1ff, 0x6]}, @call_mgmt={0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xc}, @network_terminal={0x7, 0x24, 0xa, 0x9d, 0x3, 0x1, 0xf1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x81, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xe5, 0xd4, 0xf8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x5, 0x10}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x7, 0x5, 0x2, 0x0, 0x4}, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x80a}}]}) syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0023d7000000d70d5b51b7d5f80c84ad21bf21af2beba59079755908a622b25df5f9776ac7ff26b796b7a388712db06e05c67e46c5c45172a5d48bdd290424d9abfec64bd2349ee05e63c65b95bec0ef6e3146f4f89aa4eb4cdaad6c3d20939b2764deb6e8ffffffffffffffff9d8b564658c658d50628474b58787623558accfb77669fe9c27c998f6715e023449f4df43bc9e75cd779769f62b17c33011395ef50502f873f823ff36d328592d70ba8d8efd13ae719b0d0ba5d254129622f7a3f447b5e346e97ccba7f421d04da9f68e3aa8134260de84a8f45c9bca2"], &(0x7f0000000280)={0x0, 0x3, 0x8, @string={0x8, 0x3, "458f211b063b"}}, &(0x7f0000000300)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd8, 0x0, 0x8, 0x94, "79ce358c", "38d5492f"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0x5, 0x4, 0x4, 0x6, 0x2}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x0, 0x16, 0x9d, "aab3109236fb9538971a8b003c9a6e8eb0b5735bc4ce86d48ffe5669bf359a8c0ca5cc05267360d3635bc9c56ac854c9a5c8216b170ca34e7d239f7a73c26184bc1914774719a81fd4d895530e7cca6588c779115ae68afaff06402afbe81c47801210f619e41df22a26f65405d180aff392e385e1cc2d6b0fd8cdbdf9bcd28fb54302477294bee51ac171b722c1303756443b9620077c87b506c44c15"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x8, {0x1, 0x1, [0xf0f0]}}, &(0x7f0000000700)={0x40, 0x7, 0x2}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0xb, 0x2, "510e"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0xfff9}, &(0x7f0000000840)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000880)={0x40, 0x17, 0x6}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "64d7"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0xa}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x5}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.315691616s ago: executing program 4 (id=2675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) (async) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0xffff030c) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000200)={0x3}) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {&(0x7f0000000580)=""/154, 0x9a}, 0x0, 0x0, 0x60, 0xffffffff00000005}}], 0x48, 0x80}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) lremovexattr(&(0x7f0000002180)='./file0\x00', &(0x7f0000002200)=@random={'system.', '!Y\x00'}) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x29, 0x18, 0x0, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect(0x3, 0x63, 0x0, 0x0) (async) clock_adjtime(0xffffffd3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0) 438.723429ms ago: executing program 2 (id=2676): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x11, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000380)="43d9f3f041203dd08ec5eed5d5442400b1000000c744240200a8000065666766460f380b7474c3660f6efeb3db87c4c15de8310f01cf409101c9c481c51436470f01dc", 0x43}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_io_uring_setup(0x3576, 0x0, &(0x7f00000002c0), 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f00000000c0), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fanotify_init(0x404efc3592715aa8, 0x80000) fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'ipvlan1\x00', 0x4000}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000001400)=ANY=[@ANYRES32=r2], 0x7a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000019000100000000000000000080"], 0x2c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) fcntl$lock(r4, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x6, &(0x7f0000000240)=[{0x5, 0x8, 0x6, 0x1000}, {0x6, 0x7, 0x3, 0x9}, {0x2, 0x8, 0x81, 0x800}, {0x9, 0x9, 0xe, 0xffff0000}, {0xfffb, 0x2, 0x9, 0x2}, {0x1, 0xa3, 0x8b, 0x16b}]}) r9 = syz_usb_connect(0x1, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000904000000"], 0x0, 0x0, 0x0, 0x0}) close_range(r8, 0xffffffffffffffff, 0x0) 297.211888ms ago: executing program 1 (id=2677): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async, rerun: 32) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (rerun: 32) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {&(0x7f0000002200)}}, 0x18) (rerun: 64) syz_open_dev$sg(0x0, 0x0, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20040004) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000200)={'\x00', 0x2, 0x8, 0x10000, 0x0, 0x6}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) (async, rerun: 64) r4 = socket$inet(0x2, 0x0, 0x1) (rerun: 64) close(0x3) (async) syz_open_dev$video(&(0x7f0000000040), 0x1, 0x0) (async) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10000}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r4, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r5, 0x78cb, 0x0, 0x9, 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x530, 0xc, 0xfffffffffffffffa, 0x80000059c, 0xffffffffffffffff}) (async, rerun: 64) recvfrom(r0, &(0x7f00000002c0)=""/207, 0xcf, 0x0, 0x0, 0x0) (rerun: 64) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98", 0xa0}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558be", 0x25}], 0x2}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100027da8e340ba0d005088d60800000104000000000000001009048c00247ed784ff"], 0x0) 0s ago: executing program 3 (id=2678): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\a'], 0x17c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): descriptor read/64, error -71 [ 729.557765][ T5929] usb usb6-port1: attempt power cycle [ 729.809524][T10484] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 729.950842][ T5929] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 729.976670][T14342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2176'. [ 729.994353][ T5929] usb 6-1: device descriptor read/8, error -71 [ 730.110696][T10484] usb 4-1: config 0 has no interfaces? [ 730.317859][T10484] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 730.327245][ T5929] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 730.388802][T14344] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.406582][T10484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.443456][T14344] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 730.465089][ T5929] usb 6-1: device descriptor read/8, error -71 [ 730.525430][T10484] usb 4-1: Product: syz [ 730.551209][T10484] usb 4-1: Manufacturer: syz [ 730.580601][ T5929] usb usb6-port1: unable to enumerate USB device [ 730.661531][T10484] usb 4-1: SerialNumber: syz [ 730.721957][T10484] usb 4-1: config 0 descriptor?? [ 731.026807][T14336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2175'. [ 731.053889][T14336] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 731.797420][ T8767] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 731.975065][ T8767] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 731.985732][ T8767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.994613][ T8767] usb 6-1: Product: syz [ 731.999625][ T8767] usb 6-1: Manufacturer: syz [ 732.004519][ T8767] usb 6-1: SerialNumber: syz [ 732.036443][ T8767] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 732.128705][T10490] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 732.488625][T14364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.498618][T14364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.177285][T10490] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 733.196383][T10490] ath9k_htc: Failed to initialize the device [ 733.224645][T10484] usb 4-1: USB disconnect, device number 107 [ 733.261500][T10490] usb 6-1: ath9k_htc: USB layer deinitialized [ 733.716825][T14377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 733.901500][ T30] audit: type=1326 audit(1748367383.421:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14366 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc906d8e969 code=0x7fc00000 [ 733.947625][ T30] audit: type=1326 audit(1748367383.421:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14366 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc906d8e969 code=0x7fc00000 [ 733.971275][ T30] audit: type=1326 audit(1748367383.421:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14366 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc906d8e969 code=0x7fc00000 [ 733.994088][T10494] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 734.008562][ T30] audit: type=1326 audit(1748367383.421:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14366 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc906d8e969 code=0x7fc00000 [ 734.134868][ T30] audit: type=1326 audit(1748367383.421:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14366 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc906d8e969 code=0x7fc00000 [ 734.343171][ T30] audit: type=1326 audit(1748367383.421:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14366 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc906d8e969 code=0x7fc00000 [ 734.397319][ T30] audit: type=1326 audit(1748367383.421:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14366 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc906d8e969 code=0x7fc00000 [ 734.421288][ T30] audit: type=1326 audit(1748367383.421:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14366 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc906d8e969 code=0x7fc00000 [ 734.534396][ T30] audit: type=1326 audit(1748367383.421:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14366 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc906d8e969 code=0x7fc00000 [ 734.858561][ T30] audit: type=1326 audit(1748367383.421:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14366 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc906d8e969 code=0x7fc00000 [ 734.970569][T14392] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2190'. [ 734.982170][T14392] tipc: Enabling of bearer rejected, already enabled [ 735.419665][T14399] xt_TPROXY: Can be used only with -p tcp or -p udp [ 735.557230][T14396] macvlan0: entered promiscuous mode [ 735.563863][T14396] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2191'. [ 735.579634][T14398] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 735.586956][T14398] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 735.841849][T10484] usb 6-1: USB disconnect, device number 90 [ 736.297545][ T5929] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 736.522338][ T5929] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 736.557671][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.576534][ T5929] usb 4-1: Product: syz [ 736.599195][ T5929] usb 4-1: Manufacturer: syz [ 736.604019][ T5929] usb 4-1: SerialNumber: syz [ 736.647803][ T5929] usb 4-1: config 0 descriptor?? [ 736.693115][ T5929] hso 4-1:0.0: Not our interface [ 736.734570][ T5929] usb-storage 4-1:0.0: USB Mass Storage device detected [ 737.156832][ T5929] usb 4-1: USB disconnect, device number 108 [ 737.198532][ T122] kworker/0:2 (122) used greatest stack depth: 15544 bytes left [ 738.435057][T14205] RDS/tcp: send to fe80::c on cp [0]returned -104, disconnecting and reconnecting [ 738.941685][T14447] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 738.951277][T14447] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 739.348337][T14453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.391450][T14453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.567519][ T5929] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 739.577156][ T8767] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 739.744012][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 739.759227][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 739.788659][ T5929] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 739.803963][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.814813][ T8767] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 739.829696][ T5929] usb 2-1: config 0 descriptor?? [ 739.869893][ T5929] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input39 [ 739.902334][ T8767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.951397][ T8767] usb 6-1: Product: syz [ 739.955730][ T8767] usb 6-1: Manufacturer: syz [ 739.982471][ T8767] usb 6-1: SerialNumber: syz [ 740.040398][ T8767] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 740.077462][T14455] input: syz1 as /devices/virtual/input/input40 [ 740.109873][T10494] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 740.165939][ T45] IPVS: starting estimator thread 0... [ 740.260017][T14455] 8021q: VLANs not supported on sit0 [ 740.287271][T14474] IPVS: using max 28 ests per chain, 67200 per kthread [ 740.461886][T14482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.472817][T14482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.179877][T10494] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 741.244431][T10494] ath9k_htc: Failed to initialize the device [ 741.246852][T14485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2213'. [ 741.319958][T10494] usb 6-1: ath9k_htc: USB layer deinitialized [ 742.039553][T14496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2216'. [ 742.416444][ T45] usb 6-1: USB disconnect, device number 91 [ 742.529083][T14500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.610560][T14500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.618996][ T5182] bcm5974 2-1:0.0: could not read from device [ 742.696571][ T5929] usb 2-1: USB disconnect, device number 16 [ 742.721183][ T5182] bcm5974 2-1:0.0: could not read from device [ 744.493408][T14501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2219'. [ 745.772527][T14553] support for the xor transformation has been removed. [ 745.950550][ T8767] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 746.064650][T14558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.078373][T14558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.119150][T14558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.138215][ T8767] usb 6-1: Using ep0 maxpacket: 16 [ 746.168734][ T8767] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.182993][T14558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.198084][ T8767] usb 6-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.00 [ 746.214862][ T8767] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.255401][ T8767] usb 6-1: config 0 descriptor?? [ 746.299641][ T8767] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input41 [ 746.487981][ T5182] bcm5974 6-1:0.0: could not read from device [ 746.508855][ T5182] bcm5974 6-1:0.0: could not read from device [ 746.557728][ T8767] usb 6-1: USB disconnect, device number 92 [ 746.560684][ T5182] bcm5974 6-1:0.0: could not read from device [ 746.576634][ T5182] bcm5974 6-1:0.0: could not read from device [ 746.599186][ T5182] bcm5974 6-1:0.0: could not read from device [ 747.566064][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.572746][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.117175][ T8767] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 748.234187][T14590] netlink: 'syz.1.2247': attribute type 32 has an invalid length. [ 748.327175][ T8767] usb 6-1: Using ep0 maxpacket: 16 [ 748.335863][ T8767] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 748.348562][T14590] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2247'. [ 748.358459][ T8767] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.377164][ T8767] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 748.420583][ T8767] usb 6-1: config 0 interface 0 has no altsetting 0 [ 748.439421][ T8767] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 748.472782][ T8767] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.496813][ T8767] usb 6-1: config 0 descriptor?? [ 748.950894][ T8767] usbhid 6-1:0.0: can't add hid device: -71 [ 748.962388][ T8767] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 748.992676][ T8767] usb 6-1: USB disconnect, device number 93 [ 749.365512][T14607] tipc: Started in network mode [ 749.370712][T14607] tipc: Node identity ac1414aa, cluster identity 4711 [ 749.426664][T14607] tipc: Enabled bearer , priority 10 [ 749.559225][T14607] tipc: Enabled bearer , priority 0 [ 749.880425][T14612] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2254'. [ 750.407742][T10494] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 750.580369][T10494] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.591844][T10494] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 750.603998][T14623] binder: 14621:14623 ioctl f503 0 returned -22 [ 750.624728][T10494] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.679455][ T5929] tipc: Node number set to 2886997162 [ 750.686871][T10484] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 750.689063][T10494] usb 6-1: config 0 descriptor?? [ 750.760778][T14627] netlink: 'syz.1.2259': attribute type 32 has an invalid length. [ 750.797234][T14627] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2259'. [ 750.888205][T10484] usb 4-1: Using ep0 maxpacket: 16 [ 750.896824][T10484] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 750.909754][T10484] usb 4-1: config 0 has no interface number 0 [ 750.922886][T10484] usb 4-1: config 0 interface 119 has no altsetting 0 [ 750.971145][T10484] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=26.35 [ 750.990913][T10484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.009834][T10484] usb 4-1: Product: syz [ 751.019329][T10484] usb 4-1: Manufacturer: syz [ 751.027394][T10484] usb 4-1: SerialNumber: syz [ 751.191260][T14640] binder: BINDER_SET_CONTEXT_MGR already set [ 751.197718][T14640] binder: 14617:14640 ioctl 4018620d 200000000040 returned -16 [ 751.220127][T10484] usb 4-1: config 0 descriptor?? [ 751.257442][T14640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.268496][T14640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.507177][T10490] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 751.645787][T14620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.671306][T10490] usb 2-1: config 0 has no interfaces? [ 751.678965][T14620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.694446][T10490] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 751.937957][T10490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.974315][T10484] usb 4-1: USB disconnect, device number 109 [ 752.077076][T10490] usb 2-1: Product: syz [ 752.139760][T10490] usb 2-1: Manufacturer: syz [ 752.184102][T10490] usb 2-1: SerialNumber: syz [ 752.440938][T10490] usb 2-1: config 0 descriptor?? [ 754.265268][T14664] bond0: option arp_validate: invalid value (18446744073441116161) [ 754.310020][T10494] usbhid 6-1:0.0: can't add hid device: -71 [ 754.319066][T10494] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 754.355247][T10494] usb 6-1: USB disconnect, device number 94 [ 754.365642][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2268'. [ 754.408243][T14664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2268'. [ 754.437851][T14664] openvswitch: netlink: Missing key (keys=40, expected=80) [ 754.522716][T10490] usb 2-1: USB disconnect, device number 17 [ 755.330083][T14677] netlink: 'syz.3.2272': attribute type 32 has an invalid length. [ 755.344437][T14677] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2272'. [ 755.906378][T14683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2275'. [ 755.946467][T14683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2275'. [ 756.055805][T14683] syz_tun: entered promiscuous mode [ 756.102406][T14683] syz_tun: left promiscuous mode [ 756.278424][T14684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 759.287112][ T45] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 759.970476][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 760.057515][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.247592][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.257545][ T45] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 760.266624][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.311571][ T45] usb 4-1: config 0 descriptor?? [ 760.703729][T14720] netlink: 'syz.1.2283': attribute type 32 has an invalid length. [ 760.745885][T14720] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2283'. [ 761.334495][T14728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.382439][T14728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.131592][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 762.148635][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 762.663657][ T45] usb 4-1: USB disconnect, device number 110 [ 763.995018][T14744] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2293'. [ 764.114303][T14748] netlink: 'syz.3.2291': attribute type 32 has an invalid length. [ 764.297309][T10490] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 764.464189][T10490] usb 6-1: unable to get BOS descriptor or descriptor too short [ 764.472948][T10490] usb 6-1: not running at top speed; connect to a high speed hub [ 764.486375][T10490] usb 6-1: config 5 has an invalid interface number: 246 but max is 0 [ 764.513527][T10490] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 764.547265][T10490] usb 6-1: config 5 has no interface number 0 [ 764.566775][T14754] netlink: 'syz.3.2297': attribute type 32 has an invalid length. [ 764.570288][T10490] usb 6-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 764.628851][T14756] loop2: detected capacity change from 0 to 7 [ 764.636721][T14756] Dev loop2: unable to read RDB block 7 [ 764.650891][T14754] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2297'. [ 764.651505][T14756] loop2: unable to read partition table [ 764.670185][T10490] usb 6-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 764.690683][T10490] usb 6-1: config 5 interface 246 has no altsetting 0 [ 764.701213][T14756] loop2: partition table beyond EOD, truncated [ 764.709085][T14756] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 764.725649][T10490] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 764.747277][T10490] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.776181][T10490] usb 6-1: Product: syz [ 764.800944][T10490] usb 6-1: Manufacturer: syz [ 764.805693][T10490] usb 6-1: SerialNumber: syz [ 765.097409][T14758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2298'. [ 765.141034][T14758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2298'. [ 765.192422][T10490] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 765.235976][T14182] usb 6-1: Failed to submit usb control message: -71 [ 765.240043][T10490] usb 6-1: USB disconnect, device number 95 [ 765.281937][T14182] usb 6-1: unable to send the bmi data to the device: -71 [ 765.290896][T14182] usb 6-1: unable to get target info from device [ 765.297521][T14182] usb 6-1: could not get target info (-71) [ 765.307331][T14182] usb 6-1: could not probe fw (-71) [ 765.887162][T10490] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 766.077666][T10490] usb 4-1: Using ep0 maxpacket: 32 [ 766.099688][T10490] usb 4-1: unable to get BOS descriptor or descriptor too short [ 766.139710][T10490] usb 4-1: config 7 has an invalid interface number: 128 but max is 0 [ 766.148882][T10490] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 766.166887][T10490] usb 4-1: config 7 has an invalid descriptor of length 48, skipping remainder of the config [ 766.196937][T10490] usb 4-1: config 7 has no interface number 0 [ 766.217264][T10490] usb 4-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 766.265715][T10490] usb 4-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 766.296309][T10490] usb 4-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 766.326876][T10490] usb 4-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 766.383045][T10490] usb 4-1: config 7 interface 128 has no altsetting 0 [ 766.391778][T14785] netlink: 'syz.1.2305': attribute type 32 has an invalid length. [ 766.441712][T10490] usb 4-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 766.468139][T10490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.476376][T10490] usb 4-1: Product: syz [ 766.517246][T10490] usb 4-1: Manufacturer: syz [ 766.522598][T10490] usb 4-1: SerialNumber: syz [ 766.561434][T14772] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 766.776001][T14787] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 766.836588][T10490] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 766.866112][T10490] usb 4-1: MIDIStreaming interface descriptor not found [ 766.914566][T14791] netlink: 'syz.4.2308': attribute type 32 has an invalid length. [ 766.976738][T14791] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2308'. [ 767.036889][T10490] usb 4-1: USB disconnect, device number 111 [ 767.226577][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 767.227698][T10489] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 767.338172][T14796] loop2: detected capacity change from 0 to 7 [ 767.364482][T14796] Dev loop2: unable to read RDB block 7 [ 767.371107][T14796] loop2: unable to read partition table [ 767.417512][T14796] loop2: partition table beyond EOD, truncated [ 767.434059][T14796] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 767.501882][T10489] usb 2-1: device descriptor read/64, error -71 [ 767.807331][T10489] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 768.053668][T14805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2313'. [ 768.063036][T10489] usb 2-1: device descriptor read/64, error -71 [ 768.129380][T14805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.143165][T14805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.177896][T10489] usb usb2-port1: attempt power cycle [ 768.237176][T10484] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 768.320392][T14803] sctp: [Deprecated]: syz.3.2311 (pid 14803) Use of int in maxseg socket option. [ 768.320392][T14803] Use struct sctp_assoc_value instead [ 768.483471][T10484] usb 6-1: config 0 has no interfaces? [ 768.517165][T10489] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 768.548137][T10489] usb 2-1: device descriptor read/8, error -71 [ 768.613485][T10484] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 768.622758][T10484] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.640080][T10484] usb 6-1: Product: syz [ 768.644771][T10484] usb 6-1: Manufacturer: syz [ 768.651033][T10484] usb 6-1: SerialNumber: syz [ 768.670480][T10484] usb 6-1: config 0 descriptor?? [ 768.817538][T10489] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 768.849285][T10489] usb 2-1: device descriptor read/8, error -71 [ 768.910999][T14816] delete_channel: no stack [ 768.922977][T14819] fuse: Bad value for 'user_id' [ 768.957932][T10489] usb usb2-port1: unable to enumerate USB device [ 768.972717][T14819] fuse: Bad value for 'user_id' [ 769.015823][T14814] delete_channel: no stack [ 769.122709][T14807] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2312'. [ 769.133075][T14807] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2312'. [ 769.237311][T10489] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 769.427320][T10489] usb 4-1: Using ep0 maxpacket: 32 [ 769.435225][T10489] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 769.449819][T10489] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 769.460624][T10489] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 769.471518][T10489] usb 4-1: Product: syz [ 769.476132][T10489] usb 4-1: Manufacturer: syz [ 769.481941][T10489] usb 4-1: SerialNumber: syz [ 769.571316][T10489] usb 4-1: config 0 descriptor?? [ 769.577960][T14821] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 769.598233][T10489] hub 4-1:0.0: bad descriptor, ignoring hub [ 769.611376][T10489] hub 4-1:0.0: probe with driver hub failed with error -5 [ 770.278399][T14821] usb 4-1: reset high-speed USB device number 112 using dummy_hcd [ 770.450763][T14821] usb 4-1: device firmware changed [ 770.462720][ T45] usb 4-1: USB disconnect, device number 112 [ 770.567705][T14833] netlink: 'syz.1.2321': attribute type 32 has an invalid length. [ 770.575853][T14833] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2321'. [ 770.607213][ T45] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 770.779266][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 770.797228][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 770.798470][T14853] loop2: detected capacity change from 0 to 7 [ 770.815187][ T45] usb 4-1: too many configurations: 54, using maximum allowed: 8 [ 770.824144][ T6926] Dev loop2: unable to read RDB block 7 [ 770.824999][ T45] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 770.839476][ T6926] loop2: unable to read partition table [ 770.843211][ T45] usb 4-1: can't read configurations, error -71 [ 770.855805][ T6926] loop2: partition table beyond EOD, truncated [ 770.877353][T14853] Dev loop2: unable to read RDB block 7 [ 770.883310][T14853] loop2: unable to read partition table [ 770.890312][T14853] loop2: partition table beyond EOD, truncated [ 770.900960][T14853] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 771.287284][T14858] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2327'. [ 771.561179][T10484] usb 6-1: USB disconnect, device number 96 [ 771.951268][T14869] openvswitch: netlink: IP tunnel dst address not specified [ 772.011375][T14869] loop6: detected capacity change from 0 to 524287999 [ 772.287652][T14876] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2331'. [ 772.342239][T14876] vxcan1: entered promiscuous mode [ 772.537231][T10494] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 772.558572][T14882] netlink: 'syz.1.2333': attribute type 32 has an invalid length. [ 772.566483][T14882] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2333'. [ 772.707259][T10494] usb 6-1: Using ep0 maxpacket: 32 [ 772.743748][T10494] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae [ 772.764386][T10494] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.795222][T10494] usb 6-1: Product: syz [ 772.801189][T10494] usb 6-1: Manufacturer: syz [ 772.816875][T10494] usb 6-1: SerialNumber: syz [ 772.844430][T10494] usb 6-1: config 0 descriptor?? [ 772.863662][T10494] ums_eneub6250 6-1:0.0: USB Mass Storage device detected [ 772.897523][T10489] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 772.989499][T14891] loop2: detected capacity change from 0 to 7 [ 772.998585][T14891] Dev loop2: unable to read RDB block 7 [ 773.004251][T14891] loop2: unable to read partition table [ 773.010552][T14891] loop2: partition table beyond EOD, truncated [ 773.016800][T14891] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 773.069680][T10489] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 773.071535][T14877] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2332'. [ 773.097477][T10489] usb 4-1: config 0 has no interface number 0 [ 773.114164][T10489] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 773.155848][T14877] kvm: kvm [14875]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000008d) [ 773.163468][T10489] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 773.176107][T10489] usb 4-1: config 0 interface 230 has no altsetting 0 [ 773.189063][T10489] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 773.196969][T14877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.210586][T10489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.212718][T14893] syzkaller1: entered promiscuous mode [ 773.218896][T10489] usb 4-1: Product: syz [ 773.218994][T10489] usb 4-1: Manufacturer: syz [ 773.219013][T10489] usb 4-1: SerialNumber: syz [ 773.232307][T14877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.250236][T14893] syzkaller1: entered allmulticast mode [ 773.257635][T10489] usb 4-1: config 0 descriptor?? [ 773.265553][T14884] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 773.288484][T14877] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2332'. [ 773.294944][T14884] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 773.316498][T14877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.332572][T10489] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 773.335542][T14877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.378356][T10489] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 773.474872][T10484] usb 6-1: USB disconnect, device number 97 [ 773.561378][T14884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.582255][T14884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.410439][T14926] netlink: 'syz.2.2345': attribute type 32 has an invalid length. [ 774.419174][T14926] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2345'. [ 774.598252][T10494] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 774.783112][T10494] usb 2-1: config 1 interface 0 has no altsetting 0 [ 774.799545][T10494] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 774.810432][T10494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.822340][T10494] usb 2-1: Product: syz [ 774.826851][T10494] usb 2-1: Manufacturer: syz [ 774.832562][T10494] usb 2-1: SerialNumber: syz [ 775.585777][T10494] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 775.865877][T10489] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 775.887434][T10489] usb 4-1: USB disconnect, device number 115 [ 775.964492][T14922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.994812][T14922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.092980][T10494] usb 2-1: USB disconnect, device number 22 [ 776.108890][T10494] usblp0: removed [ 776.878348][T10489] usb 4-1: new low-speed USB device number 116 using dummy_hcd [ 777.157333][T10489] usb 4-1: Invalid ep0 maxpacket: 16 [ 777.317305][T10489] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 777.577432][T10489] usb 4-1: Invalid ep0 maxpacket: 16 [ 777.597535][T10489] usb usb4-port1: attempt power cycle [ 777.965035][T14929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.009628][T10489] usb 4-1: new low-speed USB device number 118 using dummy_hcd [ 778.058222][T10489] usb 4-1: Invalid ep0 maxpacket: 16 [ 778.212827][T10489] usb 4-1: new low-speed USB device number 119 using dummy_hcd [ 778.254439][T10489] usb 4-1: Invalid ep0 maxpacket: 16 [ 778.261482][T10489] usb usb4-port1: unable to enumerate USB device [ 778.588907][T14966] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2355'. [ 778.897225][ T5929] usb 6-1: new full-speed USB device number 98 using dummy_hcd [ 779.178853][T14971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 779.245005][ T5929] usb 6-1: unable to get BOS descriptor or descriptor too short [ 779.270484][ T5929] usb 6-1: not running at top speed; connect to a high speed hub [ 779.447676][ T5929] usb 6-1: config 5 has an invalid interface number: 246 but max is 0 [ 779.456759][ T5929] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 779.469641][ T5929] usb 6-1: config 5 has no interface number 0 [ 779.482004][ T5929] usb 6-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 779.501875][ T5929] usb 6-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 779.648409][ T5929] usb 6-1: config 5 interface 246 has no altsetting 0 [ 779.858026][ T5929] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 779.897854][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.917582][ T5929] usb 6-1: Product: syz [ 779.937452][ T5929] usb 6-1: Manufacturer: syz [ 779.955686][ T5929] usb 6-1: SerialNumber: syz [ 780.293950][ T5929] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 780.303762][T14182] usb 6-1: Failed to submit usb control message: -71 [ 780.322255][T14182] usb 6-1: unable to send the bmi data to the device: -71 [ 780.353091][T14182] usb 6-1: unable to get target info from device [ 780.363499][T14182] usb 6-1: could not get target info (-71) [ 780.369661][T14182] usb 6-1: could not probe fw (-71) [ 780.371555][ T5929] usb 6-1: USB disconnect, device number 98 [ 785.156048][T15039] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2372'. [ 786.598323][T15049] tipc: Enabling of bearer rejected, already enabled [ 788.301383][T15069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.311653][T15069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.321986][ T45] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 788.361001][T15072] netlink: 'syz.2.2381': attribute type 1 has an invalid length. [ 788.477463][ T45] usb 4-1: device descriptor read/64, error -71 [ 788.574626][T15074] bond3: (slave veth3): Enslaving as an active interface with a down link [ 788.717183][ T45] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 788.867260][ T45] usb 4-1: device descriptor read/64, error -71 [ 789.016148][ T45] usb usb4-port1: attempt power cycle [ 789.999918][T15068] syz.4.2380 (15068): drop_caches: 2 [ 790.616360][T15087] binder_alloc: 15086: pid 15086 spamming oneway? 1 buffers allocated for a total size of 5184 [ 790.628900][ T45] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 790.661583][ T45] usb 4-1: device descriptor read/8, error -71 [ 790.929120][ T45] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 791.069912][ T45] usb 4-1: device descriptor read/8, error -71 [ 791.208159][T15092] fuse: Bad value for 'group_id' [ 791.213481][T15092] fuse: Bad value for 'group_id' [ 791.231121][ T45] usb usb4-port1: unable to enumerate USB device [ 791.280828][T15090] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4267073536 (8534147072 ns) > initial count (3840401416 ns). Using initial count to start timer. [ 791.647278][ T45] usb 4-1: new low-speed USB device number 124 using dummy_hcd [ 791.802284][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 791.865087][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2048, setting to 8 [ 791.907257][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 791.926624][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.953577][ T45] usb 4-1: config 0 descriptor?? [ 791.983903][T15107] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2391'. [ 792.328329][T10484] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 792.365538][T15111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.389283][T15111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.517130][T10484] usb 2-1: unable to get BOS descriptor or descriptor too short [ 792.542719][ T45] logitech-djreceiver 0003:046D:C52F.001E: item fetching failed at offset 1/5 [ 792.559244][T10484] usb 2-1: not running at top speed; connect to a high speed hub [ 792.578103][ T45] logitech-djreceiver 0003:046D:C52F.001E: logi_dj_probe: parse failed [ 792.586739][T10484] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 792.601878][T10484] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 792.616783][ T45] logitech-djreceiver 0003:046D:C52F.001E: probe with driver logitech-djreceiver failed with error -22 [ 792.629672][T15114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2393'. [ 792.700146][T10484] usb 2-1: config 5 has no interface number 0 [ 792.707470][T10484] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 792.776251][T10484] usb 2-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 793.462803][T10484] usb 2-1: config 5 interface 246 has no altsetting 0 [ 793.515536][T10484] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 793.582515][T10484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.617557][T10484] usb 2-1: Product: syz [ 793.621799][T10484] usb 2-1: Manufacturer: syz [ 793.626450][T10484] usb 2-1: SerialNumber: syz [ 793.935746][T10484] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 793.958511][T14203] usb 2-1: Failed to submit usb control message: -71 [ 793.986537][T14203] usb 2-1: unable to send the bmi data to the device: -71 [ 794.011614][T14203] usb 2-1: unable to get target info from device [ 794.026363][T14203] usb 2-1: could not get target info (-71) [ 794.032530][T14203] usb 2-1: could not probe fw (-71) [ 794.059715][T10484] usb 2-1: USB disconnect, device number 23 [ 794.658342][T10484] usb 4-1: USB disconnect, device number 124 [ 795.167160][T10489] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 795.337336][T10489] usb 2-1: Using ep0 maxpacket: 16 [ 795.357351][T10489] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 795.387108][T10489] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.395292][T10489] usb 2-1: Product: syz [ 795.437240][T10489] usb 2-1: Manufacturer: syz [ 795.467263][T10484] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 795.537580][T10489] usb 2-1: SerialNumber: syz [ 795.597164][T10484] usb 4-1: device descriptor read/64, error -71 [ 795.614976][T10489] usb 2-1: config 0 descriptor?? [ 795.634714][T10489] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 795.857183][T10484] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 795.872703][T10489] usb 2-1: USB disconnect, device number 24 [ 796.087375][T10484] usb 4-1: device descriptor read/64, error -71 [ 796.213914][T15120] binder: BINDER_SET_CONTEXT_MGR already set [ 796.220743][T15120] binder: 15119:15120 ioctl 4018620d 200000000040 returned -16 [ 796.227813][T10484] usb usb4-port1: attempt power cycle [ 796.339118][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 796.339136][ T30] audit: type=1800 audit(1748367445.861:612): pid=15131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2396" name="/" dev="fuse" ino=0 res=0 errno=0 [ 796.617814][T10484] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 796.681937][T10484] usb 4-1: device descriptor read/8, error -71 [ 796.907264][ T5929] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 796.927357][T10484] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 796.997759][T10484] usb 4-1: device descriptor read/8, error -71 [ 797.035489][T15150] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4267073536 (8534147072 ns) > initial count (3840401416 ns). Using initial count to start timer. [ 797.109112][T10484] usb usb4-port1: unable to enumerate USB device [ 797.138909][ T5929] usb 2-1: unable to get BOS descriptor or descriptor too short [ 797.163638][ T5929] usb 2-1: not running at top speed; connect to a high speed hub [ 797.256183][ T5929] usb 2-1: config 129 has an invalid interface number: 4 but max is 0 [ 797.290967][ T5929] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 797.302673][ T5929] usb 2-1: config 129 descriptor has 1 excess byte, ignoring [ 797.346873][ T5929] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 797.384599][ T5929] usb 2-1: config 129 has no interface number 0 [ 797.391345][ T5929] usb 2-1: config 129 has no interface number 1 [ 797.408163][ T5929] usb 2-1: config 129 interface 4 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 797.432520][ T5929] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 797.444109][ T5929] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 797.518182][ T5929] usb 2-1: config 129 interface 4 has no altsetting 0 [ 797.537188][ T5929] usb 2-1: config 129 interface 5 has no altsetting 0 [ 797.581359][ T5929] usb 2-1: string descriptor 0 read error: -22 [ 797.605255][ T5929] usb 2-1: New USB device found, idVendor=0baf, idProduct=0118, bcdDevice=99.20 [ 797.628819][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.709078][ T5929] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 797.755615][ T5929] usb 2-1: MIDIStreaming interface descriptor not found [ 797.827823][T15165] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2407'. [ 797.876273][ T5929] usb 2-1: USB disconnect, device number 25 [ 797.890890][T15165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.935470][T15165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.973840][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 798.161175][T15173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2408'. [ 798.962114][T15184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.050347][ T30] audit: type=1326 audit(1748367448.571:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15187 comm="syz.1.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bea98e969 code=0x7fc00000 [ 799.099763][T15184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.725370][ T30] audit: type=1326 audit(1748367449.251:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15187 comm="syz.1.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1bea98e969 code=0x7fc00000 [ 799.862463][T15191] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4267073536 (8534147072 ns) > initial count (3840401416 ns). Using initial count to start timer. [ 800.913464][ T30] audit: type=1326 audit(1748367450.411:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15206 comm="syz.5.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7c58e969 code=0x7ffc0000 [ 801.698811][ T30] audit: type=1326 audit(1748367450.411:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15206 comm="syz.5.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7c58e969 code=0x7ffc0000 [ 801.804688][ T30] audit: type=1326 audit(1748367450.411:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15206 comm="syz.5.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fca7c58e969 code=0x7ffc0000 [ 801.867329][ T30] audit: type=1326 audit(1748367450.411:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15206 comm="syz.5.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7c58e969 code=0x7ffc0000 [ 801.889709][ C0] vkms_vblank_simulate: vblank timer overrun [ 801.993413][ T30] audit: type=1326 audit(1748367450.411:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15206 comm="syz.5.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7c58e969 code=0x7ffc0000 [ 802.016582][ T30] audit: type=1326 audit(1748367450.411:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15206 comm="syz.5.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca7c58e969 code=0x7ffc0000 [ 802.038877][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.534341][ T30] audit: type=1326 audit(1748367450.411:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15206 comm="syz.5.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7c58e969 code=0x7ffc0000 [ 802.556862][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.564119][ T30] audit: type=1326 audit(1748367450.411:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15206 comm="syz.5.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7c58e969 code=0x7ffc0000 [ 802.591128][ T30] audit: type=1326 audit(1748367450.411:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15206 comm="syz.5.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca7c58e969 code=0x7ffc0000 [ 802.665825][T15219] gtp1: entered promiscuous mode [ 802.671526][ T30] audit: type=1326 audit(1748367450.411:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15206 comm="syz.5.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7c58e969 code=0x7ffc0000 [ 802.693934][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.713607][ T30] audit: type=1326 audit(1748367450.411:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15206 comm="syz.5.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7c58e969 code=0x7ffc0000 [ 802.862041][T15224] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2422'. [ 803.007213][T10494] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 803.189616][T10494] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 803.202167][T10494] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.214012][T10494] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 803.263871][ T5929] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 803.270815][T10494] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.286643][T10494] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 803.299768][T10494] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.314859][T10494] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 803.334317][T10494] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.351088][T10494] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 803.362187][T10494] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.375495][T10494] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 803.389381][T10494] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.404806][T10494] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 803.416359][T10494] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.429627][ T5929] usb 2-1: unable to get BOS descriptor or descriptor too short [ 803.434016][T10494] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 803.455291][ T5929] usb 2-1: not running at top speed; connect to a high speed hub [ 803.495089][T10494] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.507908][T10494] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 803.561768][T15229] overlayfs: missing 'lowerdir' [ 803.599276][ T5929] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 803.608175][ T5929] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 803.618845][T10494] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 803.636831][T10494] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 803.665461][ T5929] usb 2-1: config 5 has no interface number 0 [ 803.674752][T10494] usb 4-1: Product: syz [ 803.689897][T10494] usb 4-1: Manufacturer: syz [ 803.703389][T10494] usb 4-1: SerialNumber: syz [ 803.725080][T10494] usb 4-1: config 0 descriptor?? [ 804.240278][ T5929] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 804.341116][ T5929] usb 2-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 804.364652][ T5929] usb 2-1: config 5 interface 246 has no altsetting 0 [ 804.374878][ T5929] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 804.384677][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.419486][T10494] yurex 4-1:0.0: Could not find endpoints [ 804.490543][ T5929] usb 2-1: Product: syz [ 804.536167][ T5929] usb 2-1: Manufacturer: syz [ 804.549263][T15220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.567084][ T5929] usb 2-1: SerialNumber: syz [ 804.572280][T15220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.830164][T14204] usb 2-1: Failed to submit usb control message: -71 [ 804.838674][ T5929] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 804.853912][T14204] usb 2-1: unable to send the bmi data to the device: -71 [ 804.866240][T14204] usb 2-1: unable to get target info from device [ 804.915954][ T5929] usb 2-1: USB disconnect, device number 26 [ 804.939881][T14204] usb 2-1: could not get target info (-71) [ 804.991842][T14204] usb 2-1: could not probe fw (-71) [ 805.531751][T15241] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 805.666704][ T8767] usb 4-1: USB disconnect, device number 3 [ 806.094531][T15257] syzkaller0: entered promiscuous mode [ 806.103372][T15257] syzkaller0: entered allmulticast mode [ 806.124932][T15257] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 806.137191][ T8767] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 806.318158][ T8767] usb 4-1: Using ep0 maxpacket: 32 [ 806.330277][ T8767] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.340737][ T8767] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 806.354154][T10490] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 806.365304][ T8767] usb 4-1: config 0 interface 0 has no altsetting 0 [ 806.372628][ T8767] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 806.382408][ T8767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.398798][ T8767] usb 4-1: config 0 descriptor?? [ 806.487150][T10490] usb 2-1: device descriptor read/64, error -71 [ 806.509741][T15268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.531255][T15268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.660750][T15273] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2438'. [ 806.727618][T10490] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 806.736375][T15280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.745804][T15280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.858814][T10490] usb 2-1: device descriptor read/64, error -71 [ 806.917254][T10494] usb 6-1: new full-speed USB device number 99 using dummy_hcd [ 806.967869][T10490] usb usb2-port1: attempt power cycle [ 807.099701][T10494] usb 6-1: unable to get BOS descriptor or descriptor too short [ 807.112674][T10494] usb 6-1: not running at top speed; connect to a high speed hub [ 807.126914][T10494] usb 6-1: config 5 has an invalid interface number: 246 but max is 0 [ 807.166088][T10494] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 807.204268][T10494] usb 6-1: config 5 has no interface number 0 [ 807.223052][T10494] usb 6-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 807.238494][T10494] usb 6-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 807.264293][T10494] usb 6-1: config 5 interface 246 has no altsetting 0 [ 807.280947][T10494] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 807.328403][T10490] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 807.339720][T10494] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.352453][T10494] usb 6-1: Product: syz [ 807.356862][T10494] usb 6-1: Manufacturer: syz [ 807.362798][T10494] usb 6-1: SerialNumber: syz [ 807.369859][T10490] usb 2-1: device descriptor read/8, error -71 [ 807.627167][T10490] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 807.668435][T10490] usb 2-1: device descriptor read/8, error -71 [ 807.682056][T10494] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 807.704388][ T7399] usb 6-1: Failed to submit usb control message: -71 [ 807.712975][T10494] usb 6-1: USB disconnect, device number 99 [ 807.739100][ T7399] usb 6-1: unable to send the bmi data to the device: -71 [ 807.764171][ T7399] usb 6-1: unable to get target info from device [ 807.773966][ T7399] usb 6-1: could not get target info (-71) [ 807.780654][T10490] usb usb2-port1: unable to enumerate USB device [ 807.788440][ T7399] usb 6-1: could not probe fw (-71) [ 807.998048][T15289] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 808.071808][T15302] FAULT_INJECTION: forcing a failure. [ 808.071808][T15302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 808.085019][T15302] CPU: 1 UID: 0 PID: 15302 Comm: syz.2.2445 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 808.085049][T15302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 808.085064][T15302] Call Trace: [ 808.085074][T15302] [ 808.085084][T15302] dump_stack_lvl+0x189/0x250 [ 808.085128][T15302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 808.085161][T15302] ? __pfx__printk+0x10/0x10 [ 808.085184][T15302] ? __might_fault+0xb0/0x130 [ 808.085223][T15302] should_fail_ex+0x414/0x560 [ 808.085257][T15302] _copy_from_user+0x2d/0xb0 [ 808.085280][T15302] ___sys_sendmsg+0x158/0x2a0 [ 808.085316][T15302] ? __pfx____sys_sendmsg+0x10/0x10 [ 808.085378][T15302] ? __fget_files+0x2a/0x420 [ 808.085396][T15302] ? __fget_files+0x3a0/0x420 [ 808.085433][T15302] __sys_sendmmsg+0x227/0x430 [ 808.085469][T15302] ? __pfx___sys_sendmmsg+0x10/0x10 [ 808.085508][T15302] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 808.085554][T15302] ? ksys_write+0x22a/0x250 [ 808.085579][T15302] __x64_sys_sendmmsg+0xa0/0xc0 [ 808.085602][T15302] do_syscall_64+0xf6/0x220 [ 808.085631][T15302] ? clear_bhb_loop+0x60/0xb0 [ 808.085659][T15302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.085689][T15302] RIP: 0033:0x7f9c2858e969 [ 808.085709][T15302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.085727][T15302] RSP: 002b:00007f9c293e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 808.085750][T15302] RAX: ffffffffffffffda RBX: 00007f9c287b5fa0 RCX: 00007f9c2858e969 [ 808.085762][T15302] RDX: 000000000000003f RSI: 00002000000000c0 RDI: 0000000000000003 [ 808.085772][T15302] RBP: 00007f9c293e3090 R08: 0000000000000000 R09: 0000000000000000 [ 808.085782][T15302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.085791][T15302] R13: 0000000000000000 R14: 00007f9c287b5fa0 R15: 00007f9c288dfa28 [ 808.085823][T15302] [ 808.907990][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.919767][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.175062][T15317] netlink: 'syz.4.2449': attribute type 32 has an invalid length. [ 809.201709][ T8767] usbhid 4-1:0.0: can't add hid device: -71 [ 809.214000][ T8767] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 809.251485][ T8767] usb 4-1: USB disconnect, device number 4 [ 809.541677][T15323] loop2: detected capacity change from 0 to 7 [ 809.559064][ T6926] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 809.581155][ T6926] loop2: partition table partially beyond EOD, truncated [ 809.727718][ T6926] loop2: p1 size 127 extends beyond EOD, truncated [ 809.776328][T15323] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 809.812518][T15323] loop2: partition table partially beyond EOD, truncated [ 809.858062][T15323] loop2: p1 size 127 extends beyond EOD, truncated [ 810.458045][ T6926] udevd[6926]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 810.544632][ T6926] udevd[6926]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 810.999365][T15339] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2456'. [ 811.557714][ T8767] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 811.826002][T15354] program syz.4.2460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 812.354520][ T8767] usb 4-1: Using ep0 maxpacket: 32 [ 812.369792][ T8767] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 812.384811][ T8767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.410746][T15349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 812.498802][ T8767] usb 4-1: config 0 descriptor?? [ 812.715537][ T8767] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 812.769569][ T8767] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 812.789460][ T8767] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 812.798918][ T8767] usb 4-1: media controller created [ 812.836919][ T8767] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 812.978882][ T8767] az6027: usb out operation failed. (-71) [ 812.988932][ T8767] az6027: usb out operation failed. (-71) [ 812.998957][ T8767] stb0899_attach: Driver disabled by Kconfig [ 813.005121][ T8767] az6027: no front-end attached [ 813.005121][ T8767] [ 813.076583][ T8767] az6027: usb out operation failed. (-71) [ 813.085931][ T8767] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 813.131243][ T8767] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44 [ 813.180688][ T8767] dvb-usb: schedule remote query interval to 400 msecs. [ 813.207021][ T8767] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 813.261417][ T8767] usb 4-1: USB disconnect, device number 5 [ 813.489740][ T8767] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 813.524300][T15359] netlink: 'syz.5.2462': attribute type 32 has an invalid length. [ 814.080791][T15375] loop2: detected capacity change from 0 to 7 [ 814.093251][ T6926] Dev loop2: unable to read RDB block 7 [ 814.117796][ T6926] loop2: unable to read partition table [ 814.134592][ T6926] loop2: partition table beyond EOD, truncated [ 814.154777][T15375] Dev loop2: unable to read RDB block 7 [ 814.158152][T15379] netlink: 'syz.3.2470': attribute type 4 has an invalid length. [ 814.168904][T15379] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2470'. [ 814.175449][T15375] loop2: unable to read partition table [ 814.188313][T15375] loop2: partition table beyond EOD, truncated [ 814.198602][T15375] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 814.824476][T15399] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2477'. [ 814.900325][T15389] dvmrp0: entered allmulticast mode [ 815.120258][ T8767] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 815.440920][ T8767] usb 4-1: unable to get BOS descriptor or descriptor too short [ 815.449844][ T8767] usb 4-1: not running at top speed; connect to a high speed hub [ 815.459872][ T8767] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 815.479428][ T8767] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 815.547265][ T8767] usb 4-1: config 5 has no interface number 0 [ 815.556173][ T8767] usb 4-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 815.678423][ T8767] usb 4-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 815.705223][ T8767] usb 4-1: config 5 interface 246 has no altsetting 0 [ 815.756524][ T8767] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 815.766332][ T8767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.775067][ T8767] usb 4-1: Product: syz [ 815.780504][ T8767] usb 4-1: Manufacturer: syz [ 815.785225][ T8767] usb 4-1: SerialNumber: syz [ 816.114555][ T8767] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 816.120836][ T7399] usb 4-1: Failed to submit usb control message: -71 [ 816.153241][ T8767] usb 4-1: USB disconnect, device number 6 [ 816.157373][ T7399] usb 4-1: unable to send the bmi data to the device: -71 [ 816.193706][ T7399] usb 4-1: unable to get target info from device [ 816.244275][ T7399] usb 4-1: could not get target info (-71) [ 816.275155][ T7399] usb 4-1: could not probe fw (-71) [ 817.097232][T15148] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 817.274139][T15148] usb 2-1: Using ep0 maxpacket: 32 [ 817.291885][T15148] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 817.311611][T14182] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 817.323613][T15148] usb 2-1: config 0 has no interface number 0 [ 817.330837][T15148] usb 2-1: config 0 interface 12 has no altsetting 0 [ 817.341124][T10484] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 817.350814][T14182] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 817.368494][T15148] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 817.412411][T15148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.437943][T15148] usb 2-1: Product: syz [ 817.442184][T15148] usb 2-1: Manufacturer: syz [ 817.452186][T15148] usb 2-1: SerialNumber: syz [ 817.468237][T15148] usb 2-1: config 0 descriptor?? [ 817.537367][T10484] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 817.694849][T10484] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 818.012075][T15439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.017523][T15436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2486'. [ 818.078053][T15439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.255999][T15148] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 818.303870][T15148] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 818.383224][T15148] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 818.420002][T15148] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 818.437592][T15148] usb 2-1: USB disconnect, device number 31 [ 818.997147][T10494] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 819.137270][T10494] usb 6-1: device descriptor read/64, error -71 [ 819.377718][T10494] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 819.527182][T10494] usb 6-1: device descriptor read/64, error -71 [ 819.637741][T10494] usb usb6-port1: attempt power cycle [ 819.987253][T10494] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 820.028148][T10494] usb 6-1: device descriptor read/8, error -71 [ 820.277144][T10494] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 820.345290][T10494] usb 6-1: device descriptor read/8, error -71 [ 820.482220][T10494] usb usb6-port1: unable to enumerate USB device [ 821.021361][T15474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.065357][T15474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.274672][T15471] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2497'. [ 821.293355][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 821.293375][ T30] audit: type=1326 audit(1748367470.821:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15470 comm="syz.3.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bcbd8e969 code=0x7ffc0000 [ 821.411740][ T30] audit: type=1326 audit(1748367470.821:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15470 comm="syz.3.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bcbd8e969 code=0x7ffc0000 [ 821.496799][ T30] audit: type=1326 audit(1748367470.821:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15470 comm="syz.3.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f5bcbd8e969 code=0x7ffc0000 [ 821.611902][ T30] audit: type=1326 audit(1748367470.821:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15470 comm="syz.3.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bcbd8e969 code=0x7ffc0000 [ 821.737220][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 821.827120][ T30] audit: type=1326 audit(1748367470.821:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15470 comm="syz.3.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5bcbd8e969 code=0x7ffc0000 [ 821.940661][ T30] audit: type=1326 audit(1748367470.861:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15470 comm="syz.3.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bcbd8e969 code=0x7ffc0000 [ 822.036054][ T30] audit: type=1326 audit(1748367470.861:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15470 comm="syz.3.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f5bcbd8e969 code=0x7ffc0000 [ 822.179035][T10484] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 822.203341][ T30] audit: type=1326 audit(1748367470.861:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15470 comm="syz.3.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bcbd8e969 code=0x7ffc0000 [ 822.354240][ T30] audit: type=1326 audit(1748367470.861:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15470 comm="syz.3.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bcbd8e969 code=0x7ffc0000 [ 822.377795][ T30] audit: type=1326 audit(1748367470.861:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15470 comm="syz.3.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bcbd8e969 code=0x7ffc0000 [ 822.400246][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.420733][T10484] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 822.552913][T10484] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.085730][T10484] usb 6-1: Product: syz [ 823.095015][T10484] usb 6-1: Manufacturer: syz [ 823.110292][T10484] usb 6-1: SerialNumber: syz [ 823.150764][T10484] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 823.184885][ T5929] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 824.406989][ T5929] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 824.420882][ T5929] ath9k_htc: Failed to initialize the device [ 824.606409][ T5929] usb 6-1: ath9k_htc: USB layer deinitialized [ 826.611445][T10494] usb 6-1: USB disconnect, device number 104 [ 827.915076][T15514] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2509'. [ 827.989399][T15518] binder: 15510:15518 ioctl c0189377 200000000740 returned -22 [ 828.197122][T10484] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 828.247235][T10494] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 828.267373][T10490] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 828.347448][T10484] usb 2-1: Using ep0 maxpacket: 16 [ 828.358420][T10484] usb 2-1: config 0 has an invalid interface number: 231 but max is 1 [ 828.366654][T10484] usb 2-1: config 0 has no interface number 1 [ 828.376767][T10484] usb 2-1: too many endpoints for config 0 interface 231 altsetting 15: 203, using maximum allowed: 30 [ 828.390561][T10484] usb 2-1: config 0 interface 231 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 828.404316][T10484] usb 2-1: config 0 interface 231 has no altsetting 0 [ 828.414789][T10484] usb 2-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 828.421705][T10494] usb 4-1: unable to get BOS descriptor or descriptor too short [ 828.424362][T10484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.440394][T10484] usb 2-1: Product: syz [ 828.440693][T10494] usb 4-1: not running at top speed; connect to a high speed hub [ 828.444777][T10484] usb 2-1: Manufacturer: syz [ 828.452856][T10490] usb 6-1: Using ep0 maxpacket: 8 [ 828.461657][T10484] usb 2-1: SerialNumber: syz [ 828.468917][T10494] usb 4-1: config 9 has an invalid interface number: 2 but max is 0 [ 828.481802][T10484] usb 2-1: config 0 descriptor?? [ 828.496627][T10494] usb 4-1: config 9 has no interface number 0 [ 828.503585][T10490] usb 6-1: config 2 has an invalid interface number: 241 but max is 0 [ 828.513131][T10490] usb 6-1: config 2 has no interface number 0 [ 828.519496][T10494] usb 4-1: config 9 interface 2 altsetting 127 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 828.531088][T10490] usb 6-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 828.541647][T10494] usb 4-1: config 9 interface 2 has no altsetting 0 [ 828.548448][T10490] usb 6-1: config 2 interface 241 has no altsetting 0 [ 828.560295][T10494] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=a3.06 [ 828.570024][T10494] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.578955][T10494] usb 4-1: Product: ဇ [ 828.583557][T10490] usb 6-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 828.592773][T10494] usb 4-1: Manufacturer: ã° [ 828.597547][T10490] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.605737][T10490] usb 6-1: Product: syz [ 828.610276][T10494] usb 4-1: SerialNumber: syz [ 828.630700][T10490] usb 6-1: Manufacturer: syz [ 828.635566][T10490] usb 6-1: SerialNumber: syz [ 828.660167][T10490] ti_usb_3410_5052 6-1:2.241: TI USB 3410 1 port adapter converter detected [ 828.669748][T10490] ti_usb_3410_5052 6-1:2.241: missing endpoints [ 828.691239][T10484] usb 2-1: Could not set interface, error -71 [ 828.736145][T10484] usb 2-1: USB disconnect, device number 32 [ 828.845625][T15521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.864090][T15525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 828.885527][T15521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.916576][T15521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 828.948505][T10494] ti_usb_3410_5052 4-1:9.2: required endpoints missing [ 828.975459][T10494] usb 4-1: USB disconnect, device number 7 [ 830.617253][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 830.955962][T10484] usb 6-1: USB disconnect, device number 105 [ 831.219003][T15550] bond0: option ad_select: unable to set because the bond device is up [ 832.759772][T15567] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2525'. [ 833.183904][T10490] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 833.247205][T10494] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 833.357305][T10490] usb 6-1: Using ep0 maxpacket: 32 [ 833.369401][T10490] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 833.447930][T10490] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 833.582364][T10490] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 833.623078][T10490] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 833.635139][T10494] usb 4-1: config 0 has no interfaces? [ 833.657617][T10490] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.698940][T10494] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 833.709116][T10494] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.735682][T10490] usb 6-1: config 0 descriptor?? [ 833.740939][T10494] usb 4-1: Product: syz [ 833.748175][T10494] usb 4-1: Manufacturer: syz [ 833.749396][T15572] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 833.753090][T10494] usb 4-1: SerialNumber: syz [ 833.826450][T10490] hub 6-1:0.0: USB hub found [ 833.846656][T10494] usb 4-1: config 0 descriptor?? [ 834.002119][T10490] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 834.049326][T15579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2528'. [ 834.132529][T15575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.142139][T15575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.426125][T10490] usbhid 6-1:0.0: can't add hid device: -71 [ 834.434868][T10490] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 834.488949][T10490] usb 6-1: USB disconnect, device number 106 [ 834.760974][ T5929] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 835.116075][ T5929] usb 2-1: unable to get BOS descriptor or descriptor too short [ 835.141478][ T5929] usb 2-1: not running at top speed; connect to a high speed hub [ 835.178308][ T5929] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 835.557131][ T5929] usb 2-1: config 5 has an invalid descriptor of length 255, skipping remainder of the config [ 835.587927][ T5929] usb 2-1: config 5 has no interface number 0 [ 835.594769][ T5929] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 835.622238][ T5929] usb 2-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 835.706380][ T5929] usb 2-1: config 5 interface 246 has no altsetting 0 [ 836.045564][ T5929] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 836.090245][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.119962][ T5929] usb 2-1: Product: syz [ 836.124241][ T5929] usb 2-1: Manufacturer: syz [ 836.227504][ T5929] usb 2-1: SerialNumber: syz [ 836.235683][T10490] usb 4-1: USB disconnect, device number 8 [ 836.593772][T15606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2534'. [ 836.751656][ T5929] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 836.754761][ T7399] usb 2-1: Failed to submit usb control message: -71 [ 836.798945][ T5929] usb 2-1: USB disconnect, device number 33 [ 836.916170][ T7399] usb 2-1: unable to send the bmi data to the device: -71 [ 837.143273][ T7399] usb 2-1: unable to get target info from device [ 837.197771][ T7399] usb 2-1: could not get target info (-71) [ 837.236690][ T7399] usb 2-1: could not probe fw (-71) [ 837.765873][T15628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2537'. [ 837.836271][T15628] netlink: 18 bytes leftover after parsing attributes in process `syz.1.2537'. [ 838.177150][T10490] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 838.317180][T10490] usb 2-1: device descriptor read/64, error -71 [ 838.447430][ T5929] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 838.557319][T10490] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 838.787158][T10490] usb 2-1: device descriptor read/64, error -71 [ 838.795256][ T5929] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 838.815892][ T5929] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 838.840020][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.878323][ T5929] usb 4-1: Product: syz [ 838.893965][ T5929] usb 4-1: Manufacturer: syz [ 838.908387][T10490] usb usb2-port1: attempt power cycle [ 838.925556][ T5929] usb 4-1: SerialNumber: syz [ 839.212085][ T5929] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 839.277206][T10490] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 839.298103][T10490] usb 2-1: device descriptor read/8, error -71 [ 839.374642][T15641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.383884][T15641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.394833][T15641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.404086][T15641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.473866][T15637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.505540][T15637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.577417][T10490] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 839.606820][T15637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.618397][T10490] usb 2-1: device descriptor read/8, error -71 [ 839.621860][T15637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.682375][ T5929] usb 4-1: USB disconnect, device number 9 [ 839.727748][T10490] usb usb2-port1: unable to enumerate USB device [ 839.907562][T15636] usblp0: removed [ 840.256468][T15652] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2542'. [ 840.309584][T15652] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 840.697229][ T5929] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 840.881734][ T5929] usb 6-1: device descriptor read/64, error -71 [ 840.980093][T15661] FAULT_INJECTION: forcing a failure. [ 840.980093][T15661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.993968][T15661] CPU: 0 UID: 0 PID: 15661 Comm: syz.1.2546 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 840.993990][T15661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 840.994001][T15661] Call Trace: [ 840.994008][T15661] [ 840.994015][T15661] dump_stack_lvl+0x189/0x250 [ 840.994050][T15661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 840.994073][T15661] ? __pfx__printk+0x10/0x10 [ 840.994089][T15661] ? __might_fault+0xb0/0x130 [ 840.994115][T15661] should_fail_ex+0x414/0x560 [ 840.994139][T15661] _copy_from_user+0x2d/0xb0 [ 840.994156][T15661] __x64_sys_epoll_ctl+0x126/0x1a0 [ 840.994172][T15661] ? rcu_is_watching+0x15/0xb0 [ 840.994193][T15661] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 840.994213][T15661] ? do_syscall_64+0xba/0x220 [ 840.994235][T15661] do_syscall_64+0xf6/0x220 [ 840.994254][T15661] ? clear_bhb_loop+0x60/0xb0 [ 840.994273][T15661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.994288][T15661] RIP: 0033:0x7f1bea98e969 [ 840.994302][T15661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.994315][T15661] RSP: 002b:00007f1beb8d9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 840.994332][T15661] RAX: ffffffffffffffda RBX: 00007f1beabb5fa0 RCX: 00007f1bea98e969 [ 840.994344][T15661] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 840.994353][T15661] RBP: 00007f1beb8d9090 R08: 0000000000000000 R09: 0000000000000000 [ 840.994363][T15661] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.994373][T15661] R13: 0000000000000000 R14: 00007f1beabb5fa0 R15: 00007f1beacdfa28 [ 840.994396][T15661] [ 841.493647][T15663] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2547'. [ 841.598888][ T5929] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 841.831276][ T5929] usb 6-1: device descriptor read/64, error -71 [ 841.948553][ T5929] usb usb6-port1: attempt power cycle [ 842.287101][ T5929] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 842.359703][ T5929] usb 6-1: device descriptor read/8, error -71 [ 842.619978][ T5831] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 842.627810][ T5929] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 842.666349][ T5929] usb 6-1: device descriptor read/8, error -71 [ 842.767223][ T5831] usb 2-1: device descriptor read/64, error -71 [ 842.787568][ T5929] usb usb6-port1: unable to enumerate USB device [ 843.018173][T15148] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 843.026210][ T5831] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 843.167141][T15148] usb 4-1: device descriptor read/64, error -71 [ 843.177430][ T5831] usb 2-1: device descriptor read/64, error -71 [ 843.287564][ T5831] usb usb2-port1: attempt power cycle [ 843.407098][T15148] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 843.549903][T15686] FAULT_INJECTION: forcing a failure. [ 843.549903][T15686] name failslab, interval 1, probability 0, space 0, times 0 [ 843.563777][T15148] usb 4-1: device descriptor read/64, error -71 [ 843.570449][T15686] CPU: 1 UID: 0 PID: 15686 Comm: syz.5.2553 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 843.570480][T15686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 843.570494][T15686] Call Trace: [ 843.570503][T15686] [ 843.570513][T15686] dump_stack_lvl+0x189/0x250 [ 843.570555][T15686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 843.570587][T15686] ? __pfx__printk+0x10/0x10 [ 843.570612][T15686] ? __pfx___might_resched+0x10/0x10 [ 843.570640][T15686] ? fs_reclaim_acquire+0x7d/0x100 [ 843.570675][T15686] should_fail_ex+0x414/0x560 [ 843.570709][T15686] should_failslab+0xa8/0x100 [ 843.570738][T15686] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 843.570764][T15686] ? __alloc_skb+0x112/0x2d0 [ 843.570795][T15686] __alloc_skb+0x112/0x2d0 [ 843.570825][T15686] alloc_skb_with_frags+0xca/0x890 [ 843.570868][T15686] sock_alloc_send_pskb+0x857/0x990 [ 843.570922][T15686] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 843.570967][T15686] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 843.570993][T15686] unix_dgram_sendmsg+0x5c2/0x17c0 [ 843.571035][T15686] ? aa_sk_perm+0x81e/0x950 [ 843.571065][T15686] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 843.571099][T15686] ? aa_sock_msg_perm+0x94/0x160 [ 843.571127][T15686] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 843.571154][T15686] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 843.571189][T15686] __sock_sendmsg+0x21c/0x270 [ 843.571228][T15686] ____sys_sendmsg+0x52d/0x830 [ 843.571264][T15686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 843.571302][T15686] ? import_iovec+0x74/0xa0 [ 843.571328][T15686] ___sys_sendmsg+0x21f/0x2a0 [ 843.571359][T15686] ? __pfx____sys_sendmsg+0x10/0x10 [ 843.571434][T15686] ? __might_fault+0xb0/0x130 [ 843.571465][T15686] __sys_sendmmsg+0x227/0x430 [ 843.571500][T15686] ? __pfx___sys_sendmmsg+0x10/0x10 [ 843.571539][T15686] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 843.571585][T15686] ? ksys_write+0x22a/0x250 [ 843.571607][T15686] ? rcu_is_watching+0x15/0xb0 [ 843.571646][T15686] __x64_sys_sendmmsg+0xa0/0xc0 [ 843.571677][T15686] do_syscall_64+0xf6/0x220 [ 843.571705][T15686] ? clear_bhb_loop+0x60/0xb0 [ 843.571732][T15686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.571754][T15686] RIP: 0033:0x7fca7c58e969 [ 843.571774][T15686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 843.571794][T15686] RSP: 002b:00007fca7d3f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 843.571817][T15686] RAX: ffffffffffffffda RBX: 00007fca7c7b5fa0 RCX: 00007fca7c58e969 [ 843.571833][T15686] RDX: 000000000000003f RSI: 00002000000000c0 RDI: 0000000000000003 [ 843.571847][T15686] RBP: 00007fca7d3f8090 R08: 0000000000000000 R09: 0000000000000000 [ 843.571861][T15686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 843.571875][T15686] R13: 0000000000000000 R14: 00007fca7c7b5fa0 R15: 00007fca7c8dfa28 [ 843.571908][T15686] [ 843.590921][T15679] IPVS: You probably need to specify IP address on multicast interface. [ 843.677282][ T5831] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 843.721439][T15679] IPVS: Error connecting to the multicast addr [ 843.724913][T15148] usb usb4-port1: attempt power cycle [ 843.840453][T15679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.877583][ T5831] usb 2-1: device descriptor read/8, error -71 [ 843.916328][T15679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.937853][T15679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.062181][T15679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.643053][T15148] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 844.651119][ T5831] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 844.702768][ T5831] usb 2-1: device descriptor read/8, error -71 [ 844.709601][T15148] usb 4-1: device descriptor read/8, error -71 [ 844.907410][ T5831] usb usb2-port1: unable to enumerate USB device [ 845.384556][T15148] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 845.418066][T15148] usb 4-1: device descriptor read/8, error -71 [ 845.529529][T15148] usb usb4-port1: unable to enumerate USB device [ 845.587561][T15682] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2552'. [ 845.608925][T15682] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2552'. [ 846.148567][T15708] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2561'. [ 846.587150][T15148] usb 6-1: new full-speed USB device number 111 using dummy_hcd [ 846.774731][T15148] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 846.841503][T15720] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2565'. [ 846.860481][T15148] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.897213][T15148] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 846.913586][T15148] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.941090][T15148] hub 6-1:4.0: USB hub found [ 847.147469][T10490] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 847.179343][T15148] hub 6-1:4.0: 12 ports detected [ 847.287385][T15148] usb 6-1: selecting invalid altsetting 1 [ 847.293707][T15148] hub 6-1:4.0: Using single TT (err -22) [ 847.301370][T15148] hub 6-1:4.0: insufficient power available to use all downstream ports [ 847.312296][T10490] usb 2-1: unable to get BOS descriptor or descriptor too short [ 847.334466][T10490] usb 2-1: not running at top speed; connect to a high speed hub [ 847.341664][T15148] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 847.372905][T10490] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 847.389090][T10490] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 847.444693][T10490] usb 2-1: config 5 has no interface number 0 [ 847.525346][T15148] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 847.557951][T15148] usb 6-1: USB disconnect, device number 111 [ 847.606363][T10490] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 847.690161][T10490] usb 2-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 847.716455][T10490] usb 2-1: config 5 interface 246 has no altsetting 0 [ 847.748249][T10490] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 847.757749][T10490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.765826][T10490] usb 2-1: Product: syz [ 847.775362][T10490] usb 2-1: Manufacturer: syz [ 847.808314][T10490] usb 2-1: SerialNumber: syz [ 847.907682][ T5831] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 848.120278][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 848.537402][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 848.680496][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.692200][ T7399] usb 2-1: Failed to submit usb control message: -71 [ 848.717213][ T5831] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 848.720208][T10490] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 848.731203][ T5831] usb 4-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 848.750534][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.784437][ T7399] usb 2-1: unable to send the bmi data to the device: -71 [ 848.787856][ T5831] usb 4-1: config 0 descriptor?? [ 848.829137][ T7399] usb 2-1: unable to get target info from device [ 848.847866][T10490] usb 2-1: USB disconnect, device number 42 [ 848.859755][ T7399] usb 2-1: could not get target info (-71) [ 848.967588][ T7399] usb 2-1: could not probe fw (-71) [ 849.010355][T15732] netlink: 'syz.3.2567': attribute type 21 has an invalid length. [ 849.057340][T15732] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2567'. [ 849.759333][ T5831] cherry 0003:046A:0023.001F: unbalanced collection at end of report description [ 849.887316][ T5831] cherry 0003:046A:0023.001F: probe with driver cherry failed with error -22 [ 850.345988][ T5831] usb 4-1: USB disconnect, device number 14 [ 851.103486][T15764] netlink: 'syz.2.2573': attribute type 3 has an invalid length. [ 851.511598][T15768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.577932][T15768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.881610][T15782] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2580'. [ 852.931095][T15783] netlink: 'syz.1.2579': attribute type 5 has an invalid length. [ 852.954041][T15783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2579'. [ 853.147120][T10490] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 853.317381][T15787] loop2: detected capacity change from 0 to 7 [ 853.369823][ T6926] Dev loop2: unable to read RDB block 7 [ 853.380040][ T6926] loop2: AHDI p1 p2 [ 853.386100][T10490] usb 4-1: unable to get BOS descriptor or descriptor too short [ 853.395855][ T6926] loop2: partition table partially beyond EOD, truncated [ 853.408542][T10490] usb 4-1: not running at top speed; connect to a high speed hub [ 853.441139][ T6926] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 853.455739][T10490] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 853.470568][T10490] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 853.483320][T10490] usb 4-1: config 5 has no interface number 0 [ 853.520206][T10490] usb 4-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 853.562244][T10490] usb 4-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 853.604815][T10490] usb 4-1: config 5 interface 246 has no altsetting 0 [ 853.653777][T10490] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 853.669820][T10490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.679158][T10490] usb 4-1: Product: syz [ 853.683746][T10490] usb 4-1: Manufacturer: syz [ 853.689163][T10490] usb 4-1: SerialNumber: syz [ 853.721831][ T6926] udevd[6926]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 853.994574][T10490] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 854.017607][T14203] usb 4-1: Failed to submit usb control message: -71 [ 854.025271][T14203] usb 4-1: unable to send the bmi data to the device: -71 [ 854.029658][T10490] usb 4-1: USB disconnect, device number 15 [ 854.064517][T14203] usb 4-1: unable to get target info from device [ 854.081286][T14203] usb 4-1: could not get target info (-71) [ 854.094184][T14203] usb 4-1: could not probe fw (-71) [ 854.526160][T15807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.601237][T15807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.638574][T15807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.730273][T15807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.968598][T10490] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 855.002855][T15816] netlink: 'syz.5.2587': attribute type 3 has an invalid length. [ 855.187214][T10490] usb 4-1: Using ep0 maxpacket: 16 [ 855.197494][T10490] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 855.220062][T10490] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 855.240926][T10490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.339732][T10490] usb 4-1: Product: syz [ 855.376442][T10490] usb 4-1: Manufacturer: syz [ 855.392771][T10490] usb 4-1: SerialNumber: syz [ 855.432577][T10490] usb 4-1: config 0 descriptor?? [ 855.475843][T10490] hub 4-1:0.0: bad descriptor, ignoring hub [ 855.587628][T10490] hub 4-1:0.0: probe with driver hub failed with error -5 [ 855.661625][T10490] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 855.789885][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 855.789907][ T30] audit: type=1326 audit(1748367505.321:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15806 comm="syz.4.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc906d8e969 code=0x7ffc0000 [ 855.896117][ T30] audit: type=1326 audit(1748367505.361:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15806 comm="syz.4.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc906d8e969 code=0x7ffc0000 [ 856.008363][T10494] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 856.059628][ T30] audit: type=1326 audit(1748367505.361:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15806 comm="syz.4.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fc906d8e969 code=0x7ffc0000 [ 856.162847][ T30] audit: type=1326 audit(1748367505.361:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15806 comm="syz.4.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc906d8e969 code=0x7ffc0000 [ 856.187236][T10494] usb 2-1: device descriptor read/64, error -71 [ 856.293400][ T30] audit: type=1326 audit(1748367505.361:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15806 comm="syz.4.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc906d8e969 code=0x7ffc0000 [ 856.402388][ T30] audit: type=1326 audit(1748367505.361:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15806 comm="syz.4.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fc906d8e969 code=0x7ffc0000 [ 856.452114][T10494] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 856.497427][ T30] audit: type=1326 audit(1748367505.391:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15806 comm="syz.4.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc906d8e969 code=0x7ffc0000 [ 856.585565][ T30] audit: type=1326 audit(1748367505.401:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15806 comm="syz.4.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc906d8e969 code=0x7ffc0000 [ 856.617573][T10494] usb 2-1: device descriptor read/64, error -71 [ 856.687045][ T30] audit: type=1326 audit(1748367505.411:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15806 comm="syz.4.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc906d8e969 code=0x7ffc0000 [ 856.738764][T10494] usb usb2-port1: attempt power cycle [ 856.801108][ T30] audit: type=1326 audit(1748367505.411:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15806 comm="syz.4.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc906d8e969 code=0x7ffc0000 [ 857.087224][T10494] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 857.119354][T10494] usb 2-1: device descriptor read/8, error -71 [ 857.367307][T10494] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 857.397928][T10494] usb 2-1: device descriptor read/8, error -71 [ 857.517536][T10494] usb usb2-port1: unable to enumerate USB device [ 857.748116][T10490] usb 4-1: USB disconnect, device number 16 [ 857.897683][T15839] SET target dimension over the limit! [ 858.229223][T15848] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2598'. [ 858.507052][T10484] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 858.723686][T10484] usb 4-1: unable to get BOS descriptor or descriptor too short [ 858.733736][T10484] usb 4-1: not running at top speed; connect to a high speed hub [ 858.748472][T10484] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 858.756728][T10484] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 858.800924][T10484] usb 4-1: config 5 has no interface number 0 [ 858.817775][T10484] usb 4-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 858.837433][T10484] usb 4-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 858.863216][T10484] usb 4-1: config 5 interface 246 has no altsetting 0 [ 858.883919][T10484] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 858.901656][T10484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.922399][T10484] usb 4-1: Product: syz [ 858.934240][T10484] usb 4-1: Manufacturer: syz [ 858.953438][T10484] usb 4-1: SerialNumber: syz [ 859.239425][T10484] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 859.252405][ T36] usb 4-1: Failed to submit usb control message: -71 [ 859.324811][ T36] usb 4-1: unable to send the bmi data to the device: -71 [ 859.351214][T10484] usb 4-1: USB disconnect, device number 17 [ 859.364421][ T36] usb 4-1: unable to get target info from device [ 859.434985][ T36] usb 4-1: could not get target info (-71) [ 859.475213][ T36] usb 4-1: could not probe fw (-71) [ 860.016007][T15888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.054199][T15888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.210541][T15888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.263037][T15888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.435080][T15901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2608'. [ 860.731793][T10490] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 860.887131][T10490] usb 2-1: device descriptor read/64, error -71 [ 860.987336][T15904] netlink: 'syz.1.2613': attribute type 12 has an invalid length. [ 860.995371][T15904] netlink: 'syz.1.2613': attribute type 29 has an invalid length. [ 861.047561][T15904] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2613'. [ 861.059934][T15904] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2613'. [ 861.147205][T10490] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 861.307226][T10490] usb 2-1: device descriptor read/64, error -71 [ 861.436084][T10490] usb usb2-port1: attempt power cycle [ 861.797218][T10490] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 861.818520][T10490] usb 2-1: device descriptor read/8, error -71 [ 861.967091][T15148] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 862.042831][T15914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.057333][T10490] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 862.080144][T10490] usb 2-1: device descriptor read/8, error -71 [ 862.104111][T15914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.132040][T15148] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 862.148396][T15148] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.167050][T15148] usb 6-1: config 0 has no interface number 0 [ 862.183695][T15148] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 862.194431][T15148] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 862.197717][T10490] usb usb2-port1: unable to enumerate USB device [ 862.230245][T15148] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 862.249979][T15148] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.270332][T15148] usb 6-1: Product: syz [ 862.274576][T15148] usb 6-1: Manufacturer: syz [ 862.307334][T15148] usb 6-1: SerialNumber: syz [ 862.315643][T15148] usb 6-1: config 0 descriptor?? [ 862.362983][T15914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.413992][T15914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.994488][T15927] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2619'. [ 863.507190][T10490] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 863.689670][T10490] usb 4-1: Using ep0 maxpacket: 16 [ 863.696331][T10490] usb 4-1: no configurations [ 863.701630][T10490] usb 4-1: can't read configurations, error -22 [ 863.847216][T10490] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 864.007144][T10490] usb 4-1: Using ep0 maxpacket: 16 [ 864.017238][T10490] usb 4-1: no configurations [ 864.022090][T10490] usb 4-1: can't read configurations, error -22 [ 864.054302][T10490] usb usb4-port1: attempt power cycle [ 864.267164][T10494] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 864.407355][T10490] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 864.439732][T10490] usb 4-1: Using ep0 maxpacket: 16 [ 864.447739][T10494] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 864.462945][T10494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.472197][T10490] usb 4-1: no configurations [ 864.477415][T10490] usb 4-1: can't read configurations, error -22 [ 864.495978][T10494] usb 2-1: config 0 descriptor?? [ 864.518142][T10494] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 864.607503][T10490] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 864.628040][T10490] usb 4-1: Using ep0 maxpacket: 16 [ 864.634103][T10490] usb 4-1: no configurations [ 864.639698][T10490] usb 4-1: can't read configurations, error -22 [ 864.656864][T10490] usb usb4-port1: unable to enumerate USB device [ 864.865635][T15148] usb 6-1: USB disconnect, device number 112 [ 865.166702][T15942] netlink: 'syz.4.2624': attribute type 32 has an invalid length. [ 865.279873][T15942] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2624'. [ 865.341717][T15938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.353437][T15938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.487993][T10489] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 865.667127][T10489] usb 6-1: Using ep0 maxpacket: 32 [ 865.680358][T10489] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 865.739881][T10489] usb 6-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 865.757118][T10489] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.785877][T10489] usb 6-1: Product: syz [ 865.796050][T10489] usb 6-1: Manufacturer: syz [ 865.824927][T10489] usb 6-1: SerialNumber: syz [ 865.912564][T10489] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input46 [ 866.084575][ T5182] bcm5974 6-1:1.0: could not read from device [ 866.163590][T10489] usb 6-1: USB disconnect, device number 113 [ 866.167197][ T5182] bcm5974 6-1:1.0: could not read from device [ 866.831058][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2631'. [ 866.921219][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2631'. [ 867.596095][T10494] usb 2-1: USB disconnect, device number 51 [ 867.728794][T15980] usb usb8: usbfs: process 15980 (syz.5.2635) did not claim interface 0 before use [ 868.642390][T15984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.784087][T15984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.016892][T15986] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2638'. [ 869.327102][T10494] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 869.501200][T10494] usb 2-1: unable to get BOS descriptor or descriptor too short [ 869.510007][T10494] usb 2-1: not running at top speed; connect to a high speed hub [ 869.542761][T10494] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 869.552945][T10494] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 869.573717][T10494] usb 2-1: config 5 has no interface number 0 [ 869.593745][T10494] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 869.652599][T10494] usb 2-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 869.713004][T10494] usb 2-1: config 5 interface 246 has no altsetting 0 [ 869.744662][T10494] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 869.755075][T10494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.770320][T10494] usb 2-1: Product: syz [ 869.781452][T10494] usb 2-1: Manufacturer: syz [ 869.803844][T10494] usb 2-1: SerialNumber: syz [ 870.288340][T10494] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 870.302441][T14205] usb 2-1: Failed to submit usb control message: -71 [ 870.324083][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.327832][T14205] usb 2-1: unable to send the bmi data to the device: -71 [ 870.330658][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.353028][T10494] usb 2-1: USB disconnect, device number 52 [ 870.367310][T14205] usb 2-1: unable to get target info from device [ 870.506497][T14205] usb 2-1: could not get target info (-71) [ 870.556367][T14205] usb 2-1: could not probe fw (-71) [ 871.497532][T15997] vivid-007: ================= START STATUS ================= [ 871.506146][T15997] vivid-007: Enable Output Cropping: true [ 871.530919][T15997] vivid-007: Enable Output Composing: true [ 871.548605][T15997] vivid-007: Enable Output Scaler: true [ 871.555662][T15997] vivid-007: Tx RGB Quantization Range: Automatic [ 871.580478][T15997] vivid-007: Transmit Mode: HDMI [ 871.613188][T15997] vivid-007: Hotplug Present: 0x00000000 [ 871.641867][T15997] vivid-007: RxSense Present: 0x00000000 [ 871.647919][T15997] vivid-007: EDID Present: 0x00000000 [ 871.653382][T15997] vivid-007: ================== END STATUS ================== [ 871.769268][T16003] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 871.851224][T16003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2641'. [ 871.957206][T10494] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 872.110307][T10494] usb 2-1: config 162 has an invalid interface number: 251 but max is 1 [ 872.119449][T10494] usb 2-1: config 162 has an invalid interface number: 209 but max is 1 [ 872.138918][T10494] usb 2-1: config 162 has no interface number 0 [ 872.163056][T10494] usb 2-1: config 162 has no interface number 1 [ 872.186835][T10494] usb 2-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 872.244513][T10494] usb 2-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 872.281836][T10494] usb 2-1: config 162 interface 209 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 872.357915][T10494] usb 2-1: config 162 interface 209 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 872.380211][T10494] usb 2-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 872.401588][T10494] usb 2-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 872.422334][T10494] usb 2-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 872.453619][T10494] usb 2-1: config 162 interface 251 has no altsetting 0 [ 872.552622][T10494] usb 2-1: config 162 interface 209 has no altsetting 0 [ 872.564362][T10494] usb 2-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88 [ 872.574032][T10494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.582889][T10494] usb 2-1: Product: syz [ 872.590605][T10494] usb 2-1: Manufacturer: syz [ 872.658507][T10494] usb 2-1: SerialNumber: syz [ 873.007994][T10494] io_edgeport 2-1:162.251: required endpoints missing [ 873.326761][T16022] sctp: [Deprecated]: syz.1.2643 (pid 16022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 873.326761][T16022] Use struct sctp_sack_info instead [ 874.049814][T16030] netlink: 'syz.3.2648': attribute type 10 has an invalid length. [ 874.058023][T16030] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2648'. [ 874.068222][T16030] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 874.897814][ T5831] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 874.999950][T10494] io_edgeport 2-1:162.209: Edgeport 2 port adapter converter detected [ 875.010014][T16045] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20002 [ 875.047751][T10494] usb 2-1: detected [ 875.069157][T10494] usb 2-1: error in getting manufacturer descriptor: -71 [ 875.115564][T10494] usb 2-1: error in getting boot descriptor: -71 [ 875.133350][T10494] usb 2-1: Device Reported 0 serial ports vs. core thinking we have 2 ports, email greg@kroah.com this information. [ 875.148780][T10494] usb 2-1: Direct firmware load for edgeport/down.fw failed with error -2 [ 875.183524][T10494] usb 2-1: Falling back to sysfs fallback for: edgeport/down.fw [ 875.200812][T16048] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2653'. [ 875.284192][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 875.284214][ T30] audit: type=1326 audit(1748367524.811:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16046 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bea98e969 code=0x7fc00000 [ 875.383256][T16053] netlink: 'syz.3.2655': attribute type 32 has an invalid length. [ 875.647168][T10490] usb 6-1: new full-speed USB device number 114 using dummy_hcd [ 875.732513][T16063] netlink: 'syz.3.2657': attribute type 5 has an invalid length. [ 875.743699][T16063] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2657'. [ 875.899725][ T5831] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 876.008017][ T30] audit: type=1326 audit(1748367525.541:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16046 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1bea98e969 code=0x7fc00000 [ 876.047078][T10490] usb 6-1: unable to get BOS descriptor or descriptor too short [ 876.058203][T10490] usb 6-1: not running at top speed; connect to a high speed hub [ 876.090655][T16068] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2657'. [ 876.107727][T10490] usb 6-1: config 5 has an invalid interface number: 246 but max is 0 [ 876.121393][T10490] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 876.145671][T10490] usb 6-1: config 5 has no interface number 0 [ 876.199577][T10490] usb 6-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 876.223190][T10490] usb 6-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 876.250301][T10490] usb 6-1: config 5 interface 246 has no altsetting 0 [ 876.272613][T10490] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 876.301907][T10490] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.347335][T10490] usb 6-1: Product: syz [ 876.356285][T10490] usb 6-1: Manufacturer: syz [ 876.361386][T10490] usb 6-1: SerialNumber: syz [ 876.684535][T10490] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 876.705540][T10490] usb 6-1: USB disconnect, device number 114 [ 876.712229][T14203] usb 6-1: Failed to submit usb control message: -71 [ 876.775366][T14203] usb 6-1: unable to send the bmi data to the device: -71 [ 876.797027][T14203] usb 6-1: unable to get target info from device [ 876.815192][T14203] usb 6-1: could not get target info (-71) [ 876.821474][T14203] usb 6-1: could not probe fw (-71) [ 877.980060][T16086] geneve2: entered promiscuous mode [ 879.696152][T16109] netlink: 'syz.2.2666': attribute type 32 has an invalid length. [ 880.003576][T16086] ALSA: seq fatal error: cannot create timer (-22) [ 880.599219][ T30] audit: type=1326 audit(1748367530.121:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bcbd8e969 code=0x7ffc0000 [ 880.621625][ C1] vkms_vblank_simulate: vblank timer overrun [ 880.655152][ T30] audit: type=1326 audit(1748367530.121:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bcbd8e969 code=0x7ffc0000 [ 880.678749][ T30] audit: type=1326 audit(1748367530.161:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5bcbd8d2d0 code=0x7ffc0000 [ 880.705581][ T30] audit: type=1326 audit(1748367530.161:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bcbd8e56b code=0x7ffc0000 [ 880.742809][ T30] audit: type=1326 audit(1748367530.161:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bcbd8e56b code=0x7ffc0000 [ 880.771815][T16124] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2672'. [ 880.791127][T16124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.800260][T16124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.814113][ T30] audit: type=1326 audit(1748367530.161:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bcbd8e56b code=0x7ffc0000 [ 880.836448][ C1] vkms_vblank_simulate: vblank timer overrun [ 880.846340][ T30] audit: type=1326 audit(1748367530.161:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bcbd8e56b code=0x7ffc0000 [ 880.869702][ T5831] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 880.880378][ T30] audit: type=1326 audit(1748367530.271:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bcbd8e56b code=0x7ffc0000 [ 880.903472][ T30] audit: type=1326 audit(1748367530.341:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bcbd8e56b code=0x7ffc0000 [ 880.927645][ T30] audit: type=1326 audit(1748367530.411:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.3.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bcbd8e56b code=0x7ffc0000 [ 881.030043][ T5831] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.041645][ T5831] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 881.050864][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.074919][ T5831] usb 4-1: config 0 descriptor?? [ 881.089437][ T5831] pwc: Askey VC010 type 2 USB webcam detected. [ 881.494323][ T5831] pwc: recv_control_msg error -32 req 02 val 2b00 [ 881.502929][ T5831] pwc: recv_control_msg error -32 req 02 val 2700 [ 881.512098][ T5831] pwc: recv_control_msg error -32 req 02 val 2c00 [ 881.519889][ T5831] pwc: recv_control_msg error -32 req 04 val 1000 [ 881.718593][T16131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.733788][T16131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.760553][T16131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.770291][T16131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.393988][T16133] tap0: tun_chr_ioctl cmd 1074025677 [ 882.404146][T16133] tap0: linktype set to 780 [ 882.457247][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 883.634289][ T5831] pwc: recv_control_msg error -71 req 02 val 2000 [ 883.669381][ T5831] pwc: recv_control_msg error -71 req 02 val 2100 [ 883.705614][ T5831] pwc: recv_control_msg error -71 req 04 val 1500 [ 883.761886][ T5831] pwc: recv_control_msg error -71 req 02 val 2500 [ 883.803281][ T5831] pwc: recv_control_msg error -71 req 02 val 2400 [ 883.831100][T16147] netlink: 'syz.3.2678': attribute type 32 has an invalid length. [ 883.839287][ T5831] pwc: recv_control_msg error -71 req 02 val 2600 [ 883.849408][ T5831] pwc: recv_control_msg error -71 req 02 val 2900 [ 883.882753][ T5831] pwc: recv_control_msg error -71 req 02 val 2800 [ 883.917121][ T5831] pwc: recv_control_msg error -71 req 04 val 1100 [ 883.937475][ T5831] pwc: recv_control_msg error -71 req 04 val 1200 [ 883.972146][ T5831] pwc: Registered as video103. [ 884.010318][ T5831] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input47 [ 884.077229][ T8767] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 884.091740][ T5831] usb 4-1: USB disconnect, device number 22 [ 884.138864][T16157] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2683'. [ 884.214618][T16157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.234261][T16157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.241317][ T8767] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 884.277107][ T8767] usb 6-1: config 0 interface 0 has no altsetting 0 [ 884.301187][ T8767] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 884.314291][ T8767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.335293][T16164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2684'. [ 884.343471][ T8767] usb 6-1: Product: syz [ 884.355927][ T8767] usb 6-1: Manufacturer: syz [ 884.367379][T16164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2684'. [ 884.385044][ T8767] usb 6-1: SerialNumber: syz [ 884.406744][ T8767] usb 6-1: config 0 descriptor?? [ 884.435622][ T8767] keyspan 6-1:0.0: Keyspan 2 port adapter converter detected [ 884.455971][ T8767] keyspan 6-1:0.0: unsupported endpoint type 0 [ 884.466717][ T8767] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 7 [ 884.488138][ T8767] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 81 [ 884.496492][ T8767] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1 [ 884.511209][ T8767] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2 [ 884.521179][ T8767] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 85 [ 884.534594][ T8767] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 5 [ 884.549912][ T8767] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 884.564440][ T8767] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 83 [ 884.575018][ T8767] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 3 [ 884.589755][ T8767] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 4 [ 884.601827][ T8767] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 86 [ 884.612610][ T8767] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 6 [ 884.674734][T16150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.692088][T16150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.699705][ T8767] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 884.753319][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2687'. [ 884.822020][ T8767] usb 6-1: USB disconnect, device number 115 [ 884.850672][ T8767] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 884.910601][ T8767] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 884.938604][ T8767] keyspan 6-1:0.0: device disconnected [ 885.659395][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! Stopping sshd: stopped /usr/sbin/sshd (pid 5585) OK Stopping crond: stopped /usr/sbin/crond (pid 5570) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5491) Stopping network: OK Stopping iptables: OK Stopping system message bus: done Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 5179) OK umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 893.043573][ T5197] udevd[5197]: could not touch /run/udev/queue: Read-only file system Sent SIGTERM to all processes Connection to 10.128.0.81 closed by remote host. [ 894.164625][T11571] syz_tun (unregistering): left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 894.346461][ T8767] usb 5-1: USB disconnect, device number 75 [ 894.356554][ T8767] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 894.939396][T14204] bridge_slave_1: left promiscuous mode [ 894.945204][T14204] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.954755][T14204] bridge_slave_0: left promiscuous mode [ 894.961130][T14204] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.021975][T14204] ip6gretap0 (unregistering): left allmulticast mode [ 895.192386][T14204] dvmrp0 (unregistering): left allmulticast mode [ 895.444433][T14204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 895.455041][T14204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 895.465396][T14204] bond0 (unregistering): (slave team0): Releasing backup interface [ 895.475959][T14204] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 895.490013][T14204] bond0 (unregistering): Released all slaves [ 895.505621][T14204] bond1 (unregistering): Released all slaves [ 895.622283][T14204] bond2 (unregistering): Released all slaves [ 895.745870][T14204] bond3 (unregistering): Released all slaves [ 896.097707][T14204] hsr_slave_0: left promiscuous mode [ 896.103668][T14204] hsr_slave_1: left promiscuous mode [ 896.109891][T14204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.310723][T10494] usb 2-1: Failed to load image "edgeport/down.fw" err -2 [ 896.324447][T10494] usb 2-1: Direct firmware load for edgeport/boot.fw failed with error -2 [ 896.333092][T10494] usb 2-1: Falling back to sysfs fallback for: edgeport/boot.fw [ 896.342614][T10494] ------------[ cut here ]------------ [ 896.348162][T10494] WARNING: CPU: 0 PID: 10494 at drivers/base/firmware_loader/fallback.c:148 firmware_fallback_sysfs+0x746/0x9b0 [ 896.360373][T10494] Modules linked in: [ 896.365031][T10494] CPU: 0 UID: 0 PID: 10494 Comm: kworker/0:17 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 896.377519][T10494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 896.387639][T10494] Workqueue: usb_hub_wq hub_event [ 896.392687][T10494] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 896.399003][T10494] Code: c8 fb e9 5d fc ff ff e8 48 32 c8 fb c6 05 88 22 92 09 01 48 c7 c7 00 e3 08 8c e8 05 ea 2f fb e9 85 fc ff ff e8 2b 32 c8 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 e0 e3 08 8c 4c 89 e2 e8 95 b3 34 fb e9 [ 896.418723][T10494] RSP: 0018:ffffc90003b3e8f0 EFLAGS: 00010283 [ 896.424823][T10494] RAX: ffffffff85f7a285 RBX: dffffc0000000000 RCX: 0000000000100000 [ 896.432852][T10494] RDX: ffffc90019206000 RSI: 0000000000066d44 RDI: 0000000000066d45 [ 896.440882][T10494] RBP: 0000000000000001 R08: ffffffff8f9fc2b7 R09: 1ffffffff1f3f856 [ 896.449022][T10494] R10: dffffc0000000000 R11: fffffbfff1f3f857 R12: ffffffff8c3b7300 [ 896.457311][T10494] R13: 0000000000001770 R14: ffff8880226dd0b0 R15: 00000000fffffff5 [ 896.465322][T10494] FS: 0000000000000000(0000) GS:ffff888125c91000(0000) knlGS:0000000000000000 [ 896.474334][T10494] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 896.481023][T10494] CR2: 00007fc907ae7d60 CR3: 0000000035110000 CR4: 00000000003526f0 [ 896.489063][T10494] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 896.497106][T10494] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 896.505102][T10494] Call Trace: [ 896.508454][T10494] [ 896.511411][T10494] ? kmem_cache_free+0x18f/0x400 [ 896.516355][T10494] ? _request_firmware+0x6be/0x15b0 [ 896.521602][T10494] _request_firmware+0xf83/0x15b0 [ 896.526663][T10494] ? __pfx__request_firmware+0x10/0x10 [ 896.532152][T10494] ? rom_read+0x19e/0x1c0 [ 896.536499][T10494] ? rom_read+0x19e/0x1c0 [ 896.540993][T10494] request_firmware+0x36/0x50 [ 896.545718][T10494] edge_startup+0x251b/0x5cc0 [ 896.550510][T10494] ? __pfx_edge_startup+0x10/0x10 [ 896.555569][T10494] ? trace_kmalloc+0x1f/0xd0 [ 896.560231][T10494] ? __kmalloc_noprof+0x29b/0x4f0 [ 896.565378][T10494] ? setup_port_interrupt_in+0x159/0x590 [ 896.571067][T10494] ? setup_port_interrupt_in+0x3d0/0x590 [ 896.576710][T10494] ? __pfx_edge_interrupt_callback+0x10/0x10 [ 896.582737][T10494] usb_serial_probe+0x2506/0x2d20 [ 896.587841][T10494] ? __pfx_edge_bulk_out_data_callback+0x10/0x10 [ 896.594204][T10494] ? __pfx_edge_bulk_out_data_callback+0x10/0x10 [ 896.600618][T10494] usb_probe_interface+0x644/0xbc0 [ 896.605749][T10494] ? __pfx_usb_probe_interface+0x10/0x10 [ 896.611423][T10494] really_probe+0x26a/0x9a0 [ 896.615955][T10494] __driver_probe_device+0x18c/0x2f0 [ 896.621277][T10494] driver_probe_device+0x4f/0x430 [ 896.626314][T10494] __device_attach_driver+0x2ce/0x530 [ 896.631737][T10494] bus_for_each_drv+0x251/0x2e0 [ 896.636690][T10494] ? __pfx___device_attach_driver+0x10/0x10 [ 896.642640][T10494] ? __pfx_bus_for_each_drv+0x10/0x10 [ 896.648082][T10494] __device_attach+0x2b8/0x400 [ 896.652871][T10494] ? __pfx___device_attach+0x10/0x10 [ 896.658233][T10494] ? do_raw_spin_unlock+0x122/0x240 [ 896.663470][T10494] bus_probe_device+0x185/0x260 [ 896.668412][T10494] device_add+0x7b6/0xb50 [ 896.672785][T10494] usb_set_configuration+0x1a87/0x20e0 [ 896.678346][T10494] usb_generic_driver_probe+0x8d/0x150 [ 896.683887][T10494] usb_probe_device+0x1c4/0x390 [ 896.688840][T10494] ? __pfx_usb_probe_device+0x10/0x10 [ 896.694249][T10494] really_probe+0x26a/0x9a0 [ 896.698870][T10494] __driver_probe_device+0x18c/0x2f0 [ 896.704209][T10494] driver_probe_device+0x4f/0x430 [ 896.709294][T10494] __device_attach_driver+0x2ce/0x530 [ 896.714694][T10494] bus_for_each_drv+0x251/0x2e0 [ 896.719612][T10494] ? __pfx___device_attach_driver+0x10/0x10 [ 896.725540][T10494] ? __pfx_bus_for_each_drv+0x10/0x10 [ 896.730973][T10494] __device_attach+0x2b8/0x400 [ 896.735752][T10494] ? __pfx___device_attach+0x10/0x10 [ 896.741149][T10494] ? do_raw_spin_unlock+0x122/0x240 [ 896.746390][T10494] bus_probe_device+0x185/0x260 [ 896.751391][T10494] device_add+0x7b6/0xb50 [ 896.755731][T10494] usb_new_device+0xa39/0x16c0 [ 896.760557][T10494] ? __pfx_usb_new_device+0x10/0x10 [ 896.765772][T10494] ? _raw_spin_unlock_irq+0x23/0x50 [ 896.771048][T10494] ? lockdep_hardirqs_on+0x9c/0x150 [ 896.776261][T10494] hub_event+0x2941/0x4a00 [ 896.780826][T10494] ? __pfx_hub_event+0x10/0x10 [ 896.785632][T10494] ? process_scheduled_works+0x9ec/0x17a0 [ 896.791450][T10494] ? _raw_spin_unlock_irq+0x23/0x50 [ 896.796679][T10494] ? process_scheduled_works+0x9ec/0x17a0 [ 896.802446][T10494] ? process_scheduled_works+0x9ec/0x17a0 [ 896.808238][T10494] process_scheduled_works+0xade/0x17a0 [ 896.813886][T10494] ? __pfx_process_scheduled_works+0x10/0x10 [ 896.819970][T10494] worker_thread+0x8a0/0xda0 [ 896.824597][T10494] kthread+0x70e/0x8a0 [ 896.828719][T10494] ? __pfx_worker_thread+0x10/0x10 [ 896.833859][T10494] ? __pfx_kthread+0x10/0x10 [ 896.838502][T10494] ? __pfx_kthread+0x10/0x10 [ 896.843126][T10494] ? _raw_spin_unlock_irq+0x23/0x50 [ 896.848388][T10494] ? lockdep_hardirqs_on+0x9c/0x150 [ 896.853612][T10494] ? __pfx_kthread+0x10/0x10 [ 896.858242][T10494] ret_from_fork+0x4e/0x80 [ 896.862684][T10494] ? __pfx_kthread+0x10/0x10 [ 896.867346][T10494] ret_from_fork_asm+0x1a/0x30 [ 896.872146][T10494] [ 896.875174][T10494] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 896.882451][T10494] CPU: 0 UID: 0 PID: 10494 Comm: kworker/0:17 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 896.894339][T10494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 896.904398][T10494] Workqueue: usb_hub_wq hub_event [ 896.909454][T10494] Call Trace: [ 896.912745][T10494] [ 896.915762][T10494] dump_stack_lvl+0x99/0x250 [ 896.920372][T10494] ? __asan_memcpy+0x40/0x70 [ 896.924989][T10494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 896.930212][T10494] ? __pfx__printk+0x10/0x10 [ 896.934828][T10494] panic+0x2db/0x790 [ 896.938747][T10494] ? __pfx_panic+0x10/0x10 [ 896.943190][T10494] ? ret_from_fork_asm+0x1a/0x30 [ 896.948144][T10494] __warn+0x31b/0x4b0 [ 896.952143][T10494] ? firmware_fallback_sysfs+0x746/0x9b0 [ 896.957790][T10494] ? firmware_fallback_sysfs+0x746/0x9b0 [ 896.963435][T10494] report_bug+0x2be/0x4f0 [ 896.967775][T10494] ? firmware_fallback_sysfs+0x746/0x9b0 [ 896.973421][T10494] ? firmware_fallback_sysfs+0x746/0x9b0 [ 896.979067][T10494] ? firmware_fallback_sysfs+0x748/0x9b0 [ 896.984713][T10494] handle_bug+0x84/0x160 [ 896.988974][T10494] exc_invalid_op+0x1a/0x50 [ 896.993493][T10494] asm_exc_invalid_op+0x1a/0x20 [ 896.998353][T10494] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 897.004611][T10494] Code: c8 fb e9 5d fc ff ff e8 48 32 c8 fb c6 05 88 22 92 09 01 48 c7 c7 00 e3 08 8c e8 05 ea 2f fb e9 85 fc ff ff e8 2b 32 c8 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 e0 e3 08 8c 4c 89 e2 e8 95 b3 34 fb e9 [ 897.024240][T10494] RSP: 0018:ffffc90003b3e8f0 EFLAGS: 00010283 [ 897.030345][T10494] RAX: ffffffff85f7a285 RBX: dffffc0000000000 RCX: 0000000000100000 [ 897.038336][T10494] RDX: ffffc90019206000 RSI: 0000000000066d44 RDI: 0000000000066d45 [ 897.046330][T10494] RBP: 0000000000000001 R08: ffffffff8f9fc2b7 R09: 1ffffffff1f3f856 [ 897.054319][T10494] R10: dffffc0000000000 R11: fffffbfff1f3f857 R12: ffffffff8c3b7300 [ 897.062308][T10494] R13: 0000000000001770 R14: ffff8880226dd0b0 R15: 00000000fffffff5 [ 897.070317][T10494] ? firmware_fallback_sysfs+0x745/0x9b0 [ 897.075992][T10494] ? kmem_cache_free+0x18f/0x400 [ 897.080944][T10494] ? _request_firmware+0x6be/0x15b0 [ 897.086166][T10494] _request_firmware+0xf83/0x15b0 [ 897.091225][T10494] ? __pfx__request_firmware+0x10/0x10 [ 897.096695][T10494] ? rom_read+0x19e/0x1c0 [ 897.101041][T10494] ? rom_read+0x19e/0x1c0 [ 897.105377][T10494] request_firmware+0x36/0x50 [ 897.110068][T10494] edge_startup+0x251b/0x5cc0 [ 897.114785][T10494] ? __pfx_edge_startup+0x10/0x10 [ 897.119827][T10494] ? trace_kmalloc+0x1f/0xd0 [ 897.124427][T10494] ? __kmalloc_noprof+0x29b/0x4f0 [ 897.129458][T10494] ? setup_port_interrupt_in+0x159/0x590 [ 897.135112][T10494] ? setup_port_interrupt_in+0x3d0/0x590 [ 897.140752][T10494] ? __pfx_edge_interrupt_callback+0x10/0x10 [ 897.146742][T10494] usb_serial_probe+0x2506/0x2d20 [ 897.151779][T10494] ? __pfx_edge_bulk_out_data_callback+0x10/0x10 [ 897.158129][T10494] ? __pfx_edge_bulk_out_data_callback+0x10/0x10 [ 897.164469][T10494] usb_probe_interface+0x644/0xbc0 [ 897.169626][T10494] ? __pfx_usb_probe_interface+0x10/0x10 [ 897.175277][T10494] really_probe+0x26a/0x9a0 [ 897.179799][T10494] __driver_probe_device+0x18c/0x2f0 [ 897.185121][T10494] driver_probe_device+0x4f/0x430 [ 897.190183][T10494] __device_attach_driver+0x2ce/0x530 [ 897.195604][T10494] bus_for_each_drv+0x251/0x2e0 [ 897.200490][T10494] ? __pfx___device_attach_driver+0x10/0x10 [ 897.206429][T10494] ? __pfx_bus_for_each_drv+0x10/0x10 [ 897.211850][T10494] __device_attach+0x2b8/0x400 [ 897.216637][T10494] ? __pfx___device_attach+0x10/0x10 [ 897.221949][T10494] ? do_raw_spin_unlock+0x122/0x240 [ 897.227181][T10494] bus_probe_device+0x185/0x260 [ 897.232063][T10494] device_add+0x7b6/0xb50 [ 897.236409][T10494] usb_set_configuration+0x1a87/0x20e0 [ 897.241915][T10494] usb_generic_driver_probe+0x8d/0x150 [ 897.247404][T10494] usb_probe_device+0x1c4/0x390 [ 897.252285][T10494] ? __pfx_usb_probe_device+0x10/0x10 [ 897.257675][T10494] really_probe+0x26a/0x9a0 [ 897.262199][T10494] __driver_probe_device+0x18c/0x2f0 [ 897.267515][T10494] driver_probe_device+0x4f/0x430 [ 897.272551][T10494] __device_attach_driver+0x2ce/0x530 [ 897.277937][T10494] bus_for_each_drv+0x251/0x2e0 [ 897.282801][T10494] ? __pfx___device_attach_driver+0x10/0x10 [ 897.288705][T10494] ? __pfx_bus_for_each_drv+0x10/0x10 [ 897.294105][T10494] __device_attach+0x2b8/0x400 [ 897.298879][T10494] ? __pfx___device_attach+0x10/0x10 [ 897.304173][T10494] ? do_raw_spin_unlock+0x122/0x240 [ 897.309401][T10494] bus_probe_device+0x185/0x260 [ 897.314273][T10494] device_add+0x7b6/0xb50 [ 897.318619][T10494] usb_new_device+0xa39/0x16c0 [ 897.323411][T10494] ? __pfx_usb_new_device+0x10/0x10 [ 897.328626][T10494] ? _raw_spin_unlock_irq+0x23/0x50 [ 897.333838][T10494] ? lockdep_hardirqs_on+0x9c/0x150 [ 897.339051][T10494] hub_event+0x2941/0x4a00 [ 897.343531][T10494] ? __pfx_hub_event+0x10/0x10 [ 897.348307][T10494] ? process_scheduled_works+0x9ec/0x17a0 [ 897.354052][T10494] ? _raw_spin_unlock_irq+0x23/0x50 [ 897.359265][T10494] ? process_scheduled_works+0x9ec/0x17a0 [ 897.365090][T10494] ? process_scheduled_works+0x9ec/0x17a0 [ 897.370830][T10494] process_scheduled_works+0xade/0x17a0 [ 897.376440][T10494] ? __pfx_process_scheduled_works+0x10/0x10 [ 897.382481][T10494] worker_thread+0x8a0/0xda0 [ 897.387132][T10494] kthread+0x70e/0x8a0 [ 897.391231][T10494] ? __pfx_worker_thread+0x10/0x10 [ 897.396391][T10494] ? __pfx_kthread+0x10/0x10 [ 897.401010][T10494] ? __pfx_kthread+0x10/0x10 [ 897.405613][T10494] ? _raw_spin_unlock_irq+0x23/0x50 [ 897.410830][T10494] ? lockdep_hardirqs_on+0x9c/0x150 [ 897.416047][T10494] ? __pfx_kthread+0x10/0x10 [ 897.420652][T10494] ret_from_fork+0x4e/0x80 [ 897.425090][T10494] ? __pfx_kthread+0x10/0x10 [ 897.429694][T10494] ret_from_fork_asm+0x1a/0x30 [ 897.434484][T10494] [ 897.437904][T10494] Kernel Offset: disabled [ 897.442244][T10494] Rebooting in 86400 seconds..