last executing test programs: 9m49.454377736s ago: executing program 3 (id=599): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_restrict_self(r0, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000ec0)='cgroup.max.depth\x00', 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 9m49.175315569s ago: executing program 3 (id=602): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) futex(0xfffffffffffffffc, 0x8, 0x10002, 0x0, 0x0, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x0, 0x7, 0x43, @private2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x1, 0x0, 0x29}}) 9m48.987397979s ago: executing program 3 (id=604): r0 = syz_usb_connect(0x4, 0x599, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0xa0, 0x1f, 0x65, 0x10, 0x6e0, 0xf115, 0x36e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57a, 0x1, 0x0, 0x10, 0x20, 0xff, [{{0x9, 0x4, 0x7b, 0x2, 0xc, 0xad, 0x5, 0xbb, 0x2, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "8da2b26842"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x81, 0x5, 0x7}, [@country_functional={0x10, 0x24, 0x7, 0x5, 0x4, [0xffff, 0x2, 0x81, 0x2, 0x9]}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "6e475cd0ae5c"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x56d, 0x7, 0x9, 0x1}, {0x6, 0x24, 0x1a, 0x4, 0x30}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x0, 0xff, 0x6}]}], [{{0x9, 0x5, 0x8, 0x8, 0x400, 0x1, 0x7f, 0x4}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x2, 0x10, 0x6}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x5, 0x64, 0x2d, [@generic={0xdc, 0x6, "56d832d7bb7c500bf1745ce0b1e4d11196af77d49fa70f79c921fc5794c1effc047f801253815a0aee0d2fc008692cb653c9839c03fb62559e232269bc45a028380c4721c8e95486341e7032b7efc6f6346f68244f41647fbb4ae6c20439e9bc21ae5b342c5464f8df8e5003118b88308501c0aae29b1bb6a9db62cb2a2640db1d5e3987e31fab93017d6e6cb4eea867a354f35e34a9a55c50ced50d90de7dc3a597983489f1c85e286300e1d28e711597a64184db3dc75c18b144cef44dd9732b991b2619b8b8571164e154d32df631b4d4537b6264e16a1fa4"}, @generic={0x3f, 0x31, "b9950ea0ec5812f61f38ca5f33f26a2fa3609de2e2c0a927c86b5c11fcac1e953a853227ad13a077e21477ae85c90f7e0b0b1ade7286b88bf6867713a9"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x8, 0xa, 0x6, 0x10, [@generic={0xd7, 0x30, "810abbbd53ec55418e091e27e2f627d1ecc45c9994dbf0eac065abfb68dc2559565930e85b558947c9bdf80f08dee4220c8ea0877ee783e73be9f3bc6f951cffbb313f56f9ea64acb516b04a0387fd23d0f108f70c03b5a0bce0ea57c747c81ae5fae9e8a965ad9de3ae17b51cce7e700ffa214d56098fc0411c4699b0509d2a8c563ab8a68d39349bac4a6cb8ed89c717c6134cb04c1c73029d3fd088bab1ea1d341b9fa3d2ed21e3c080827e4eba59cf3f1f753778f100c9ca2aa0500eac96a749f7f2c461f53af7965252e8e92ba07eef2eb24e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x2bc}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x51, 0x9e, 0x1, [@generic={0xa8, 0x9, "df52abe946704c14ab1ac1e1daa43201194548a40e7d65ed8699373a4aa37756ee7a53b0c5a94b518dc74ad04b9062e8d2303c4fa9f1ab9ed7b0be85f7b8d1ebba23dd9bfc9c99129db9fc387833570e32424123c0e7d2fae910250439992bc68464cbbced229221ce4b3fe2430980c75dfe60fd33d8df3914c202c72935cb074706ef2164dfe6695792d4332d8b63808b458533c73b59b3bfc7f6fc73792e1702b8f341ac7d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x7f}]}}, {{0x9, 0x5, 0xb, 0x10, 0x7df, 0x3, 0x7, 0x2}}, {{0x9, 0x5, 0x80, 0x4, 0x10, 0x7d, 0xa1}}, {{0x9, 0x5, 0xa, 0x1, 0x3ff, 0x80, 0xf2, 0x2}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x1, 0x5, 0x2, [@generic={0xdd, 0x10, "b5cf082c1449e9c7849398c0cc850de46dc5de9befe8f1dba0a7d7241a6e5b28faf69edab89cd7bcba4fbc206d16be841dde95b31843abdaea8b444eea21eea3d3ec9fe87c1b5bc675fdb5be36bf51cbc27946461a4f43921f6d421e37b48987517c4d7d3fcbf1fa70a0b24ec3bb4248fcfca1dceb112abe7940d03111d8f1b7bcdddf1e77fb9369cea5eea4ff567c43f61b82a4bd7a79d370cd1e7f75589467580318adf44efcb8ad09ee557491a283d3e214f63e9cf29b45794728f37aa2bbcfff73a95c2ef239645e4eea756baa36a922d5080c3a8d5b3eda05"}, @generic={0x2c, 0x31, "e70fdaacd148929eb2844646692bb74f0cbf80bcfb7e5f279b014726e02ba912a42836d81e3f0019bcca"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x2, 0xfb, 0x8}}, {{0x9, 0x5, 0xc, 0x10, 0x0, 0x7, 0x7, 0x3}}, {{0x9, 0x5, 0xb, 0x1, 0x400, 0x1, 0xd, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x36, 0x9}]}}]}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x63, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x7, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x3d, {{0x1, 0x24, 0x6, 0x0, 0x0, "d26c42882577"}, {0x5, 0x24, 0x0, 0xff31}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9, 0x6, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x2, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0xff, 0xd1}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x7f, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0xf, 0x2}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x8, 0x4, 0xd, 0x10, 0x7}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x2, [{0xe3, &(0x7f0000000180)=ANY=[@ANYBLOB="e303961f3c8f2b5736c637023ea862390093602a9dfa5b76abda48725c32f2c91d12eba5a1dda20ed29d1eacc525f280298ef2e46258be9761416e8a21cf13abaa44d1cc8a0139f73bc27e807c4dcf0dca8679b288ef5fa4d7c30d33226f22f30645a2d0d7767991b404d528ef094ec8ce251e16e5a7092af6969c36cb91729ae263a0033c1dbde65fb6cd348bc19a83daf146ac48c853e8ebc6d39bb365000000004932e168b7d1358c7a2e688f458071a72726d2e6a7bd52e1a43cd2abff0bcae2fc3c51dc6c8dffffcb11c7579d38d99470233080f3473f2970866411d5090d9a22"]}, {0xaa, &(0x7f0000000280)=@string={0xaa, 0x3, "77339a2471b5ce79f76f527310349cd93668e2fa52dfdee55a3eea0983769cdf7fe78595de288f07ab823786bf50d20e0c98a8831fe463b4c8c34f2abc3e08c08771b55207021ed9b89fd9976d5a6da18c05962865e8392d12c8dda7013d6bb5ee97e89b5b8ee7ed7607071ab2c7e8bc9c1f93e4c47d98dae6a3a62690bece48f2d97f8dd727d1f295afeade97fa37ecf1e7892ae95e5aea03f5ab98b7050db62fb2127da678e53a"}}]}) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1d) syz_emit_ethernet(0x62, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x10, 0x4, 0x2, 0x0, 0x0, {[@window={0x3, 0x3, 0x8f}, @window={0x3, 0x3, 0xac}, @timestamp={0x8, 0xa, 0x200, 0xd}, @sack={0x5, 0x2}, @fastopen={0x22, 0x2}, @sack={0x5, 0x16, [0x5, 0x5, 0x1, 0x0, 0xc2]}]}}}}}}}, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00'}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000b00)={'ip6tnl0\x00', 0x0, 0x29, 0x50, 0xa, 0x7, 0x7b8afebf911fce9b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x700, 0x7, 0x1, 0x7}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x1f, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}, @func, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xd}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x37, &(0x7f0000000500)=""/55, 0x41000, 0x8, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x5, 0x3, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000c40)=[r3, r2, r2, r2], &(0x7f0000000c80)=[{0x2, 0x3, 0x8, 0x7}, {0x0, 0x4, 0xc, 0x4}, {0x2, 0x1, 0xd, 0xb}], 0x10, 0x8, @void, @value}, 0x94) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000080)=0xff) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2) close_range(r3, r6, 0x2) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 9m45.501350198s ago: executing program 3 (id=617): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r0, 0x11c, 0x4, &(0x7f0000002080)=""/4104, &(0x7f0000000040)=0x1008) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x16, 0x5, 0x3, 0x400cbee, 0xa, 0x8, 0xfffffffe, 0x2}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8a2402) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0x9, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x20000000) r6 = socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 9m45.060048132s ago: executing program 3 (id=618): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, &(0x7f0000000000)=0x24) 9m44.525419512s ago: executing program 3 (id=620): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xc1, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000080)={0x9, 0x3, 0x4, 0xb0a}, 0x10) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r3 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x4e20, 0xff, 0x4e21, 0x4, 0xa, 0xa0, 0xa0, 0x3a, r2, r3}, {0xead, 0x1, 0x4, 0x9, 0x800000, 0xb, 0x8, 0x9}, {0x100, 0x0, 0xe30, 0x3e23}, 0x4, 0x6e6bb1, 0x1, 0x0, 0x2, 0x3}, {{@in=@remote, 0x4d5}, 0x8, @in=@local, 0x3501, 0x3, 0x1, 0x3, 0x4c, 0x8, 0x54}}, 0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0xc00) r5 = syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x80, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x4}}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1800}}, {@max_read={'max_read', 0x3d, 0x5}}], [{@permit_directio}, {@euid_eq={'euid', 0x3d, r4}}, {@fsname={'fsname', 0x3d, 'batadv_slave_0\x00'}}, {@appraise_type}, {@euid_gt={'euid>', r3}}, {@obj_user={'obj_user', 0x3d, '('}}, {@context={'context', 0x3d, 'staff_u'}}]}}, 0x1, 0x0, &(0x7f0000000500)="4f78525f569df4333e4edfe5630195134ae700567ee65ff4560210b16df82b5a5e4b94aa731312d3b6af7cbd491e69f10910454a8d80902cf4a5d6db7cc9bee17b010f6d66d5d806f06f9ee25681bdf1311d24ca29f2374056dc501b8bd0d390a4c2177121b3f93b4c529f9c297f49439aaeaffb29a273151a830eb649d7061a41d0ca92c1a11f3a4e52a838131f3ad9bb06580805df5edb2a167ae56d26c01aaed8bf4ba88e9efeb769200154b2def374dfabfbbf287b6efc3dd2e08514e1ceeb66ed556e9658ec74747b97ff2ea9c9379eb3ff050a6b8993ddab") r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/resume', 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r6, {r5}}, './file0\x00'}) write$P9_RREADDIR(r7, &(0x7f0000000680)={0x4f, 0x29, 0x2, {0x4, [{{0x8, 0x1}, 0x200, 0x2, 0x7, './file0'}, {{0x40, 0x0, 0x3}, 0x2, 0xfe, 0xd, './file0/file0'}]}}, 0x4f) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000700), 0x300) close_range(r7, r9, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000740), 0xfffffffffffffffe, 0x0) fcntl$dupfd(r10, 0x0, r8) r11 = openat(r8, &(0x7f0000000780)='./file0\x00', 0x402000, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r6, 0x4143, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r7) umount2(&(0x7f0000000800)='./file0\x00', 0x8) bind$inet6(r9, &(0x7f0000000840)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x52}, 0x1c) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000880)=0x0) sched_setattr(r12, &(0x7f00000008c0)={0x38, 0x6, 0x10, 0x4, 0x29, 0x6, 0x8000000000000000, 0xaf, 0xe, 0xf3}, 0x0) sendto$inet6(r6, 0xffffffffffffffff, 0x0, 0x40000, &(0x7f0000000900)={0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}, 0x1c) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000000940)={0x2, {0x6, 0x1, 0x5, 0x200, 0x4}}) ioctl$TCFLSH(r9, 0x540b, 0x1) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x100010, r11, 0x8f947000) ioctl$sock_SIOCADDDLCI(r6, 0x8980, &(0x7f0000000980)={'\x00', 0xd33}) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 9m43.491420859s ago: executing program 32 (id=620): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xc1, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000080)={0x9, 0x3, 0x4, 0xb0a}, 0x10) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r3 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x4e20, 0xff, 0x4e21, 0x4, 0xa, 0xa0, 0xa0, 0x3a, r2, r3}, {0xead, 0x1, 0x4, 0x9, 0x800000, 0xb, 0x8, 0x9}, {0x100, 0x0, 0xe30, 0x3e23}, 0x4, 0x6e6bb1, 0x1, 0x0, 0x2, 0x3}, {{@in=@remote, 0x4d5}, 0x8, @in=@local, 0x3501, 0x3, 0x1, 0x3, 0x4c, 0x8, 0x54}}, 0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0xc00) r5 = syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x80, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x4}}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1800}}, {@max_read={'max_read', 0x3d, 0x5}}], [{@permit_directio}, {@euid_eq={'euid', 0x3d, r4}}, {@fsname={'fsname', 0x3d, 'batadv_slave_0\x00'}}, {@appraise_type}, {@euid_gt={'euid>', r3}}, {@obj_user={'obj_user', 0x3d, '('}}, {@context={'context', 0x3d, 'staff_u'}}]}}, 0x1, 0x0, &(0x7f0000000500)="4f78525f569df4333e4edfe5630195134ae700567ee65ff4560210b16df82b5a5e4b94aa731312d3b6af7cbd491e69f10910454a8d80902cf4a5d6db7cc9bee17b010f6d66d5d806f06f9ee25681bdf1311d24ca29f2374056dc501b8bd0d390a4c2177121b3f93b4c529f9c297f49439aaeaffb29a273151a830eb649d7061a41d0ca92c1a11f3a4e52a838131f3ad9bb06580805df5edb2a167ae56d26c01aaed8bf4ba88e9efeb769200154b2def374dfabfbbf287b6efc3dd2e08514e1ceeb66ed556e9658ec74747b97ff2ea9c9379eb3ff050a6b8993ddab") r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/resume', 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r6, {r5}}, './file0\x00'}) write$P9_RREADDIR(r7, &(0x7f0000000680)={0x4f, 0x29, 0x2, {0x4, [{{0x8, 0x1}, 0x200, 0x2, 0x7, './file0'}, {{0x40, 0x0, 0x3}, 0x2, 0xfe, 0xd, './file0/file0'}]}}, 0x4f) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000700), 0x300) close_range(r7, r9, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000740), 0xfffffffffffffffe, 0x0) fcntl$dupfd(r10, 0x0, r8) r11 = openat(r8, &(0x7f0000000780)='./file0\x00', 0x402000, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r6, 0x4143, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r7) umount2(&(0x7f0000000800)='./file0\x00', 0x8) bind$inet6(r9, &(0x7f0000000840)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x52}, 0x1c) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000880)=0x0) sched_setattr(r12, &(0x7f00000008c0)={0x38, 0x6, 0x10, 0x4, 0x29, 0x6, 0x8000000000000000, 0xaf, 0xe, 0xf3}, 0x0) sendto$inet6(r6, 0xffffffffffffffff, 0x0, 0x40000, &(0x7f0000000900)={0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}, 0x1c) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000000940)={0x2, {0x6, 0x1, 0x5, 0x200, 0x4}}) ioctl$TCFLSH(r9, 0x540b, 0x1) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x100010, r11, 0x8f947000) ioctl$sock_SIOCADDDLCI(r6, 0x8980, &(0x7f0000000980)={'\x00', 0xd33}) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 12.309118611s ago: executing program 0 (id=4092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_gettime(r1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaa95aaaaaaaaaaaa0e08004500001cff0000000000000000000000554f118800000000000000000060bde97116be688b000000000000000032244eb524effe100f1a74502a01b5f3d692f9cd4714c8c70a19ff18a180598ecb3240d622e298"], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r4 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl1\x00', r3, 0x2f, 0x6, 0x6, 0x4, 0x9, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, 0x10, 0x8000, 0xf0a, 0x7}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000180000000000000004000000040000000000000c0500000008000000000000120300000000612e00"], &(0x7f0000000580)=""/199, 0x34, 0xc7, 0x1, 0x5, 0x0, @void, @value}, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'veth0_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r10, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b456bc08bc08f427c00000080000000000000009b9d4da15afcd622246844a5d19166724b43b9339f27523b5b4e88b5ebf6af710ef5c4d9217d54c2c402d56e728fd4696937f0b265981a5c17ba5e4225e795633e6e0eb89c", @ANYRES32=0x1, @ANYBLOB="ff7f00"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="01000000040000000300"/28], 0x50) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYRESDEC=r6, @ANYRES16=0x0, @ANYRES16=r6, @ANYRESOCT=r8, @ANYRES8=r5, @ANYRES64=r3, @ANYRES8=r4, @ANYRESHEX=r10], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000004000000000000000b7429b833e25ae0e0fe0002001847002901000000000000000000f8ff016500000400000095000000020000000000000000000000a4a249fd89134631ff8d421d3698fbbde05e02f0501dbf4a"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x86, &(0x7f0000000a00)=""/134, 0x40f00, 0x43, '\x00', r5, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x2, 0x10, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000800)=[r11, r11], &(0x7f0000000840)=[{0x0, 0x1, 0x3}], 0x10, 0x3, @void, @value}, 0x94) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r12, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r12, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r13, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff9, @ipv4}, 0x1c) listen(r12, 0xfff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0008003200ac1e0001fe7654fcd4652bf546148707659d9f594cda3c22de657c576ae061bf778d11fd448eda7b8f83e752eef2320989fb5701a298191dc199dd9e054ac687dfb467c86ecd68d446483df2e48049ad1865bc3cff3fad8f9d0e94fcdb2aea269ebfea53828fbdc377295935f4e5619e895c4228fc9e630a3af8df6220eaace3d27a5bc4b023e0bd85cb92b7da74833e73c041a9a7bf61cb26b22eff08503070454e22cd0ea818fa212f9d7fadce01af8072f88a2dd4d1084dda2c76ceb8ae6c99ee2b6985bfc7735fdd6be63564b8e1089b9dc9c85a775eddea06bbfb1e1579fa4b0000"], 0x1fc}, 0x1, 0x0, 0x0, 0xc8eeeceb4981a2b9}, 0x885) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 10.661740978s ago: executing program 0 (id=4101): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x830824, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000d, 0x10, r3, 0x525e2000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8.499315409s ago: executing program 1 (id=4107): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x4, 0x0, 0x0, 0x30}}}}}]}, 0x3c}}, 0x0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) (async) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}], 0xa8) 8.167174379s ago: executing program 1 (id=4109): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000500040000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000a00000014001a80100004800c000280"], 0x34}}, 0x0) (fail_nth: 1) 7.648345912s ago: executing program 5 (id=4112): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b000100627269646765000048000280050019000200000005001700a100000008"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @private, @multicast2}, &(0x7f0000000180)=0xc) 7.595109448s ago: executing program 1 (id=4113): lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)='./cgroup/cgroup.procs\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000240)={r2, r3+60000000}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000003680)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/15) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) pipe2$watch_queue(0x0, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r9 = accept$alg(r8, 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000001c00), 0xda, 0x1e1041) ioctl$USBDEVFS_RESET(r10, 0x5514) r11 = socket(0x2b, 0x80801, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r11, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) sendmmsg$sock(r9, &(0x7f00000034c0), 0x0, 0x80) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r5, 0x3516, 0x3e44, 0x8, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 7.302366064s ago: executing program 2 (id=4114): socket$nl_generic(0x10, 0x3, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000002500)={0x18, 0x6, 0xfffffffc}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100950000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7.195447611s ago: executing program 5 (id=4115): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x3c8, 0xffffffff, 0x188, 0xc8, 0xc8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'bridge0\x00', 'wg1\x00'}, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x168, 0x1a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xde, 0x0, 'syz1\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000001980)={0x765, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b3245078b089b39353b0e1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33330d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f00000070c0)=[{{&(0x7f00000009c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd694}}], 0x18}}], 0x1, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$netlink(0x10, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000440)={0x294, r7, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xe96}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1ff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffffff}, @NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_DATA={0xf4, 0xc5, "697c5fd574cd662d77f5d1f9ac942a0746840d519b12fb0b42c498c6f8a4d60565783eaee8b92eef3cce72704eda560d635331065ebfd7b9a43274e4c3a92d814589462636427c62bb01d64758b3976a821d54f173f10199d49b9500401784feac543926521980450454c4303d536cc76c13d7772b4f249b04eed0a0d74bb9d71d531488476ead841d9066fd7e0fb5094cfee34e893a374d09825acf8c26777e074dbcc39b3ef78f0eb91e636c3eb4e93322c1bc74cf74400737fcaca570f5562a2e36ad5747520d5b6e1ceab310a66df34cd4638b1ebdacb085730e720baa68a7a280b39db290c1c3fbd9c044c488bd"}, @NL80211_ATTR_VENDOR_DATA={0xc2, 0xc5, "debbd6a6087bfef1cef2312090bf192ad4dcc74d1d4fe893ae6106ee58ed1605119dbb783170461627505566fb8632132c03bb912bc1afe9ebcc7de6b4b704cae27596a3784b13c3ca9bd6d84fc3fd4180d46312ee269272c11df29a203ece23a40fbbff868015e7de8962593a7e2d543ef13c066a0c967cf709c63a1729821b06cb6957745b1bac8a019bee4c238ae1a536b604f4378c5a48485a65e53ab31bea7fc3434791ca291cdafc194013c6ad0a3be9286cf6ecba2a95c879e5d0"}, @NL80211_ATTR_VENDOR_DATA={0x83, 0xc5, "cfbe9ac3e6f4e0812696c5b45835c5ab02ed809ae15505ae2be90710acbd091d0d912711961bcc4eaaedb7f8d0e17c6e059b664dc4e9fe144f57dc17966774d3200bc51ca689a9ea5b3daf5d7483ece6daae4c496bde1c40eb37d509ac8e13139b2211306827eff58e10b48ac95e402601d6b145768726fddfaa09d59d32a9"}]}, 0x294}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008004) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f00000003c0), &(0x7f0000000380)=0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x5502000000000000}, 0x800) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) (async) r14 = accept$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r14, 0x0, 0x0, 0x40000001, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r15 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) quotactl_fd$Q_GETFMT(r15, 0xd2eca6b1246a2af6, 0x0, 0x0) (async) splice(r4, 0x0, r11, 0x0, 0x4ffe6, 0x0) (async) syz_emit_ethernet(0x8e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb88470000060000000f001a08af4f6728e8f046f578813c7955e22846a666aad9a375ef44c974fc92f7e2c0fda96ebbb1aeaf17f0705596f8a8ec6293584384aace8f2af1f7d61d293be04cefa332ce77963be084c78dc3ef5cc8ed4a24532096ea6f3694d382394c12b556111bff052acdaa00"/142], 0x0) 6.823245585s ago: executing program 2 (id=4116): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(r0, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r2, &(0x7f00000002c0)={0x0, 0x52, 0x0}, 0x800) (async) r3 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x2, 0x33424752, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}}) recvmmsg(r0, 0x0, 0x0, 0x600100a2, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_setup(0x8, &(0x7f00000001c0)=0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) (async) io_submit(r6, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getdents(r5, &(0x7f0000000fc0)=""/72, 0x48) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYRES16], 0x20}}, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x10, r7, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') 6.540385005s ago: executing program 4 (id=4117): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x24) listen(r0, 0xfffffffe) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000040)={0x80, 0x9, 0x0, 0x0, 0xffffffff}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001736e7202d15390500000000030109021b00020000000009040005004c55de000904"], 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x8}, 0x8) 6.448524364s ago: executing program 5 (id=4118): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r5, r6, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r7, r3) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000280)=0x4, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd4ccc000000641100fe80000000000000000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff000000001d040000000000001c020100000000007504000001ed0a0064000000170000000c040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29fa9ec35866a96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6.331226745s ago: executing program 1 (id=4119): r0 = syz_open_procfs(0x0, &(0x7f0000001100)='net/protocols\x00') lseek(r0, 0x6, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) symlink(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000001280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRES16=r2], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0x1a, r6, 0xc, 0x0) ppoll(&(0x7f0000000000)=[{r5, 0xe684}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010900000000000000000000000a4c000000060a0b04000000000000000002000003200004801c0001800a00010071756575650000000c000280080004400000000a0900010073eb282fcdba082580e9f30673edf2040f797a30000000000900020073797a3200000000140000005be4c8cf14aace508a6830aca5269a296b353c99d4e8413ad8d5820edebb8169"], 0x74}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) chown(0x0, 0x0, 0x0) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001540)=""/4100, 0x1004) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x2, 0x0) syz_usb_connect(0x2, 0x6d, &(0x7f00000010c0)=ANY=[@ANYRESDEC=r0], 0x0) 5.213580358s ago: executing program 0 (id=4120): syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a010c005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99080805", @ANYRES16], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r0, &(0x7f0000001300)=[{&(0x7f0000000080)=""/108, 0x6c}, {0x0}], 0x2) r1 = userfaultfd(0x80001) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0xd1, r1}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x340}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) read$FUSE(r3, &(0x7f0000001ec0)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r5) ioctl$VIDIOC_G_AUDIO(r5, 0x80345621, &(0x7f0000000040)) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r6 = pidfd_getfd(r2, r5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000001c0)={0xb41a, 0x9, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85ff000000000000bc1010000000000904000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x45ce43, 0x0) connect$unix(r5, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20004000) socket$nl_route(0x10, 0x3, 0x0) 4.798022037s ago: executing program 2 (id=4121): creat(&(0x7f0000000380)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0xfffffffe, 0x0, 0x20, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x103}}, 0x50) r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x98, &(0x7f0000000240)=0x6, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r5 = syz_usb_connect(0x0, 0x3d, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000092e59e208c106901b9750102030109022b0001000010000904db00020dfa00030915800000e600fc000705db224370bf09050b02"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}, 0x0, 0x0, 0x0}, 0x0) socket$igmp(0x2, 0x3, 0x2) r6 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, '\x00', "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x1, 0x80, 0xfffffffd, 0xfffffffd, "01e60000000000000034dbb39fe6083a", 0xff, 0x0, 0x0, 0x0, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r4, 0x80045503, &(0x7f00000000c0)) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x54}}, 0x0) r8 = fcntl$getown(r7, 0x9) syz_open_procfs(r8, &(0x7f00000000c0)='numa_maps\x00') r9 = io_uring_setup(0x51e7, &(0x7f0000000040)={0x0, 0x295c, 0x10000, 0x2, 0x1ba}) lsetxattr$trusted_overlay_nlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), &(0x7f00000004c0)={'L-', 0x7fff}, 0x16, 0x3) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1a001a001114010000000000000000000800010000000000"], 0x18}}, 0x40) io_uring_enter(r9, 0x4a3c, 0xe3e6, 0x0, &(0x7f00000001c0)={[0x3]}, 0x8) 4.459173634s ago: executing program 4 (id=4122): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r3, 0x0, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001e0001000000000000000000070000", @ANYRES32=0x0, @ANYBLOB="000000f405"], 0x24}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r5, 0xff, 0x1, 0x0, &(0x7f00000002c0)=0xfffffffffffffecd) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000bc0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x3, 0x4, 0xe4c, 0x2, 0x3, 0xffb, 0x4, 0x9, 0x1, 0x5, 0x4, 0x81}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) (async) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) (async) r6 = syz_open_dev$sg(0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) r7 = signalfd4(r6, &(0x7f0000000600)={[0x3]}, 0x8, 0x0) syz_io_uring_setup(0x21844, &(0x7f0000000640)={0x0, 0x76ac, 0x8, 0x3, 0x172, 0x0, r7}, &(0x7f00000006c0), &(0x7f0000000700)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000200)=ANY=[@ANYBLOB="12010102000000206b1d010140000102030109025f0003010740fc0904000000010100000a24010e000402010209040100000102000009040101010102000009050109ff037f0107072501000602000914020000010200000904020101010200000905820940000307050725010304a013"], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x80) (async) r9 = syz_io_uring_setup(0x304, &(0x7f0000000380)={0x0, 0x8006d85, 0x10000, 0x2, 0x200118}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r10, r11, &(0x7f00000004c0)=@IORING_OP_MADVISE={0x19, 0x10, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x64}) (async) io_uring_enter(r9, 0x8aa, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r9, 0x18, &(0x7f00000006c0)={0xfffffffffffffff7, r12, 0x2, {0x27fffffffffffff, 0x4}, 0x54}, 0x1) close_range(r8, r8, 0x0) 4.123048709s ago: executing program 5 (id=4123): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000500040000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000a00000014001a80100004800c000280"], 0x34}}, 0x0) 3.787410918s ago: executing program 5 (id=4124): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d000400a1ff0c002200060000000000000008000400810000000500240001000000050016000100000005002c"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.651247889s ago: executing program 5 (id=4125): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) syz_clone(0xc000000, 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f00000004c0)="6738862ecd0e978126304d1ff26e855a3efe4f6e4ec51eb3b4e67ac53b00cd672dd96dd2d4960fad3508f380a0c95eca8c6d42653cd14ce82d81914d345f7529628b44aa708f20ad3d392b29aa3593b571f2f9dea346b5ab4cb268e86d55f11c4b0b649ff0111a0eaea73e2a8ffde46dbd0220676df13d5c726806ee162f4e990247b27b2192fe3dd39f20e37b02021d04c9772c240120") r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x800) poll(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x23, 0x0, 0x0, 0xfd, @time, {}, {}, @result={0x0, 0x7a120}}], 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9, 0x0, 0xfffe}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000580)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="4432aa13ad90c850409a2da28e5dbee410176628eb035d5b0df57ce845526d2fc95fd6c2c0eced17483d31dab95c31126d0763dd722ce5fc8e5dfa85a7642edde189306bda72f632a7fa2f8f054b99e4f34576c52da48397d3e8905c5f75019ee4632eb5190bad20b726ab77a5994e6b0a9cd042a1eee4d65e3ccb475a74a9a6819e953a55b17b3c148f5e04e9eeec45c79fd06bacbd5ecbaa2c7b"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000001b80)=[{{&(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="fd", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x2, 0x8805) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) 2.868367189s ago: executing program 4 (id=4126): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x110, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001) recvmmsg(r4, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0xeb}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/112, 0x70}, 0x1}], 0x2, 0x2000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000240)=0xfffffff8, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, 0x1c) close(r7) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123280, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r6) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0104000000000000000001000000000000000b40"], 0x68}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000500040000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000a00000014001a80100004800c000280"], 0x34}}, 0x0) 2.718718238s ago: executing program 4 (id=4127): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000011050003000600000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000e00)="17000000020001000003be8c5e687a8a6a003c00020400ecff3f0000000300dc290001000098fc5a53a8e3d603a96c6b0687cece1c985bccfda3ab169da9c0f806485bbb2e2f8144243c5197b29f9368add676c8db0000dba67e92dbbd73454a96bb7a4d06000000e289c46f8ab8b4028a7a630080c457681fa5bbee79ac2df5bc080236e2b68c8eec25a068667ea80fdac32aff06011500000000010000000affff02dfccebba0008181ea214e9017435da062a00000000", 0xb8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100a, 0x3}) r4 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=0x64010101, 0x8, 0x14}}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104000000000000000000000010", @ANYRES32=r6, @ANYBLOB="000000004100000008000300", @ANYRES32=r5], 0x28}, 0x1, 0x8}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000011050003000600000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000e00)="17000000020001000003be8c5e687a8a6a003c00020400ecff3f0000000300dc290001000098fc5a53a8e3d603a96c6b0687cece1c985bccfda3ab169da9c0f806485bbb2e2f8144243c5197b29f9368add676c8db0000dba67e92dbbd73454a96bb7a4d06000000e289c46f8ab8b4028a7a630080c457681fa5bbee79ac2df5bc080236e2b68c8eec25a068667ea80fdac32aff06011500000000010000000affff02dfccebba0008181ea214e9017435da062a00000000", 0xb8) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100a, 0x3}) (async) socket(0x1, 0x803, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=0x64010101, 0x8, 0x14}}) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104000000000000000000000010", @ANYRES32=r6, @ANYBLOB="000000004100000008000300", @ANYRES32=r5], 0x28}, 0x1, 0x8}, 0x0) (async) 2.491114485s ago: executing program 1 (id=4128): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000001c0)="0fae19ba200066ed66b8959f00000f23d00f21f86635300000030f23f8f30f35baf80c66b818e3068f66efbafc0cedba4200b8d9abeff30f0966b9fb0900000f32660ff29204000f01c4", 0x4a}], 0x1, 0x43, 0x0, 0xff4c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000980)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x400, 0x8, 0x6, 0x31, 0x47, 0x2, 0x1000, 0x7fff, 0x7, 0x768, 0x66, 0x400, 0x7fffffffffffffff, 0x0, 0x2, 0x9], 0x2000, 0x601}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r3 = io_uring_setup(0x67bb, &(0x7f0000000280)) r4 = syz_io_uring_setup(0x4e0, &(0x7f0000000480)={0x0, 0xa49e, 0x2}, &(0x7f0000000300), &(0x7f0000000340)) io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x3a5, 0x4) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r8, 0x1, {}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r6, &(0x7f0000000140)={&(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x4}, 0xff}, 0x18, &(0x7f0000000080)={0x0}, 0x4, 0x0, 0x0, 0x4}, 0x0) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x3, &(0x7f00000014c0)=ANY=[], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x0, 0x81, 0x1a0ffffffff, &(0x7f0000000200)="5c71f905cac413551b2ac06c86dd", 0x0, 0x4000}, 0x28) recvfrom$inet(r5, 0x0, 0x0, 0x2043, 0x0, 0x0) 2.478832724s ago: executing program 4 (id=4129): write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xc07}}, 0x120) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000020030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 2.397633744s ago: executing program 4 (id=4130): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x830824, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000d, 0x10, r3, 0x525e2000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.809911231s ago: executing program 0 (id=4131): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x44, r3, 0xd55319eec59dfa33, 0xfffffffd, 0x80000003, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) r6 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x2, 0x33d}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0x9, 0xe55, 0x6, 0x2, 0x1040, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x5, 0x6a], 0x1, 0x1000d6}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(r8, &(0x7f0000000140)=[{&(0x7f0000000340)=""/193, 0xc1}], 0x1, 0x0, 0x0) 1.563114476s ago: executing program 2 (id=4132): mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000040)={0x60, 0x4, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000569000/0x2000)=nil, 0x10000, &(0x7f0000000000)=[{0x1, 0xfffffffffffffff9, 0x4}], 0x1, 0x100000000, 0x1, 0x54, 0x44, 0x40}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)="ab6e3bcee8551a9cfcc06134ee246d8ab31a3bdb3c35068c93b637404fcb156242cc10", 0x23}], 0x1}}], 0x1, 0x48880) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x18}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xcc200, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0133014030ff"}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x5, 0x0, 0x1, '\x00', 0xfffffffffffffffc}) userfaultfd(0x80001) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) 1.562691163s ago: executing program 1 (id=4133): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r6}, 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) 644.646877ms ago: executing program 0 (id=4134): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f028, 0x80000006}) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab0000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000840004803a000180070001006374000014000280080001400000000a080002400000001560"], 0xd8}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, &(0x7f0000000000)=0x24) 546.969333ms ago: executing program 2 (id=4135): memfd_create(&(0x7f0000000480)='[+\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x3) (async) r0 = memfd_create(&(0x7f0000000480)='[+\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x7}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x5, 0x0, 0x0, {0xb, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x600, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @byteorder={{0xe}, @void}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_DELTABLE={0xac, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x96, 0x6, "132ad0843a2f527f31f3a343b19e82027014f1b2af60d175d4471a94f697d7b2d4f3e18520e57164b5ac7409adfae047cc9974a3a8f420baa9668a953907f4bc7b993c5574255c8e6bb56df588c99a7996c2818ae2394018c20b2113c5911f4a3d87c8b1ac25350c552010c668ce68f6077b5381e7c2a37fb7502a38f75b242f53a4d8479d2aad79398609a62af70701a03e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1c0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8001) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{}, {0x20, '#! '}, {0x20, ',[.-[\xce!,'}, {}], 0xa, "d1de004c9b138a102ef23956445c9dde71388d49b6ad7c49de86fba88b631c8fc4d7a1678a8897c181ae53685898887f8c1c7dbfa4d39de2d2e972eceb889f4ace0000000000"}, 0x2) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fdatasync(r0) (async) fdatasync(r0) creat(0x0, 0x0) (async) creat(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) 127.098848ms ago: executing program 2 (id=4136): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="2014120000003219fad1a560da0781c2106a5bd2cb999f14"], 0x0, 0x0}) creat(&(0x7f0000000080)='./file0\x00', 0x85) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x9}]}, 0x34}}, 0x4044890) r3 = socket$inet_tcp(0x2, 0x1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r4 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x11, 0x39, 0x5b, 0x40, 0x5d8, 0x810c, 0x185f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x1, 0xf0, 0x8, [{{0x9, 0x4, 0xc8, 0x8, 0x1, 0x7f, 0xf8, 0xae, 0x4c, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x7, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x80000) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x7}) syz_usb_ep_read(r4, 0x1, 0x0, 0x0) syz_usb_control_io$printer(r4, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="000307b10400000004030a20"]}, 0x0) syz_usb_control_io$printer(r4, &(0x7f0000002900)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_ep_read(r4, 0x1, 0xc7, &(0x7f0000000080)=""/199) close_range(r3, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x64, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b\x00', 0x2e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xcdf, [{0x0, 0x3, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23"}]}}}}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 0s ago: executing program 0 (id=4137): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f3044d074000010203010902240001010330050901000080030101000921ff00010122b00b09058103100002ba07"], 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x149442, 0x0) ftruncate(r2, 0x200002) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x1, 0x3ae, [0x0, 0x0, 0x0, 0x0, 0x2000000004c0, 0x2000000004f0], 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/926]}, 0x416) r3 = open(0x0, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r6 = socket(0x1d, 0x2, 0x6) getpeername$inet(r6, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x80001d00c0d0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r8, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x1, 0x2, 0x0, 0x5, 0x40, 0x0, 0x2000000}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000010400000000800000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d6163766c616e00040002800800", @ANYRES32=r10], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000044c0), 0x141802) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) kernel console output (not intermixed with test programs): sb 1-1: Manufacturer: syz [ 770.735728][T16993] usb 1-1: SerialNumber: syz [ 770.745049][T16993] usb 1-1: config 0 descriptor?? [ 770.822674][T17831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.837200][T17831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.848974][ T9726] usb 6-1: USB disconnect, device number 118 [ 771.464660][T17838] sctp: [Deprecated]: syz.5.3816 (pid 17838) Use of int in max_burst socket option deprecated. [ 771.464660][T17838] Use struct sctp_assoc_value instead [ 771.701499][T17840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.711451][T17840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.722694][ T5945] usb 6-1: new full-speed USB device number 119 using dummy_hcd [ 771.858763][T17843] FAULT_INJECTION: forcing a failure. [ 771.858763][T17843] name failslab, interval 1, probability 0, space 0, times 0 [ 771.875302][ T5945] usb 6-1: device descriptor read/64, error -71 [ 771.954637][T17843] CPU: 0 UID: 0 PID: 17843 Comm: syz.4.3817 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 771.954661][T17843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 771.954671][T17843] Call Trace: [ 771.954681][T17843] [ 771.954689][T17843] dump_stack_lvl+0x189/0x250 [ 771.954718][T17843] ? __pfx____ratelimit+0x10/0x10 [ 771.954738][T17843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 771.954761][T17843] ? __pfx__printk+0x10/0x10 [ 771.954782][T17843] ? ref_tracker_alloc+0x318/0x460 [ 771.954805][T17843] should_fail_ex+0x414/0x560 [ 771.954829][T17843] should_failslab+0xa8/0x100 [ 771.954848][T17843] kmem_cache_alloc_noprof+0x73/0x3c0 [ 771.954863][T17843] ? skb_clone+0x212/0x3a0 [ 771.954884][T17843] skb_clone+0x212/0x3a0 [ 771.954903][T17843] __netlink_deliver_tap+0x404/0x850 [ 771.954928][T17843] ? netlink_deliver_tap+0x2e/0x1b0 [ 771.954944][T17843] netlink_deliver_tap+0x19c/0x1b0 [ 771.954959][T17843] netlink_unicast+0x72f/0x8d0 [ 771.954989][T17843] netlink_sendmsg+0x805/0xb30 [ 771.955011][T17843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.955029][T17843] ? aa_sock_msg_perm+0x94/0x160 [ 771.955050][T17843] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 771.955070][T17843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.955085][T17843] __sock_sendmsg+0x219/0x270 [ 771.955108][T17843] ____sys_sendmsg+0x505/0x830 [ 771.955129][T17843] ? __pfx_____sys_sendmsg+0x10/0x10 [ 771.955152][T17843] ? import_iovec+0x74/0xa0 [ 771.955171][T17843] ___sys_sendmsg+0x21f/0x2a0 [ 771.955189][T17843] ? __pfx____sys_sendmsg+0x10/0x10 [ 771.955233][T17843] ? __fget_files+0x2a/0x420 [ 771.955250][T17843] ? __fget_files+0x3a0/0x420 [ 771.955274][T17843] __x64_sys_sendmsg+0x19b/0x260 [ 771.955293][T17843] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 771.955316][T17843] ? __pfx_ksys_write+0x10/0x10 [ 771.955335][T17843] ? do_syscall_64+0xbe/0x3b0 [ 771.955357][T17843] do_syscall_64+0xfa/0x3b0 [ 771.955376][T17843] ? lockdep_hardirqs_on+0x9c/0x150 [ 771.955395][T17843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.955410][T17843] ? clear_bhb_loop+0x60/0xb0 [ 771.955427][T17843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.955442][T17843] RIP: 0033:0x7ffbe4b8e929 [ 771.955455][T17843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.955468][T17843] RSP: 002b:00007ffbe5964038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 771.955491][T17843] RAX: ffffffffffffffda RBX: 00007ffbe4db5fa0 RCX: 00007ffbe4b8e929 [ 771.955503][T17843] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 771.955512][T17843] RBP: 00007ffbe5964090 R08: 0000000000000000 R09: 0000000000000000 [ 771.955522][T17843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.955531][T17843] R13: 0000000000000000 R14: 00007ffbe4db5fa0 R15: 00007ffbe4edfa28 [ 771.955554][T17843] [ 771.955623][T17843] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3817'. [ 772.125019][ T5945] usb 6-1: new full-speed USB device number 120 using dummy_hcd [ 772.268629][T17843] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.551043][T17852] blktrace: Concurrent blktraces are not allowed on sg0 [ 772.578202][T17852] sctp: [Deprecated]: syz.4.3819 (pid 17852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 772.578202][T17852] Use struct sctp_sack_info instead [ 772.632619][ T5945] usb 6-1: device descriptor read/64, error -71 [ 772.742613][ T5945] usb usb6-port1: attempt power cycle [ 772.829892][T17859] fuse: Bad value for 'fd' [ 772.829903][T17858] fuse: Bad value for 'fd' [ 773.092032][ T5945] usb 6-1: new full-speed USB device number 121 using dummy_hcd [ 773.122943][ T5945] usb 6-1: device descriptor read/8, error -71 [ 773.362177][ T5945] usb 6-1: new full-speed USB device number 122 using dummy_hcd [ 773.403009][T17866] ip6gretap1: entered promiscuous mode [ 773.408592][T17866] ip6gretap1: entered allmulticast mode [ 773.469314][ T5945] usb 6-1: device descriptor read/8, error -71 [ 773.604225][ T5945] usb usb6-port1: unable to enumerate USB device [ 773.963378][T16993] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 773.963886][ T5945] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 773.991465][T16993] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 773.999129][T16993] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 774.008575][T16993] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 774.048391][T16993] usb 1-1: USB disconnect, device number 113 [ 774.145434][ T5945] usb 5-1: Using ep0 maxpacket: 8 [ 774.171767][T17877] FAULT_INJECTION: forcing a failure. [ 774.171767][T17877] name failslab, interval 1, probability 0, space 0, times 0 [ 774.174426][ T5945] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 774.194247][T17877] CPU: 0 UID: 0 PID: 17877 Comm: syz.0.3827 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 774.194276][T17877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 774.194290][T17877] Call Trace: [ 774.194299][T17877] [ 774.194309][T17877] dump_stack_lvl+0x189/0x250 [ 774.194346][T17877] ? __pfx____ratelimit+0x10/0x10 [ 774.194375][T17877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 774.194407][T17877] ? __pfx__printk+0x10/0x10 [ 774.194437][T17877] ? __pfx___might_resched+0x10/0x10 [ 774.194462][T17877] should_fail_ex+0x414/0x560 [ 774.194497][T17877] should_failslab+0xa8/0x100 [ 774.194523][T17877] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 774.194546][T17877] ? ethnl_default_set_doit+0x524/0xa20 [ 774.194577][T17877] kmemdup_noprof+0x2b/0x70 [ 774.194606][T17877] ethnl_default_set_doit+0x524/0xa20 [ 774.194642][T17877] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 774.194670][T17877] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 774.194708][T17877] genl_family_rcv_msg_doit+0x215/0x300 [ 774.194744][T17877] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 774.194786][T17877] ? bpf_lsm_capable+0x9/0x20 [ 774.194806][T17877] ? security_capable+0x7e/0x2e0 [ 774.194840][T17877] genl_rcv_msg+0x60e/0x790 [ 774.194876][T17877] ? __pfx_genl_rcv_msg+0x10/0x10 [ 774.194900][T17877] ? ref_tracker_free+0x63a/0x7d0 [ 774.194928][T17877] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 774.194960][T17877] ? __pfx_ref_tracker_free+0x10/0x10 [ 774.195002][T17877] netlink_rcv_skb+0x205/0x470 [ 774.195024][T17877] ? __pfx_genl_rcv_msg+0x10/0x10 [ 774.195053][T17877] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 774.195094][T17877] ? down_read+0x1ad/0x2e0 [ 774.195127][T17877] genl_rcv+0x28/0x40 [ 774.195151][T17877] netlink_unicast+0x758/0x8d0 [ 774.195199][T17877] netlink_sendmsg+0x805/0xb30 [ 774.195232][T17877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 774.195257][T17877] ? aa_sock_msg_perm+0x94/0x160 [ 774.195287][T17877] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 774.195314][T17877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 774.195337][T17877] __sock_sendmsg+0x219/0x270 [ 774.195369][T17877] ____sys_sendmsg+0x505/0x830 [ 774.195398][T17877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 774.195433][T17877] ? import_iovec+0x74/0xa0 [ 774.195459][T17877] ___sys_sendmsg+0x21f/0x2a0 [ 774.195485][T17877] ? __pfx____sys_sendmsg+0x10/0x10 [ 774.195551][T17877] ? __fget_files+0x2a/0x420 [ 774.195574][T17877] ? __fget_files+0x3a0/0x420 [ 774.195611][T17877] __x64_sys_sendmsg+0x19b/0x260 [ 774.195638][T17877] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 774.195671][T17877] ? __pfx_ksys_write+0x10/0x10 [ 774.195689][T17877] ? rcu_is_watching+0x15/0xb0 [ 774.195716][T17877] ? do_syscall_64+0xbe/0x3b0 [ 774.195749][T17877] do_syscall_64+0xfa/0x3b0 [ 774.195777][T17877] ? lockdep_hardirqs_on+0x9c/0x150 [ 774.195804][T17877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.195825][T17877] ? clear_bhb_loop+0x60/0xb0 [ 774.195851][T17877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.195872][T17877] RIP: 0033:0x7f870898e929 [ 774.195891][T17877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.195909][T17877] RSP: 002b:00007f87097d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 774.195931][T17877] RAX: ffffffffffffffda RBX: 00007f8708bb5fa0 RCX: 00007f870898e929 [ 774.195946][T17877] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 774.195966][T17877] RBP: 00007f87097d5090 R08: 0000000000000000 R09: 0000000000000000 [ 774.195980][T17877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.195992][T17877] R13: 0000000000000000 R14: 00007f8708bb5fa0 R15: 00007f8708cdfa28 [ 774.196026][T17877] [ 774.572490][ T5945] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 774.591039][ T5945] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 774.618324][ T5945] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 774.632066][ T5945] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 774.876508][ T5945] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 774.929451][ T5945] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 775.008198][ T5945] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 775.092284][ T5945] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 775.155490][ T5945] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 775.168609][ T5945] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 775.180401][ T5945] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 775.191744][ T5945] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 775.208376][ T5945] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 775.219880][ T5945] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 775.240430][ T5945] usb 5-1: string descriptor 0 read error: -22 [ 775.247087][ T5945] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 775.271423][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.330615][ T5945] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 775.351982][ T9712] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 775.368106][T17895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3832'. [ 775.442551][T17897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3834'. [ 775.542773][ T9712] usb 6-1: Using ep0 maxpacket: 8 [ 775.555454][ T9712] usb 6-1: unable to get BOS descriptor or descriptor too short [ 775.576150][ T5945] usb 5-1: USB disconnect, device number 125 [ 775.583989][ T9712] usb 6-1: config 9 has an invalid interface number: 121 but max is 1 [ 775.600653][ T9712] usb 6-1: config 9 has an invalid interface number: 93 but max is 1 [ 775.762448][ T9712] usb 6-1: config 9 has no interface number 0 [ 775.783118][ T9712] usb 6-1: config 9 has no interface number 1 [ 775.795169][ T9712] usb 6-1: too many endpoints for config 9 interface 121 altsetting 7: 249, using maximum allowed: 30 [ 775.850953][ T9712] usb 6-1: config 9 interface 121 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 775.915704][ T9712] usb 6-1: config 9 interface 121 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 249 [ 775.937365][ T9712] usb 6-1: config 9 interface 121 has no altsetting 0 [ 775.944355][ T9712] usb 6-1: config 9 interface 93 has no altsetting 0 [ 776.008729][ T9712] usb 6-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=35.13 [ 776.017936][ T9712] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 776.045627][ T9712] usb 6-1: Manufacturer: syz [ 776.051547][ T9712] usb 6-1: SerialNumber: syz [ 776.242042][ T5945] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 776.308886][ T9712] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 776.329238][ T9712] snd-usb-audio 6-1:9.121: probe with driver snd-usb-audio failed with error -2 [ 776.354237][ T9712] usb 6-1: Found UVC 0.00 device (0499:1018) [ 776.364117][ T9712] usb 6-1: No valid video chain found. [ 776.372997][ T9712] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 776.417740][ T5945] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 776.428387][ T5945] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 776.470543][ T5945] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 776.496593][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.533354][ T9712] snd-usb-audio 6-1:9.93: probe with driver snd-usb-audio failed with error -2 [ 776.549803][ T5945] usb 5-1: Product: 㤠[ 776.570896][ T5945] usb 5-1: Manufacturer: ã  [ 776.589419][ T9712] usb 6-1: USB disconnect, device number 123 [ 776.600588][ T5945] usb 5-1: SerialNumber: ဠ[ 776.715178][ T5970] udevd[5970]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:9.93/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 776.843824][ T5945] usb 5-1: 0:2 : does not exist [ 776.949512][ T5945] usb 5-1: USB disconnect, device number 126 [ 777.045248][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 777.297789][T17918] FAULT_INJECTION: forcing a failure. [ 777.297789][T17918] name failslab, interval 1, probability 0, space 0, times 0 [ 777.312499][T17918] CPU: 0 UID: 0 PID: 17918 Comm: syz.1.3840 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 777.312526][T17918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 777.312540][T17918] Call Trace: [ 777.312549][T17918] [ 777.312558][T17918] dump_stack_lvl+0x189/0x250 [ 777.312595][T17918] ? __pfx____ratelimit+0x10/0x10 [ 777.312623][T17918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 777.312655][T17918] ? __pfx__printk+0x10/0x10 [ 777.312685][T17918] ? __pfx___might_resched+0x10/0x10 [ 777.312704][T17918] ? fs_reclaim_acquire+0x7d/0x100 [ 777.312735][T17918] should_fail_ex+0x414/0x560 [ 777.312782][T17918] should_failslab+0xa8/0x100 [ 777.312807][T17918] __kmalloc_noprof+0xcb/0x4f0 [ 777.312827][T17918] ? ethnl_default_notify+0x184/0x990 [ 777.312856][T17918] ethnl_default_notify+0x184/0x990 [ 777.312880][T17918] ? __pfx___ethnl_set_coalesce+0x10/0x10 [ 777.312913][T17918] ? lockdep_hardirqs_on+0x9c/0x150 [ 777.312940][T17918] ? __pfx_ethnl_default_notify+0x10/0x10 [ 777.312978][T17918] ? mutex_is_locked+0x17/0x50 [ 777.312998][T17918] ? rtnl_is_locked+0x15/0x20 [ 777.313026][T17918] ethnl_default_set_doit+0x64e/0xa20 [ 777.313060][T17918] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 777.313087][T17918] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 777.313123][T17918] genl_family_rcv_msg_doit+0x215/0x300 [ 777.313157][T17918] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 777.313200][T17918] ? bpf_lsm_capable+0x9/0x20 [ 777.313218][T17918] ? security_capable+0x7e/0x2e0 [ 777.313247][T17918] genl_rcv_msg+0x60e/0x790 [ 777.313275][T17918] ? __pfx_genl_rcv_msg+0x10/0x10 [ 777.313295][T17918] ? ref_tracker_free+0x63a/0x7d0 [ 777.313319][T17918] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 777.313340][T17918] ? __pfx_ref_tracker_free+0x10/0x10 [ 777.313376][T17918] netlink_rcv_skb+0x205/0x470 [ 777.313398][T17918] ? __pfx_genl_rcv_msg+0x10/0x10 [ 777.313426][T17918] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 777.313459][T17918] ? down_read+0x1ad/0x2e0 [ 777.313484][T17918] genl_rcv+0x28/0x40 [ 777.313500][T17918] netlink_unicast+0x758/0x8d0 [ 777.313531][T17918] netlink_sendmsg+0x805/0xb30 [ 777.313554][T17918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.313572][T17918] ? aa_sock_msg_perm+0x94/0x160 [ 777.313593][T17918] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 777.313612][T17918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.313628][T17918] __sock_sendmsg+0x219/0x270 [ 777.313651][T17918] ____sys_sendmsg+0x505/0x830 [ 777.313672][T17918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 777.313695][T17918] ? import_iovec+0x74/0xa0 [ 777.313714][T17918] ___sys_sendmsg+0x21f/0x2a0 [ 777.313732][T17918] ? __pfx____sys_sendmsg+0x10/0x10 [ 777.313783][T17918] ? __fget_files+0x2a/0x420 [ 777.313800][T17918] ? __fget_files+0x3a0/0x420 [ 777.313826][T17918] __x64_sys_sendmsg+0x19b/0x260 [ 777.313844][T17918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 777.313869][T17918] ? __pfx_ksys_write+0x10/0x10 [ 777.313888][T17918] ? do_syscall_64+0xbe/0x3b0 [ 777.313912][T17918] do_syscall_64+0xfa/0x3b0 [ 777.313931][T17918] ? lockdep_hardirqs_on+0x9c/0x150 [ 777.313951][T17918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.313965][T17918] ? clear_bhb_loop+0x60/0xb0 [ 777.313983][T17918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.313998][T17918] RIP: 0033:0x7f13e858e929 [ 777.314012][T17918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.314025][T17918] RSP: 002b:00007f13e93fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 777.314041][T17918] RAX: ffffffffffffffda RBX: 00007f13e87b5fa0 RCX: 00007f13e858e929 [ 777.314052][T17918] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 777.314062][T17918] RBP: 00007f13e93fd090 R08: 0000000000000000 R09: 0000000000000000 [ 777.314071][T17918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.314080][T17918] R13: 0000000000000000 R14: 00007f13e87b5fa0 R15: 00007f13e88dfa28 [ 777.314103][T17918] [ 777.711526][ T9712] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 777.857314][T17922] fuse: Bad value for 'fd' [ 777.898712][ T9712] usb 6-1: config 17 has an invalid interface number: 85 but max is 0 [ 777.907434][ T9712] usb 6-1: config 17 has no interface number 0 [ 777.917189][ T9712] usb 6-1: config 17 interface 85 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 778.032169][ T9712] usb 6-1: config 17 interface 85 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 778.089920][ T9712] usb 6-1: config 17 interface 85 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 778.148392][ T9712] usb 6-1: config 17 interface 85 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 778.193339][ T9712] usb 6-1: config 17 interface 85 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 778.241264][ T9712] usb 6-1: config 17 interface 85 altsetting 0 has an endpoint descriptor with address 0x39, changing to 0x9 [ 778.276358][ T9712] usb 6-1: config 17 interface 85 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 778.311050][ T9712] usb 6-1: config 17 interface 85 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 778.346936][ T9712] usb 6-1: New USB device found, idVendor=1b3d, idProduct=4701, bcdDevice=52.ac [ 778.382020][ T9712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.397206][ T9712] usb 6-1: Product: ã° [ 778.407286][ T9712] usb 6-1: Manufacturer: 泜ä³ä¢‚à¯á—¹í‡–翔䂀舘府葎冣栈ïºí˜€â¶ªê½ƒà¶¯î±ë™ ï«™ïƒ¿é® è««à£žá’¸ä£ï»§ê—«å„ƒä »ï¼¡æ‡›îŒœâš¢êŸ“岟ä æ™ƒÃ­ç›©á©å‰´é‹½ëº¡ã…¾ãŠ‘皯橳à½ì‚´ê¡€í‰†ê‹¶áŠ¹æ…°ï»çƒ‹ä–ªè’ºíŠŸì’±êœ¯ïº²ê¬‚⧴掵쵈ê»ã¬á½¨é©í€’ã€î¾‘䮕䎗顚ﺈ걱êŽä§‰ [ 778.479620][ T5945] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 778.487397][ T9712] usb 6-1: SerialNumber: syz [ 778.642033][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 778.651480][ T5945] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 778.692186][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.730623][ T5945] usb 2-1: config 0 descriptor?? [ 778.745094][ T5945] gspca_main: sq930x-2.14.0 probing 041e:403c [ 778.945343][ T9712] ftdi_sio 6-1:17.85: FTDI USB Serial Device converter detected [ 778.964745][ T9712] ftdi_sio ttyUSB0: unknown device type: 0x52ac [ 778.989008][ T9712] usb 6-1: USB disconnect, device number 124 [ 779.027420][ T9712] ftdi_sio 6-1:17.85: device disconnected [ 779.064120][ T5945] gspca_sq930x: reg_r 001f failed -71 [ 779.099261][ T5945] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 779.135854][ T5945] usb 2-1: USB disconnect, device number 19 [ 779.442089][ T9717] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 779.622058][ T9717] usb 1-1: Using ep0 maxpacket: 32 [ 779.635901][ T9717] usb 1-1: config 252 has an invalid interface number: 252 but max is 3 [ 779.708134][ T9717] usb 1-1: config 252 has an invalid interface number: 23 but max is 3 [ 779.732892][ T9717] usb 1-1: config 252 has an invalid interface number: 196 but max is 3 [ 779.772479][ T9717] usb 1-1: config 252 has no interface number 1 [ 779.778818][ T9717] usb 1-1: config 252 has no interface number 2 [ 779.798647][ T9717] usb 1-1: config 252 has no interface number 3 [ 779.817238][ T9717] usb 1-1: config 252 interface 252 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 779.831802][T17965] netlink: 232 bytes leftover after parsing attributes in process `syz.5.3853'. [ 779.843891][ T9717] usb 1-1: config 252 interface 23 altsetting 174 bulk endpoint 0x6 has invalid maxpacket 16 [ 779.854406][ T5945] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 779.871973][ T9717] usb 1-1: config 252 interface 23 altsetting 174 has an invalid descriptor for endpoint zero, skipping [ 779.911912][ T9717] usb 1-1: config 252 interface 196 altsetting 162 has a duplicate endpoint with address 0xD, skipping [ 779.923771][ T9717] usb 1-1: config 252 interface 196 altsetting 162 has a duplicate endpoint with address 0xF, skipping [ 779.936467][ T9717] usb 1-1: config 252 interface 196 altsetting 162 has an invalid descriptor for endpoint zero, skipping [ 779.949650][ T9717] usb 1-1: config 252 interface 196 altsetting 162 has a duplicate endpoint with address 0xA, skipping [ 779.966123][ T9717] usb 1-1: config 252 interface 196 altsetting 162 has a duplicate endpoint with address 0x9, skipping [ 780.008129][ T9717] usb 1-1: config 252 interface 196 altsetting 162 has a duplicate endpoint with address 0x7, skipping [ 780.048820][ T9717] usb 1-1: config 252 interface 0 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 780.076469][ T9717] usb 1-1: config 252 interface 0 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 780.091573][ T9717] usb 1-1: config 252 interface 0 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 780.103025][ T9717] usb 1-1: config 252 interface 0 altsetting 64 has a duplicate endpoint with address 0xA, skipping [ 780.152792][ T9717] usb 1-1: config 252 interface 23 has no altsetting 0 [ 780.156200][T17972] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3856'. [ 780.266555][ T9717] usb 1-1: config 252 interface 196 has no altsetting 0 [ 780.273506][T17972] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3856'. [ 780.282938][ T9717] usb 1-1: config 252 interface 0 has no altsetting 0 [ 780.289817][ T9717] usb 1-1: New USB device found, idVendor=0856, idProduct=ac22, bcdDevice=96.9d [ 780.456589][ T5945] usb 5-1: device descriptor read/64, error -71 [ 780.470021][ T9717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.484190][ T9717] usb 1-1: Interface #252 referenced by multiple IADs [ 780.711994][ T5945] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 780.736969][ T9719] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 780.757259][ T9717] usb 1-1: string descriptor 0 read error: -71 [ 780.800203][ T9717] mos7840 1-1:252.252: required endpoints missing [ 780.829303][ T9717] mos7840 1-1:252.23: required endpoints missing [ 780.872812][ T9717] mos7840 1-1:252.196: required endpoints missing [ 780.887457][ T9717] mos7840 1-1:252.0: required endpoints missing [ 780.893893][ T5945] usb 5-1: device descriptor read/64, error -71 [ 780.921391][ T9717] usb 1-1: USB disconnect, device number 114 [ 780.937116][T17972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3856'. [ 780.947022][ T9719] usb 2-1: Using ep0 maxpacket: 32 [ 780.965892][ T9719] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 780.989823][ T9719] usb 2-1: config 0 has no interface number 0 [ 780.999619][ T9719] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 781.016819][ T5945] usb usb5-port1: attempt power cycle [ 781.030863][ T9719] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 781.054206][ T9719] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 781.100635][ T9719] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 781.122384][ T9719] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 781.149254][ T9719] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 781.162638][ T9719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.172898][ T9719] usb 2-1: Product: syz [ 781.177126][ T9719] usb 2-1: Manufacturer: syz [ 781.192928][ T9719] usb 2-1: SerialNumber: syz [ 781.229516][ T9719] usb 2-1: config 0 descriptor?? [ 781.241775][T17970] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 781.402553][ T5945] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 781.433046][ T5945] usb 5-1: device descriptor read/8, error -71 [ 781.454796][ T9719] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 781.692144][ T5945] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 781.743829][ T5945] usb 5-1: device descriptor read/8, error -71 [ 781.852940][T17990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3861'. [ 781.857947][T17970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.882686][T17970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.883738][ T5945] usb usb5-port1: unable to enumerate USB device [ 781.931518][ T9719] etas_es58x 2-1:0.219: could not retrieve the product info string [ 781.960510][ T9719] usb 2-1: USB disconnect, device number 20 [ 782.007319][ T9719] etas_es58x 2-1:0.219: Disconnecting syz syz [ 782.155477][T17990] syzkaller1: entered promiscuous mode [ 782.161080][T17990] syzkaller1: entered allmulticast mode [ 782.182583][T17994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3862'. [ 782.191553][T17994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3862'. [ 782.234900][T17990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3861'. [ 782.484817][T17998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3863'. [ 782.922046][ T5945] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 783.022143][ T9719] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 783.043541][ T9717] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 783.080224][T18012] sctp: [Deprecated]: syz.2.3868 (pid 18012) Use of int in max_burst socket option. [ 783.080224][T18012] Use struct sctp_assoc_value instead [ 783.107040][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 783.125051][ T5945] usb 5-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 783.136817][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.160420][ T5945] usb 5-1: config 0 descriptor?? [ 783.212021][ T9717] usb 6-1: Using ep0 maxpacket: 32 [ 783.218136][ T9719] usb 2-1: Using ep0 maxpacket: 8 [ 783.226863][ T9717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.241536][ T9717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.252585][ T9719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.262517][ T9719] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 783.271627][ T9717] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 783.285749][ T9719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.293870][ T9717] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 783.305200][ T9717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.314164][ T9719] usb 2-1: config 0 descriptor?? [ 783.341210][ T9717] usb 6-1: config 0 descriptor?? [ 783.392363][T16993] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 783.546295][T16993] usb 1-1: config 0 has an invalid descriptor of length 74, skipping remainder of the config [ 783.559023][T16993] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 783.569306][T16993] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 783.581374][T16993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.596820][T16993] usb 1-1: config 0 descriptor?? [ 783.626391][ T5945] elecom 0003:056E:00E6.0028: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.4-1/input0 [ 783.775928][ T9719] hid-multitouch 0003:0EEF:72C4.0029: unknown main item tag 0x0 [ 783.810640][ T9717] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.002A/input/input48 [ 783.821069][T16993] usb 1-1: USB disconnect, device number 115 [ 783.828527][ T9719] hid-multitouch 0003:0EEF:72C4.0029: hidraw1: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 783.949283][ T9728] usb 2-1: USB disconnect, device number 21 [ 783.951326][ T9717] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.002A/input/input49 [ 784.147967][T18023] fido_id[18023]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 784.328454][ T9717] kye 0003:0458:5011.002A: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 784.427542][ T9717] usb 6-1: USB disconnect, device number 125 [ 784.540441][T18031] fido_id[18031]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 784.545755][ T9728] usb 5-1: USB disconnect, device number 5 [ 784.891359][T18045] FAULT_INJECTION: forcing a failure. [ 784.891359][T18045] name failslab, interval 1, probability 0, space 0, times 0 [ 784.910370][T18045] CPU: 0 UID: 0 PID: 18045 Comm: syz.0.3879 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 784.910401][T18045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 784.910415][T18045] Call Trace: [ 784.910423][T18045] [ 784.910432][T18045] dump_stack_lvl+0x189/0x250 [ 784.910471][T18045] ? __pfx____ratelimit+0x10/0x10 [ 784.910501][T18045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 784.910526][T18045] ? __pfx__printk+0x10/0x10 [ 784.910547][T18045] ? __pfx___might_resched+0x10/0x10 [ 784.910565][T18045] should_fail_ex+0x414/0x560 [ 784.910590][T18045] should_failslab+0xa8/0x100 [ 784.910609][T18045] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 784.910625][T18045] ? trace_rpm_usage+0x7e/0x1f0 [ 784.910640][T18045] ? __alloc_skb+0x112/0x2d0 [ 784.910652][T18045] ? __pfx_nsim_get_coalesce+0x10/0x10 [ 784.910675][T18045] __alloc_skb+0x112/0x2d0 [ 784.910692][T18045] ethnl_default_notify+0x4a4/0x990 [ 784.910714][T18045] ? __pfx_ethnl_default_notify+0x10/0x10 [ 784.910744][T18045] ? mutex_is_locked+0x17/0x50 [ 784.910757][T18045] ? rtnl_is_locked+0x15/0x20 [ 784.910776][T18045] ethnl_default_set_doit+0x64e/0xa20 [ 784.910800][T18045] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 784.910820][T18045] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 784.910847][T18045] genl_family_rcv_msg_doit+0x215/0x300 [ 784.910872][T18045] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 784.910902][T18045] ? bpf_lsm_capable+0x9/0x20 [ 784.910916][T18045] ? security_capable+0x7e/0x2e0 [ 784.910940][T18045] genl_rcv_msg+0x60e/0x790 [ 784.910964][T18045] ? __pfx_genl_rcv_msg+0x10/0x10 [ 784.910981][T18045] ? ref_tracker_free+0x63a/0x7d0 [ 784.911002][T18045] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 784.911019][T18045] ? __pfx_ref_tracker_free+0x10/0x10 [ 784.911056][T18045] netlink_rcv_skb+0x205/0x470 [ 784.911072][T18045] ? __pfx_genl_rcv_msg+0x10/0x10 [ 784.911092][T18045] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 784.911120][T18045] ? down_read+0x1ad/0x2e0 [ 784.911144][T18045] genl_rcv+0x28/0x40 [ 784.911161][T18045] netlink_unicast+0x758/0x8d0 [ 784.911192][T18045] netlink_sendmsg+0x805/0xb30 [ 784.911215][T18045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 784.911233][T18045] ? aa_sock_msg_perm+0x94/0x160 [ 784.911255][T18045] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 784.911275][T18045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 784.911293][T18045] __sock_sendmsg+0x219/0x270 [ 784.911316][T18045] ____sys_sendmsg+0x505/0x830 [ 784.911337][T18045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 784.911360][T18045] ? import_iovec+0x74/0xa0 [ 784.911379][T18045] ___sys_sendmsg+0x21f/0x2a0 [ 784.911397][T18045] ? __pfx____sys_sendmsg+0x10/0x10 [ 784.911442][T18045] ? __fget_files+0x2a/0x420 [ 784.911459][T18045] ? __fget_files+0x3a0/0x420 [ 784.911484][T18045] __x64_sys_sendmsg+0x19b/0x260 [ 784.911502][T18045] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 784.911526][T18045] ? __pfx_ksys_write+0x10/0x10 [ 784.911545][T18045] ? do_syscall_64+0xbe/0x3b0 [ 784.911569][T18045] do_syscall_64+0xfa/0x3b0 [ 784.911588][T18045] ? lockdep_hardirqs_on+0x9c/0x150 [ 784.911606][T18045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.911621][T18045] ? clear_bhb_loop+0x60/0xb0 [ 784.911639][T18045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.911653][T18045] RIP: 0033:0x7f870898e929 [ 784.911667][T18045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.911680][T18045] RSP: 002b:00007f87097d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 784.911696][T18045] RAX: ffffffffffffffda RBX: 00007f8708bb5fa0 RCX: 00007f870898e929 [ 784.911707][T18045] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 784.911716][T18045] RBP: 00007f87097d5090 R08: 0000000000000000 R09: 0000000000000000 [ 784.911726][T18045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 784.911734][T18045] R13: 0000000000000000 R14: 00007f8708bb5fa0 R15: 00007f8708cdfa28 [ 784.911757][T18045] [ 786.011959][T16993] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 786.129536][T18069] syzkaller1: entered promiscuous mode [ 786.140157][T18069] syzkaller1: entered allmulticast mode [ 786.165836][T16993] usb 6-1: device descriptor read/64, error -71 [ 786.232195][ T9712] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 786.384428][ T9712] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 786.400077][ T9712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 786.411121][ T9712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 786.411989][T16993] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 786.425452][ T9712] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 786.454720][ T9712] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 786.466174][ T9712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.485866][ T9712] usb 1-1: config 0 descriptor?? [ 786.582253][T16993] usb 6-1: device descriptor read/64, error -71 [ 786.594737][ T9717] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 786.693481][T16993] usb usb6-port1: attempt power cycle [ 786.725422][T18060] cgroup: fork rejected by pids controller in /syz0 [ 786.803070][ T9717] usb 2-1: Using ep0 maxpacket: 8 [ 786.816555][ T9717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 786.831473][ T9717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 786.912764][ T9717] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 786.952370][ T9717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 786.972280][ T9717] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 787.049335][ T9717] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 787.071981][T16993] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 787.093928][ T9712] usbhid 1-1:0.0: can't add hid device: -71 [ 787.100020][ T9712] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 787.153955][T16993] usb 6-1: device descriptor read/8, error -71 [ 787.158066][ T9717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.178179][ T9712] usb 1-1: USB disconnect, device number 116 [ 787.188718][ T9717] usb 2-1: config 0 descriptor?? [ 787.276946][T18177] usb usb8: usbfs: process 18177 (syz.4.3887) did not claim interface 0 before use [ 787.327696][T18073] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 787.411976][T16993] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 787.439761][T16993] usb 6-1: device descriptor read/8, error -71 [ 787.564475][T16993] usb usb6-port1: unable to enumerate USB device [ 787.574951][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.708975][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.894377][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.164970][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.412400][ T9717] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 788.595038][ T9717] usb 5-1: Using ep0 maxpacket: 32 [ 788.636810][ T9717] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 788.650057][ T36] bridge_slave_1: left allmulticast mode [ 788.671702][ T9717] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 788.681112][ T36] bridge_slave_1: left promiscuous mode [ 788.691994][ T9728] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 788.706505][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 788.706705][ T9717] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 788.716717][ T9727] usb 2-1: USB disconnect, device number 22 [ 788.729504][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.799107][ T9717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 788.826098][ T36] bridge_slave_0: left allmulticast mode [ 788.831895][ T36] bridge_slave_0: left promiscuous mode [ 788.838010][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.862022][ T9717] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 788.882208][ T9717] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 788.912667][ T9728] usb 6-1: Using ep0 maxpacket: 16 [ 788.919521][ T9717] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 788.928798][ T9728] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 788.928831][ T9728] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 788.959424][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 788.971164][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 788.980284][ T9728] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 788.991612][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 789.001526][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 789.010257][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 789.040267][ T9728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.050916][ T9728] usb 6-1: Product: syz [ 789.059290][ T9728] usb 6-1: Manufacturer: syz [ 789.064569][ T9728] usb 6-1: SerialNumber: syz [ 789.071211][ T9717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.072444][ T9728] usb 6-1: config 0 descriptor?? [ 789.089823][ T9728] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 789.099310][ T9728] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 789.166803][ T9717] usb 5-1: config 0 descriptor?? [ 789.248554][T18213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3898'. [ 789.406229][ T9717] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 789.443661][ T9717] usb 5-1: USB disconnect, device number 6 [ 789.485424][ T9717] usblp0: removed [ 789.694670][ T9728] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 789.701460][ T9728] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 789.814776][T18226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3900'. [ 789.851111][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.864383][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.885501][ T36] bond0 (unregistering): Released all slaves [ 789.910385][ T9728] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 789.918156][ T9728] em28xx 6-1:0.0: No AC97 audio processor [ 789.922128][ T9717] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 789.946895][T18226] bridge_slave_1: left allmulticast mode [ 789.955487][T18226] bridge_slave_1: left promiscuous mode [ 789.962115][T18226] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.985493][T18226] bridge_slave_0: left allmulticast mode [ 789.991453][T18226] bridge_slave_0: left promiscuous mode [ 789.999510][T18226] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.145921][ T9717] usb 5-1: Using ep0 maxpacket: 32 [ 790.166853][ T9717] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 790.176114][ T9717] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 790.188327][ T9717] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 790.207430][ T9717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 790.217639][ T9717] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 790.277932][ T9717] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 790.331942][ T9717] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 790.345975][ T9717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.400160][ T9717] usb 5-1: config 0 descriptor?? [ 790.486096][ T36] hsr_slave_0: left promiscuous mode [ 790.510620][ T36] hsr_slave_1: left promiscuous mode [ 790.535455][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.589347][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.609026][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.622294][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.665689][ T9717] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 790.751388][ T36] veth1_macvtap: left promiscuous mode [ 790.761396][ T36] veth0_macvtap: left promiscuous mode [ 790.768995][ T36] veth1_vlan: left promiscuous mode [ 790.774774][ T36] veth0_vlan: left promiscuous mode [ 790.917747][ C0] usblp0: nonzero read bulk status received: -71 [ 790.919126][ T9717] usb 5-1: USB disconnect, device number 7 [ 790.924306][T18192] usblp0: error -71 reading from printer [ 791.075276][T14340] Bluetooth: hci3: command tx timeout [ 791.145726][ T9719] usb 6-1: USB disconnect, device number 4 [ 791.175786][T18192] usblp0: removed [ 791.184159][ T9719] em28xx 6-1:0.0: Disconnecting em28xx [ 791.215885][ T9719] em28xx 6-1:0.0: Freeing device [ 793.154248][T14340] Bluetooth: hci3: command tx timeout [ 793.382329][ T9728] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 793.522579][ T9728] usb 5-1: device descriptor read/64, error -71 [ 793.579377][ T36] team0 (unregistering): Port device team_slave_1 removed [ 793.643319][ T36] team0 (unregistering): Port device team_slave_0 removed [ 793.763101][ T9728] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 793.901998][ T9728] usb 5-1: device descriptor read/64, error -71 [ 794.017759][ T9728] usb usb5-port1: attempt power cycle [ 794.382017][ T9728] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 794.563133][ T9728] usb 5-1: device descriptor read/8, error -71 [ 794.749479][T18211] chnl_net:caif_netlink_parms(): no params data found [ 794.809716][ T9728] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 794.899604][ T9728] usb 5-1: device descriptor read/8, error -71 [ 795.022777][ T9728] usb usb5-port1: unable to enumerate USB device [ 795.072393][ T9717] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 795.163931][T18211] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.176580][T18211] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.184906][T18211] bridge_slave_0: entered allmulticast mode [ 795.214312][T18211] bridge_slave_0: entered promiscuous mode [ 795.242243][T18303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3911'. [ 795.251338][ T9719] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 795.251660][T14340] Bluetooth: hci3: command tx timeout [ 795.274903][T18211] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.281940][ T9717] usb 6-1: Using ep0 maxpacket: 32 [ 795.287780][T18211] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.295679][T18211] bridge_slave_1: entered allmulticast mode [ 795.303041][ T9717] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 795.306790][T18211] bridge_slave_1: entered promiscuous mode [ 795.341806][ T9717] usb 6-1: config 0 has no interface number 0 [ 795.422715][ T9717] usb 6-1: config 0 interface 12 has no altsetting 0 [ 795.433040][ T9719] usb 2-1: Using ep0 maxpacket: 32 [ 795.449640][ T9719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 795.475134][T18211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.475287][ T9719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 795.498720][ T9717] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 795.521531][ T9717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.537908][ T9717] usb 6-1: Product: syz [ 795.542693][ T9719] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB8, changing to 0x88 [ 795.561047][ T9717] usb 6-1: Manufacturer: syz [ 795.569186][T18211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.571996][ T9717] usb 6-1: SerialNumber: syz [ 795.583636][ T9719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 7 [ 795.611168][ T36] dummy0: left allmulticast mode [ 795.617599][ T9717] usb 6-1: config 0 descriptor?? [ 795.618359][ T36] bridge0: port 3(dummy0) entered disabled state [ 795.680460][ T9719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 795.715090][ T9719] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 795.724811][ T9719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.734055][ T9719] usb 2-1: Product: syz [ 795.740049][ T9719] usb 2-1: Manufacturer: syz [ 795.753106][ T9719] usb 2-1: SerialNumber: syz [ 795.755567][ T36] bridge_slave_1: left allmulticast mode [ 795.781050][ T9719] usb 2-1: config 0 descriptor?? [ 795.786280][ T36] bridge_slave_1: left promiscuous mode [ 795.810984][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.848348][ T36] bridge_slave_0: left allmulticast mode [ 795.873111][ T36] bridge_slave_0: left promiscuous mode [ 795.938430][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.030148][T18287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.041505][T18287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.213790][ T9719] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 796.388677][ T9719] usb 5-1: device descriptor read/64, error -71 [ 796.641955][ T9719] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 796.657883][T18319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.667590][T18319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.704181][ T9712] usb 2-1: USB disconnect, device number 23 [ 796.880412][ T9719] usb 5-1: device descriptor read/64, error -71 [ 797.023301][ T9719] usb usb5-port1: attempt power cycle [ 797.306292][T14340] Bluetooth: hci3: command tx timeout [ 797.432218][ T9719] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 797.476388][ T9719] usb 5-1: device descriptor read/8, error -71 [ 797.574441][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.597600][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.619030][ T36] bond0 (unregistering): Released all slaves [ 797.771071][ T36] tipc: Left network mode [ 797.781247][ T9719] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 797.838959][ T9719] usb 5-1: device descriptor read/8, error -71 [ 797.858363][T18211] team0: Port device team_slave_0 added [ 797.951028][T18211] team0: Port device team_slave_1 added [ 797.958626][ T9719] usb usb5-port1: unable to enumerate USB device [ 798.079878][T18211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.087655][T18211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.113731][ C1] vkms_vblank_simulate: vblank timer overrun [ 798.122982][T18211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.138887][T18211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.146472][T18211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.173724][T18211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.502742][T18211] hsr_slave_0: entered promiscuous mode [ 798.518211][T18211] hsr_slave_1: entered promiscuous mode [ 798.530713][T18211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 798.539164][T18211] Cannot create hsr debugfs directory [ 798.556453][ T36] hsr_slave_0: left promiscuous mode [ 798.589074][ T36] veth1_macvtap: left allmulticast mode [ 798.595623][ T36] veth1_macvtap: left promiscuous mode [ 798.601423][ T36] veth0_macvtap: left promiscuous mode [ 798.611115][ T36] veth1_vlan: left promiscuous mode [ 798.616759][ T36] veth0_vlan: left promiscuous mode [ 798.928088][ T36] pim6reg (unregistering): left allmulticast mode [ 799.103752][ T9717] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 799.111809][ T9717] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 799.129264][ T9717] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 799.187876][ T9717] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 799.274591][ T9717] usb 6-1: USB disconnect, device number 5 [ 799.567976][T18343] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3922'. [ 799.922146][ T9726] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 799.951953][ T9717] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 800.087076][ T36] team0 (unregistering): Port device team_slave_1 removed [ 800.094675][ T9726] usb 5-1: Using ep0 maxpacket: 16 [ 800.112357][ T9726] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 800.122445][ T9726] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.129532][ T9717] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 800.145496][ T9717] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 800.155743][ T9726] usb 5-1: config 0 has no interface number 0 [ 800.156374][ T9717] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 800.170244][ T9726] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 800.190821][ T9717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.223785][T18344] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 800.232155][ T9726] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 800.252737][ T9726] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 800.254930][ T9717] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 800.271695][ T9726] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147 [ 800.306134][ T36] team0 (unregistering): Port device team_slave_0 removed [ 800.369504][ T9726] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 800.458599][ T9726] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 800.470556][ T9726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.531730][ T9726] usb 5-1: config 0 descriptor?? [ 800.557845][T18346] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 800.578108][T18346] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 800.590454][ T9726] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 800.606200][T18344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.615795][T18344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.627359][T18344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.637090][T18344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.803638][ T9726] usb 5-1: USB disconnect, device number 16 [ 801.028660][T16993] usb 6-1: USB disconnect, device number 6 [ 801.712147][T16993] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 801.882605][T16993] usb 5-1: Using ep0 maxpacket: 16 [ 801.913492][T16993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.967015][T18363] program syz.1.3929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 801.981231][T16993] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 801.987311][T18363] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 802.002636][ T9726] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 802.067493][T16993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.178930][T16993] usb 5-1: config 0 descriptor?? [ 802.230247][ T9726] usb 6-1: config 0 has no interfaces? [ 802.257963][ T9726] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 802.268740][ T9726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.283869][ T9726] usb 6-1: Product: syz [ 802.288140][ T9726] usb 6-1: Manufacturer: syz [ 802.297877][ T9726] usb 6-1: SerialNumber: syz [ 802.316713][ T9726] usb 6-1: config 0 descriptor?? [ 802.619677][T18353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.652461][T18353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.663619][T16993] usbhid 5-1:0.0: can't add hid device: -71 [ 802.669730][T16993] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 802.720797][T16993] usb 5-1: USB disconnect, device number 17 [ 802.763171][ T9726] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 802.962622][ T9726] usb 2-1: Using ep0 maxpacket: 32 [ 802.978566][ T9726] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 802.988292][ T9726] usb 2-1: config 0 has no interface number 0 [ 802.998589][ T9726] usb 2-1: config 0 interface 12 has no altsetting 0 [ 803.024710][ T9726] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 803.036719][ T9726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.047321][ T9726] usb 2-1: Product: syz [ 803.051528][ T9726] usb 2-1: Manufacturer: syz [ 803.065656][ T9726] usb 2-1: SerialNumber: syz [ 803.101603][ T9726] usb 2-1: config 0 descriptor?? [ 803.642082][ T9719] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 803.832959][ T9719] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 803.833885][T18211] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 803.856339][ T9719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.874825][T18211] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 803.881886][ T9719] usb 5-1: Product: syz [ 803.887974][ T9719] usb 5-1: Manufacturer: syz [ 803.898513][ T9719] usb 5-1: SerialNumber: syz [ 803.900471][T18211] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 803.928654][T18211] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 803.932658][ T9719] usb 5-1: config 0 descriptor?? [ 804.035815][T18397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.047107][T18397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.303321][T18211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.532444][T18211] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.586534][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.593801][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.781447][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.788753][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.328874][T18211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.409101][T18211] veth0_vlan: entered promiscuous mode [ 805.476070][T18211] veth1_vlan: entered promiscuous mode [ 805.521686][T18211] veth0_macvtap: entered promiscuous mode [ 805.532195][T18211] veth1_macvtap: entered promiscuous mode [ 805.572036][T18211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.592505][T18211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.610191][T18211] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.621138][T18211] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.635629][T18211] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.649310][T18211] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.760501][ T9712] usb 6-1: USB disconnect, device number 7 [ 806.115641][ T9726] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 806.123806][ T9726] f81534 2-1:0.12: f81534_find_config_idx: read failed: -32 [ 806.147257][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.166471][ T9726] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 806.184708][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.200093][ T9726] f81534 2-1:0.12: probe with driver f81534 failed with error -32 [ 806.303511][T15186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.312517][T15186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.512819][T18416] netlink: 18 bytes leftover after parsing attributes in process `syz.5.3936'. [ 806.727131][ T9727] usb 5-1: USB disconnect, device number 18 [ 806.791919][ T9717] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 806.821444][ T9712] usb 2-1: USB disconnect, device number 24 [ 806.904750][ T9726] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 806.974246][ T9717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 806.993756][ T9717] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 807.019639][ T9717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 807.043686][ T9717] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 807.072615][ T9717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.092517][ T9726] usb 1-1: Using ep0 maxpacket: 32 [ 807.110479][ T9717] usb 6-1: config 0 descriptor?? [ 807.113663][ T9726] usb 1-1: config 0 has an invalid interface number: 184 but max is 11 [ 807.126938][ T9717] em28xx 6-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 807.139708][ T9726] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 12 [ 807.156927][ T9717] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 807.178824][ T9726] usb 1-1: config 0 has no interface number 0 [ 807.202802][ T9726] usb 1-1: config 0 interface 184 has no altsetting 0 [ 807.224754][ T9726] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 807.252654][ T9726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.267618][ T9726] usb 1-1: Product: syz [ 807.277487][ T9726] usb 1-1: Manufacturer: syz [ 807.297725][ T9726] usb 1-1: SerialNumber: syz [ 807.318611][ T9726] usb 1-1: config 0 descriptor?? [ 807.338479][ T9726] smsc75xx v1.0.0 [ 807.432272][ T9717] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 807.440425][ T9717] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 807.459440][ T9717] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 807.469371][ T9717] em28xx 6-1:0.0: No AC97 audio processor [ 807.494284][ T9717] usb 6-1: USB disconnect, device number 8 [ 807.503988][ T9717] em28xx 6-1:0.0: Disconnecting em28xx [ 807.544014][ T9717] em28xx 6-1:0.0: Freeing device [ 807.945760][ T9726] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 807.993243][ T9726] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 808.237182][ T9726] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 808.265899][ T9726] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 808.297159][ T9726] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 808.325581][ T9726] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 808.361352][ T9726] usb 1-1: USB disconnect, device number 117 [ 808.404548][ T9728] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 808.574726][ T9728] usb 5-1: Using ep0 maxpacket: 32 [ 808.586815][ T9728] usb 5-1: too many configurations: 87, using maximum allowed: 8 [ 808.615105][ T9728] usb 5-1: config index 0 descriptor too short (expected 32705, got 36) [ 808.629010][ T9728] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 207 [ 808.649343][ T9728] usb 5-1: can't read configurations, error -22 [ 808.676717][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.684365][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.793272][ T9728] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 808.874530][T18471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3946'. [ 808.895627][T18471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3946'. [ 809.005092][ T9728] usb 5-1: Using ep0 maxpacket: 32 [ 809.018552][ T9728] usb 5-1: too many configurations: 87, using maximum allowed: 8 [ 809.074814][ T9728] usb 5-1: config index 0 descriptor too short (expected 32705, got 36) [ 809.101979][ T9728] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 207 [ 809.135276][ T9728] usb 5-1: can't read configurations, error -22 [ 809.164708][ T9728] usb usb5-port1: attempt power cycle [ 809.512220][ T9728] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 809.575301][ T9728] usb 5-1: Using ep0 maxpacket: 32 [ 809.585313][ T9728] usb 5-1: too many configurations: 87, using maximum allowed: 8 [ 809.593434][T16625] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 809.623370][ T9728] usb 5-1: config index 0 descriptor too short (expected 32705, got 36) [ 809.655996][ T9728] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 207 [ 809.672066][ T9728] usb 5-1: can't read configurations, error -22 [ 809.691950][ T9711] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 809.786241][T16625] usb 1-1: Using ep0 maxpacket: 32 [ 809.797201][T16625] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 809.808759][T16625] usb 1-1: config 0 has no interface number 0 [ 809.832278][ T9728] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 809.861643][T16625] usb 1-1: config 0 interface 12 has no altsetting 0 [ 809.869842][ T9711] usb 6-1: Using ep0 maxpacket: 32 [ 809.879017][ T9711] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 809.893272][ T9728] usb 5-1: Using ep0 maxpacket: 32 [ 809.898770][ T9711] usb 6-1: config 0 has no interface number 0 [ 809.909036][T16625] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 809.922449][ T9728] usb 5-1: too many configurations: 87, using maximum allowed: 8 [ 809.931961][T16625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.940002][T16625] usb 1-1: Product: syz [ 809.952016][ T9711] usb 6-1: config 0 interface 12 has no altsetting 0 [ 809.967515][ T9728] usb 5-1: config index 0 descriptor too short (expected 32705, got 36) [ 809.996958][ T9728] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 207 [ 810.005968][ T9711] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 810.015615][T16625] usb 1-1: Manufacturer: syz [ 810.025608][T16625] usb 1-1: SerialNumber: syz [ 810.035734][ T9711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.050152][ T9728] usb 5-1: can't read configurations, error -22 [ 810.057785][T16625] usb 1-1: config 0 descriptor?? [ 810.069554][ T9711] usb 6-1: Product: syz [ 810.079969][ T9728] usb usb5-port1: unable to enumerate USB device [ 810.089617][ T9711] usb 6-1: Manufacturer: syz [ 810.096597][ T9711] usb 6-1: SerialNumber: syz [ 810.113422][ T9711] usb 6-1: config 0 descriptor?? [ 810.134809][T18473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.173048][T18473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.608837][T18473] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.647009][T18473] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.675763][T18473] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.699173][T18473] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.060321][T18526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.069843][T18526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.234548][T16625] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 811.280563][T16625] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 811.373087][T16625] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 811.462773][T16625] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 811.502489][T16625] usb 1-1: USB disconnect, device number 118 [ 812.583834][T18559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3958'. [ 812.640233][T18559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3958'. [ 812.652128][T16993] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 812.802108][T16993] usb 5-1: device descriptor read/64, error -71 [ 813.003306][T18568] Cannot find add_set index 1 as target [ 813.092031][T16993] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 813.232460][T16993] usb 5-1: device descriptor read/64, error -71 [ 813.244187][ T9711] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 813.258702][ T9711] f81534 6-1:0.12: f81534_find_config_idx: read failed: -32 [ 813.291440][ T9711] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 813.309534][ T9711] f81534 6-1:0.12: probe with driver f81534 failed with error -32 [ 813.342345][T16993] usb usb5-port1: attempt power cycle [ 813.357282][ T9711] usb 6-1: USB disconnect, device number 9 [ 813.736859][T16993] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 813.783231][T16993] usb 5-1: device descriptor read/8, error -71 [ 813.801211][ T9722] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 813.903637][ T9722] dvb_usb_dibusb_mb 3-1:7.31: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 813.940788][ T9711] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 813.970688][ T9722] usbhid 3-1:7.31: couldn't find an input interrupt endpoint [ 814.056745][ T9722] dvb-usb: found a 'AVerMedia AverTV DVBT USB1.1' in cold state, will try to load a firmware [ 814.088427][T16993] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 814.119465][T16993] usb 5-1: device descriptor read/8, error -71 [ 814.126293][ T9711] usb 6-1: Using ep0 maxpacket: 32 [ 814.127365][ T9722] usb 3-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 814.147152][ T9722] usb 3-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 814.156855][ T9711] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 814.180045][ T9711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 814.216865][ T9711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 814.258529][ T9711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 814.276222][T16993] usb usb5-port1: unable to enumerate USB device [ 814.292121][T18519] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 814.323243][ T9711] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 814.334288][ T9711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.362280][ T9711] usb 6-1: Product: syz [ 814.376238][ T9711] usb 6-1: Manufacturer: syz [ 814.388084][ T9711] usb 6-1: SerialNumber: syz [ 814.410769][ T9711] usb 6-1: config 0 descriptor?? [ 814.524661][T18519] usb 1-1: Using ep0 maxpacket: 32 [ 814.559566][T18519] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 814.618277][T18519] usb 1-1: config 0 has no interface number 0 [ 814.618322][T18519] usb 1-1: config 0 interface 85 has no altsetting 0 [ 814.655938][T18519] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 814.678014][T18519] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.729967][T18519] usb 1-1: Product: syz [ 814.747731][T18519] usb 1-1: Manufacturer: syz [ 814.769749][T18519] usb 1-1: SerialNumber: syz [ 814.794252][T18519] usb 1-1: config 0 descriptor?? [ 814.817360][T18519] appletouch 1-1:0.85: Could not find int-in endpoint [ 814.836803][T18519] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 814.863407][T18519] usbhid 1-1:0.85: couldn't find an input interrupt endpoint [ 815.031633][T18567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3960'. [ 815.041100][T18567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3960'. [ 815.050364][T18567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3960'. [ 815.059686][T18567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3960'. [ 815.069139][T18567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3960'. [ 815.090505][T18567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3960'. [ 815.106208][T18567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3960'. [ 815.134934][T18582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3960'. [ 815.590745][T18567] syz.0.3960 (18567): drop_caches: 2 [ 816.062029][T17760] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 816.211996][T17760] usb 5-1: Using ep0 maxpacket: 16 [ 816.221043][T17760] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.242663][T17760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 816.262141][T17760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 816.278900][T17760] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 816.308824][T17760] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 816.354768][T17760] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 816.364384][T17760] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 816.372922][T17760] usb 5-1: Manufacturer: syz [ 816.380295][T17760] usb 5-1: config 0 descriptor?? [ 816.464457][T18598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.474916][T18598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.870733][T16993] usb 1-1: USB disconnect, device number 119 [ 817.590224][T18486] usb 6-1: USB disconnect, device number 10 [ 817.779814][T18617] __nla_validate_parse: 48 callbacks suppressed [ 817.779837][T18617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3970'. [ 817.839767][T18618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3970'. [ 817.972023][T18486] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 818.117788][T18620] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 818.132212][T18486] usb 6-1: Using ep0 maxpacket: 32 [ 818.148563][T18486] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 818.166052][T18486] usb 6-1: config 0 has no interface number 0 [ 818.224059][T18486] usb 6-1: config 0 interface 12 has no altsetting 0 [ 818.247484][T18486] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 818.256965][T18486] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.266379][T18486] usb 6-1: Product: syz [ 818.271129][T18486] usb 6-1: Manufacturer: syz [ 818.279248][T18486] usb 6-1: SerialNumber: syz [ 818.329281][T18486] usb 6-1: config 0 descriptor?? [ 818.457664][T18622] syzkaller0: entered promiscuous mode [ 818.485302][T18622] syzkaller0: entered allmulticast mode [ 818.505030][T18625] fuse: Bad value for 'rootmode' [ 818.616769][T18629] syzkaller1: entered promiscuous mode [ 818.626670][T18629] syzkaller1: entered allmulticast mode [ 818.752409][ T9719] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 818.882139][T18485] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 818.985874][ T9719] usb 2-1: Using ep0 maxpacket: 8 [ 819.005776][ T9719] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 819.015688][ T9719] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 819.041143][ T9719] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 819.051368][ T9719] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 819.061738][T18485] usb 1-1: Using ep0 maxpacket: 16 [ 819.068842][T17760] rc_core: IR keymap rc-hauppauge not found [ 819.081380][ T9719] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 819.095959][T17760] Registered IR keymap rc-empty [ 819.101107][T17760] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 819.117952][ T9719] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 819.127629][T18485] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 819.139603][ T9719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.216883][T17760] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 819.232142][T18485] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 819.245224][T17760] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 819.290655][T18485] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.381647][T18485] usb 1-1: Product: syz [ 819.417970][T17760] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input50 [ 819.440499][T18485] usb 1-1: Manufacturer: syz [ 819.455927][T18643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.464413][T18485] usb 1-1: SerialNumber: syz [ 819.473686][T18485] usb 1-1: config 0 descriptor?? [ 819.497593][T18643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.512170][T17760] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 819.593663][T17760] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 819.612057][ T9719] usb 2-1: GET_CAPABILITIES returned 0 [ 819.619836][ T9719] usbtmc 2-1:16.0: can't read capabilities [ 819.690617][ T9711] usb 1-1: USB disconnect, device number 120 [ 819.715156][T17760] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 819.791978][T17760] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 819.813647][T17760] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 819.829022][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 819.829040][ T30] audit: type=1326 audit(1749249608.543:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18621 comm="syz.1.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e858e929 code=0x7ffc0000 [ 819.864354][T17760] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 819.886480][ T30] audit: type=1326 audit(1749249608.543:5333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18621 comm="syz.1.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f13e858e929 code=0x7ffc0000 [ 819.909661][T17760] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 819.918016][T18519] usb 2-1: USB disconnect, device number 25 [ 819.932112][T17760] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 819.993400][T17760] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 820.043343][T17760] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 820.087061][ T30] audit: type=1326 audit(1749249608.543:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18621 comm="syz.1.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e858e929 code=0x7ffc0000 [ 820.155913][ T30] audit: type=1326 audit(1749249608.633:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18621 comm="syz.1.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f13e858e929 code=0x7ffc0000 [ 820.178879][ C0] vkms_vblank_simulate: vblank timer overrun [ 820.239277][ T30] audit: type=1326 audit(1749249608.633:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18621 comm="syz.1.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e858e929 code=0x7ffc0000 [ 820.261825][ C0] vkms_vblank_simulate: vblank timer overrun [ 820.290195][T17760] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 820.337958][ T30] audit: type=1326 audit(1749249608.633:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18621 comm="syz.1.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e858e929 code=0x7ffc0000 [ 820.376725][T17760] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 820.492493][T17760] usb 5-1: USB disconnect, device number 27 [ 820.982418][T17760] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 820.990124][T18495] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 821.172127][T18495] usb 1-1: Using ep0 maxpacket: 8 [ 821.195087][T17760] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 821.213082][T17760] usb 5-1: config 0 interface 0 has no altsetting 0 [ 821.246456][T17760] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 821.275307][T17760] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 821.283785][T18485] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 821.305479][T18495] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 821.325505][T17760] usb 5-1: Product: syz [ 821.336441][T18495] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 821.354812][T17760] usb 5-1: Manufacturer: syz [ 821.368933][T18495] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 821.391493][T17760] usb 5-1: SerialNumber: syz [ 821.435459][T18495] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 821.437799][T17760] usb 5-1: config 0 descriptor?? [ 821.476560][T18485] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 821.490042][T18495] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 821.503661][T18485] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 821.551515][T18495] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 821.566577][T17760] usb 5-1: selecting invalid altsetting 0 [ 821.575041][T18485] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 821.607206][T18485] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 821.630003][T18495] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.642121][T18486] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 821.669202][T18486] f81534 6-1:0.12: f81534_find_config_idx: read failed: -32 [ 821.688112][T18485] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 821.718820][T18486] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 821.755101][T18486] f81534 6-1:0.12: probe with driver f81534 failed with error -32 [ 821.782535][T18485] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 821.792322][T18485] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 821.880055][T18485] usb 2-1: Product: syz [ 821.911462][T18485] usb 2-1: Manufacturer: syz [ 821.928796][T18495] usb 1-1: usb_control_msg returned -32 [ 822.091980][T18495] usbtmc 1-1:16.0: can't read capabilities [ 822.141370][T18485] cdc_wdm 2-1:1.0: skipping garbage [ 822.154167][T18485] cdc_wdm 2-1:1.0: skipping garbage [ 822.170059][T18485] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 822.187313][T18485] cdc_wdm 2-1:1.0: Unknown control protocol [ 822.317879][T18652] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3979'. [ 822.329578][T18652] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.337538][T18652] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.391647][T18486] usb 2-1: USB disconnect, device number 26 [ 822.504586][T18658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3982'. [ 822.516538][T18485] usb 1-1: USB disconnect, device number 121 [ 822.538908][T18658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3982'. [ 822.831529][T18495] usb 6-1: USB disconnect, device number 11 [ 823.427711][T18495] usb 5-1: USB disconnect, device number 28 [ 823.824031][T18697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3993'. [ 823.933296][T18697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3993'. [ 824.642085][T18486] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 824.654943][T18708] netlink: 'syz.5.3997': attribute type 1 has an invalid length. [ 824.811998][T18486] usb 2-1: Using ep0 maxpacket: 32 [ 824.819401][T18486] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 824.832237][T18486] usb 2-1: config 0 has no interface number 0 [ 824.838533][T18486] usb 2-1: config 0 interface 12 has no altsetting 0 [ 824.860830][T18486] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 824.879458][T18486] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.911924][T18486] usb 2-1: Product: syz [ 824.928382][T18486] usb 2-1: Manufacturer: syz [ 824.950406][T18486] usb 2-1: SerialNumber: syz [ 824.982262][T18486] usb 2-1: config 0 descriptor?? [ 825.002128][T18495] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 825.182532][T18495] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 825.239271][T18495] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 825.265829][T18495] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 825.287967][T18495] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 825.319689][T18495] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 825.374415][T18495] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 825.383892][T18495] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 825.393717][T18495] usb 6-1: Product: syz [ 825.398511][T18495] usb 6-1: Manufacturer: syz [ 825.413757][T18495] cdc_wdm 6-1:1.0: skipping garbage [ 825.420014][T18495] cdc_wdm 6-1:1.0: skipping garbage [ 825.440253][T18495] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 825.451919][T18495] cdc_wdm 6-1:1.0: Unknown control protocol [ 825.536743][T18715] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3998'. [ 825.717705][T18726] input: syz1 as /devices/virtual/input/input51 [ 825.791475][T18726] program syz.0.4000 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 825.831425][T18495] usb 6-1: USB disconnect, device number 12 [ 825.998326][T18730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.061544][T18730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.205345][T18486] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 828.272056][T18486] f81534 2-1:0.12: f81534_find_config_idx: read failed: -32 [ 828.299775][T18486] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 828.322075][T18486] f81534 2-1:0.12: probe with driver f81534 failed with error -32 [ 828.462794][T18744] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 828.469782][T18744] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 828.626326][T17760] usb 2-1: USB disconnect, device number 27 [ 828.720689][T18748] netlink: 'syz.5.4008': attribute type 5 has an invalid length. [ 828.892369][T18519] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 829.014368][T18486] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 829.091154][T18519] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.111928][T18519] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 829.144037][T18519] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 829.171951][T18519] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 829.181745][T18519] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 829.225603][T18486] usb 5-1: Using ep0 maxpacket: 16 [ 829.233987][T18486] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 829.244780][T18519] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 829.251251][T18486] usb 5-1: config 0 has no interface number 0 [ 829.275386][T18486] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 829.289295][T18519] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 829.311120][T18486] usb 5-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 829.322616][T18519] usb 1-1: Product: syz [ 829.336062][T18486] usb 5-1: Product: syz [ 829.336744][T18519] usb 1-1: Manufacturer: syz [ 829.345172][T18486] usb 5-1: Manufacturer: syz [ 829.345697][T18519] usb 1-1: SerialNumber: syz [ 829.358769][T18486] usb 5-1: SerialNumber: syz [ 829.392113][T18519] usb 1-1: config 0 descriptor?? [ 829.397229][T18486] usb 5-1: config 0 descriptor?? [ 829.429161][T18486] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 829.479219][T18486] snd-usb-audio 5-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 829.615830][T18519] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 829.639802][T18519] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 829.647009][T18486] usb 5-1: USB disconnect, device number 29 [ 829.663532][ T5970] udevd[5970]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 829.817901][T18519] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 829.840921][T18519] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 829.874735][T18519] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 830.050417][T18519] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 831.011967][ T9711] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 831.172194][ T9711] usb 5-1: Using ep0 maxpacket: 32 [ 831.179846][ T9711] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 831.188416][ T9711] usb 5-1: config 0 has no interface number 0 [ 831.194863][ T9711] usb 5-1: config 0 interface 12 has no altsetting 0 [ 831.215711][ T9711] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 831.225067][ T9711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.241084][ T9711] usb 5-1: Product: syz [ 831.255217][ T9711] usb 5-1: Manufacturer: syz [ 831.260011][ T9711] usb 5-1: SerialNumber: syz [ 831.279506][ T9711] usb 5-1: config 0 descriptor?? [ 831.332860][T18746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.342470][T18746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.357766][T18519] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 831.374354][T18519] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 831.393558][T18519] usb 1-1: USB disconnect, device number 122 [ 831.505219][T18789] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.4023'. [ 831.532971][T18789] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 831.966845][T18801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4027'. [ 832.816219][T18813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.825575][T18813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.111912][T17760] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 833.412619][T17760] usb 1-1: Using ep0 maxpacket: 16 [ 833.686020][T18812] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4028'. [ 833.701951][T18823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4031'. [ 834.635133][T18833] tipc: Started in network mode [ 834.672238][T18833] tipc: Node identity 9ee49e8e095a, cluster identity 4711 [ 834.701716][T18833] tipc: Enabled bearer , priority 0 [ 834.744998][T18836] syzkaller0: entered promiscuous mode [ 834.772593][T18836] syzkaller0: entered allmulticast mode [ 834.814109][T18832] tipc: Resetting bearer [ 834.859250][T18832] tipc: Disabling bearer [ 834.915083][ T9711] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 834.958967][ T9711] f81534 5-1:0.12: f81534_find_config_idx: read failed: -32 [ 834.995614][ T9711] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 835.030992][ T9711] f81534 5-1:0.12: probe with driver f81534 failed with error -32 [ 835.151562][T17760] usb 1-1: unable to get BOS descriptor or descriptor too short [ 835.207573][T17760] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 835.264330][T17760] usb 1-1: can't read configurations, error -71 [ 835.798455][T18485] usb 5-1: USB disconnect, device number 30 [ 835.856694][T18852] pim6reg: entered allmulticast mode [ 835.971034][T18859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4041'. [ 835.990908][T18859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4041'. [ 836.343384][T14340] Bluetooth: hci2: command 0x0406 tx timeout [ 836.491913][T17760] usb 1-1: new low-speed USB device number 124 using dummy_hcd [ 836.622017][T17760] usb 1-1: device descriptor read/64, error -71 [ 836.721358][T18845] pim6reg: left allmulticast mode [ 836.734993][T17760] usb usb1-port1: attempt power cycle [ 837.094730][T17760] usb 1-1: new low-speed USB device number 125 using dummy_hcd [ 837.122619][T17760] usb 1-1: device descriptor read/8, error -71 [ 837.372050][T17760] usb 1-1: new low-speed USB device number 126 using dummy_hcd [ 837.424046][T17760] usb 1-1: device descriptor read/8, error -71 [ 837.504407][T18888] 8021q: VLANs not supported on vcan0 [ 837.542226][T17760] usb usb1-port1: unable to enumerate USB device [ 837.642038][ T9711] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 837.837211][ T9711] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 837.848801][ T9711] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.860857][ T9711] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 837.874169][ T9711] usb 2-1: config 1 has no interface number 1 [ 837.887524][ T9711] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 837.914408][ T9711] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 837.928475][ T9711] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 29797, setting to 64 [ 837.947654][ T9711] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 837.957964][ T9711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.972499][ T9711] usb 2-1: Product: syz [ 837.977403][ T9711] usb 2-1: Manufacturer: syz [ 837.987648][ T9711] usb 2-1: SerialNumber: syz [ 838.228824][ T9711] usb 2-1: USB disconnect, device number 28 [ 838.327671][ T5970] udevd[5970]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 838.578275][T18900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4053'. [ 838.593028][T18900] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4053'. [ 839.132180][ T9711] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 839.237203][T18917] binder: BINDER_SET_CONTEXT_MGR already set [ 839.243983][T18917] binder: 18913:18917 ioctl 4018620d 2000000000c0 returned -16 [ 839.311989][ T9711] usb 6-1: Using ep0 maxpacket: 16 [ 839.325897][ T9711] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 839.326935][T18917] binder: BINDER_SET_CONTEXT_MGR already set [ 839.345049][T18917] binder: 18913:18917 ioctl 4018620d 200000000040 returned -16 [ 839.371966][ T9711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.400574][ T9711] usb 6-1: Product: syz [ 839.411743][ T9711] usb 6-1: Manufacturer: syz [ 839.448962][ T9711] usb 6-1: SerialNumber: syz [ 839.458306][ T9711] r8152-cfgselector 6-1: Unknown version 0x0000 [ 839.471963][ T9711] r8152-cfgselector 6-1: config 0 descriptor?? [ 839.592213][T17760] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 839.753811][T17760] usb 2-1: Using ep0 maxpacket: 16 [ 839.761239][T17760] usb 2-1: config 3 has an invalid interface number: 155 but max is 0 [ 839.771918][T17760] usb 2-1: config 3 has an invalid interface association descriptor of length 3, skipping [ 839.801968][T17760] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 839.831884][T17760] usb 2-1: config 3 has no interface number 0 [ 839.848420][T17760] usb 2-1: config 3 interface 155 has no altsetting 0 [ 839.913207][ T9711] r8152-cfgselector 6-1: Unknown version 0x0000 [ 839.922134][ T9711] r8152-cfgselector 6-1: bad CDC descriptors [ 839.942957][ T9711] r8152-cfgselector 6-1: USB disconnect, device number 13 [ 839.992198][T17760] usb 2-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 840.084582][T17760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.108461][T17760] usb 2-1: Product: syz [ 840.115122][T17760] usb 2-1: Manufacturer: syz [ 840.122358][T17760] usb 2-1: SerialNumber: syz [ 840.347619][T17760] usb 2-1: Found UVC 0.00 device syz (05a9:264a) [ 840.354378][T17760] usb 2-1: No valid video chain found. [ 840.378573][T17760] usb 2-1: USB disconnect, device number 29 [ 840.610279][T18941] delete_channel: no stack [ 840.996435][ T30] audit: type=1326 audit(1749249629.713:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18947 comm="syz.1.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e858e929 code=0x7ffc0000 [ 841.051992][T18485] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 841.071293][ T30] audit: type=1326 audit(1749249629.713:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18947 comm="syz.1.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e858e929 code=0x7ffc0000 [ 841.075663][T18948] netlink: 'syz.1.4067': attribute type 1 has an invalid length. [ 841.181976][ T30] audit: type=1326 audit(1749249629.723:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18947 comm="syz.1.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f13e858e929 code=0x7ffc0000 [ 841.228826][T18948] bond1: entered promiscuous mode [ 841.234627][T18948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 841.265949][T18485] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.279676][T18485] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.33 [ 841.289068][T18485] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.297368][T18485] usb 6-1: Product: syz [ 841.301691][T18485] usb 6-1: Manufacturer: syz [ 841.306406][T18485] usb 6-1: SerialNumber: syz [ 841.359998][ T30] audit: type=1326 audit(1749249629.723:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18947 comm="syz.1.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e858e929 code=0x7ffc0000 [ 841.462247][ T30] audit: type=1326 audit(1749249629.723:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18947 comm="syz.1.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e858e929 code=0x7ffc0000 [ 841.507063][ T30] audit: type=1326 audit(1749249629.753:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18947 comm="syz.1.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f13e858e929 code=0x7ffc0000 [ 841.542995][ T30] audit: type=1326 audit(1749249629.753:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18947 comm="syz.1.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e858e929 code=0x7ffc0000 [ 841.570785][ T30] audit: type=1326 audit(1749249629.753:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18947 comm="syz.1.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e858e929 code=0x7ffc0000 [ 841.601297][ T30] audit: type=1326 audit(1749249629.753:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18947 comm="syz.1.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13e858e929 code=0x7ffc0000 [ 841.657907][ T30] audit: type=1326 audit(1749249629.753:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18947 comm="syz.1.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e858e929 code=0x7ffc0000 [ 842.146626][ T9711] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 842.325525][ T9711] usb 5-1: Using ep0 maxpacket: 16 [ 842.353556][T18485] cdc_ncm 6-1:1.0: bind() failure [ 842.391934][T17760] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 842.412948][T18965] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4071'. [ 842.452913][T18485] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 842.697492][T18485] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 842.708542][T18485] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 842.721743][T18485] usb 6-1: USB disconnect, device number 14 [ 842.785948][T17760] usb 1-1: config 0 has no interfaces? [ 842.796736][T17760] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 842.812207][T17760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.822243][T17760] usb 1-1: Product: syz [ 842.826490][T17760] usb 1-1: Manufacturer: syz [ 842.850094][T17760] usb 1-1: SerialNumber: syz [ 842.875902][T17760] usb 1-1: config 0 descriptor?? [ 843.329217][T18983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4075'. [ 843.777653][T16993] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 843.964318][T16993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.068510][T16993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.143659][T16993] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 844.276713][T16993] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 844.326626][T16993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.391990][T16993] usb 6-1: config 0 descriptor?? [ 844.811243][T16993] hid-udraw 0003:20D6:CB17.002B: item fetching failed at offset 3/7 [ 844.838382][T16993] hid-udraw 0003:20D6:CB17.002B: parse failed [ 844.851982][T16993] hid-udraw 0003:20D6:CB17.002B: probe with driver hid-udraw failed with error -22 [ 844.968127][T18970] misc userio: No port type given on /dev/userio [ 844.975457][T18970] misc userio: The device must be registered before sending interrupts [ 845.004579][T18519] usb 6-1: USB disconnect, device number 15 [ 845.405959][ T9711] usb 5-1: unable to get BOS descriptor or descriptor too short [ 845.450085][ T9711] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 845.485743][ T9711] usb 5-1: can't read configurations, error -71 [ 845.649392][T18996] binder: BINDER_SET_CONTEXT_MGR already set [ 845.671608][T18996] binder: 18995:18996 ioctl 4018620d 200000000040 returned -16 [ 845.720989][T18996] binder: 18995:18996 ioctl 8933 200000000180 returned -22 Stopping sshd: stopped /usr/sbin/sshd (pid 5601) OK [ 846.665203][ T9711] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 846.791598][T18519] usb 1-1: USB disconnect, device number 127 [ 846.851647][ T9711] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 846.916134][ T9711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 Stopping crond: [ 846.956518][ T9711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 847.008544][ T9711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 847.070920][ T9711] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 847.100691][ T9711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.150675][ T9711] usb 5-1: Product: syz [ 847.160807][ T9711] usb 5-1: Manufacturer: syz [ 847.196335][ T9711] usb 5-1: SerialNumber: syz stopped /usr/sbin/crond (pid 5579) [ 847.233009][ T9711] usb 5-1: config 0 descriptor?? OK [ 847.265713][ T9711] iguanair 5-1:0.0: probe with driver iguanair failed with error -12 [ 847.465810][T19016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.511676][T19016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.592995][T18519] usb 5-1: USB disconnect, device number 33 [ 847.918193][T19035] fuse: Unknown parameter '¸' Stopping dhcpcd... [ 847.956420][T19036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4087'. stopped /sbin/dhcpcd (pid 5501) [ 848.338095][T19053] trusted_key: encrypted_key: master key parameter is missing Stopping network[ 848.601973][T17760] usb 1-1: new low-speed USB device number 2 using dummy_hcd : [ 848.784480][T17760] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 848.806723][T17760] usb 1-1: config 0 has no interface number 0 [ 848.817760][T17760] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 848.850153][T17760] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 848.878313][T17760] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 848.901142][T17760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.945350][T17760] usb 1-1: config 0 descriptor?? [ 848.965687][T19051] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 848.999630][T17760] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 849.217240][T17760] usb 1-1: USB disconnect, device number 2 [ 849.234192][ T9711] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 849.236679][T19083] netlink: 'syz.1.4097': attribute type 21 has an invalid length. [ 849.251718][T19083] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4097'. [ 849.392008][ T9711] usb 5-1: device descriptor read/64, error -71 [ 849.663151][ T9711] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 849.728314][T19092] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4099'. [ 849.833976][ T9711] usb 5-1: device descriptor read/64, error -71 [ 849.981410][ T9711] usb usb5-port1: attempt power cycle OK [ 850.251956][T18500] usb 1-1: new high-speed USB device number 3 using dummy_hcd Stopping iptables: [ 850.332148][T18519] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 850.362475][ T9711] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 850.398062][ T9711] usb 5-1: device descriptor read/8, error -71 [ 850.434328][T18500] usb 1-1: Using ep0 maxpacket: 32 [ 850.455669][T18500] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 850.470705][T18500] usb 1-1: config 0 has no interface number 0 [ 850.488521][T18500] usb 1-1: config 0 interface 12 has no altsetting 0 [ 850.512270][T18500] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 850.518180][T18519] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 850.524295][T18500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.546385][T18519] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 850.546405][T18500] usb 1-1: Product: syz [ 850.546425][T18500] usb 1-1: Manufacturer: syz [ 850.579139][T18500] usb 1-1: SerialNumber: syz [ 850.592718][T18500] usb 1-1: config 0 descriptor?? [ 850.608094][T18519] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 850.637643][T18519] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 850.648702][T18519] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=1 [ 850.660676][T18519] usb 2-1: Manufacturer: syz [ 850.668048][T18519] usb 2-1: SerialNumber: syz [ 850.718610][ T9711] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 850.752872][ T9711] usb 5-1: device descriptor read/8, error -71 OK [ 850.862939][ T9711] usb usb5-port1: unable to enumerate USB device [ 850.886960][T18519] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 850.956545][T18519] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 851.102244][T18519] usb 2-1: USB disconnect, device number 30 Stopping system message bus: [ 851.521973][T19125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.530957][T19125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.740378][T19127] netlink: 'syz.1.4105': attribute type 1 has an invalid length. [ 851.876978][T19129] bond2: (slave veth3): Enslaving as an active interface with a down link [ 852.419581][T19144] FAULT_INJECTION: forcing a failure. [ 852.419581][T19144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.457029][T19144] CPU: 0 UID: 0 PID: 19144 Comm: syz.1.4109 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 852.457060][T19144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 852.457074][T19144] Call Trace: [ 852.457083][T19144] [ 852.457093][T19144] dump_stack_lvl+0x189/0x250 [ 852.457132][T19144] ? __pfx____ratelimit+0x10/0x10 [ 852.457161][T19144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 852.457194][T19144] ? __pfx__printk+0x10/0x10 [ 852.457217][T19144] ? __might_fault+0xb0/0x130 [ 852.457262][T19144] should_fail_ex+0x414/0x560 [ 852.457297][T19144] _copy_from_user+0x2d/0xb0 [ 852.457325][T19144] ___sys_sendmsg+0x158/0x2a0 [ 852.457353][T19144] ? __pfx____sys_sendmsg+0x10/0x10 [ 852.457413][T19144] ? __fget_files+0x2a/0x420 [ 852.457437][T19144] ? __fget_files+0x3a0/0x420 [ 852.457472][T19144] __x64_sys_sendmsg+0x19b/0x260 [ 852.457499][T19144] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 852.457532][T19144] ? __pfx_ksys_write+0x10/0x10 [ 852.457550][T19144] ? rcu_is_watching+0x15/0xb0 [ 852.457576][T19144] ? do_syscall_64+0xbe/0x3b0 [ 852.457610][T19144] do_syscall_64+0xfa/0x3b0 [ 852.457637][T19144] ? lockdep_hardirqs_on+0x9c/0x150 [ 852.457663][T19144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.457685][T19144] ? clear_bhb_loop+0x60/0xb0 [ 852.457711][T19144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.457732][T19144] RIP: 0033:0x7f13e858e929 [ 852.457751][T19144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 852.457770][T19144] RSP: 002b:00007f13e93fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.457794][T19144] RAX: ffffffffffffffda RBX: 00007f13e87b5fa0 RCX: 00007f13e858e929 [ 852.457810][T19144] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 852.457823][T19144] RBP: 00007f13e93fd090 R08: 0000000000000000 R09: 0000000000000000 [ 852.457837][T19144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.457850][T19144] R13: 0000000000000000 R14: 00007f13e87b5fa0 R15: 00007f13e88dfa28 [ 852.457883][T19144] done [ 853.109103][T19151] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4112'. [ 853.635706][T18500] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 853.650640][T18500] f81534 1-1:0.12: f81534_find_config_idx: read failed: -32 [ 853.684143][T18500] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 853.712527][T18500] f81534 1-1:0.12: probe with driver f81534 failed with error -32 [ 853.747569][T19168] xt_recent: Unsupported userspace flags (000000de) [ 854.402028][ T9711] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 854.512408][T18485] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 854.556472][ T9711] usb 5-1: Using ep0 maxpacket: 32 [ 854.600354][ T9711] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 854.705893][ T9711] usb 5-1: config 0 interface 0 has no altsetting 1 [ 854.724643][T18485] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 854.727634][ T9711] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 854.832120][T18485] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 854.862837][ T9711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 854.870921][ T9711] usb 5-1: SerialNumber: syz [ 854.883392][ T9711] usb 5-1: config 0 descriptor?? [ 854.888474][T18485] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 854.900134][ T9711] usb-storage 5-1:0.0: USB Mass Storage device detected [ 855.264360][T18485] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 855.277628][T18485] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 855.289361][T16993] usb 1-1: USB disconnect, device number 3 [ 855.307628][T18485] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 855.350964][ T9711] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 855.351887][T18485] usb 2-1: Product: syz [ 855.392016][T18485] usb 2-1: Manufacturer: syz [ 855.450931][T18485] cdc_wdm 2-1:1.0: skipping garbage [ 855.461850][T18485] cdc_wdm 2-1:1.0: skipping garbage [ 855.467207][T18485] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 855.546513][ T9711] usb 5-1: USB disconnect, device number 38 [ 855.655903][T18485] usb 2-1: USB disconnect, device number 31 [ 855.762107][T16993] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 855.923450][T16993] usb 1-1: Using ep0 maxpacket: 8 [ 855.950896][T19198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4119'. [ 855.986797][T16993] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 856.027638][T16993] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 856.165966][T16993] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 856.187942][T16993] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 856.206929][T16993] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 856.218842][T16993] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 856.230992][T16993] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 856.251966][T16993] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 856.272027][T16993] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 856.293481][T16993] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 Stopping klogd: [ 856.312141][T18485] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 856.335266][T16993] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 856.360736][T16993] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 856.379702][T16993] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 856.403251][T16993] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 856.417422][T16993] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 856.432662][T17760] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 856.472310][T16993] usb 1-1: string descriptor 0 read error: -22 [ 856.478673][T16993] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 856.493779][T18485] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 856.505977][T16993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.511875][T18485] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 856.535137][T18485] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 856.547674][T16993] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 856.562072][T18485] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 OK [ 856.586147][T18485] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 856.597245][T18485] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 856.607805][T17760] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.627686][T17760] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 856.636396][T19208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4123'. [ 856.638630][T18485] usb 2-1: Product: syz [ 856.652116][T18485] usb 2-1: Manufacturer: syz [ 856.659122][T17760] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 856.670017][T17760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.681502][T17760] usb 5-1: Product: syz [ 856.690543][T18485] cdc_wdm 2-1:1.0: skipping garbage [ 856.698407][T18485] cdc_wdm 2-1:1.0: skipping garbage [ 856.704936][T17760] usb 5-1: Manufacturer: syz [ 856.709767][T18485] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 856.719821][T17760] usb 5-1: SerialNumber: syz [ 856.743170][T17760] cdc_mbim 5-1:1.0: skipping garbage Stopping acpid: [ 856.943798][T19203] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 857.359249][T19203] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 857.381339][T19217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.398245][T17760] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 857.398742][T19217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.406218][T17760] cdc_mbim 5-1:1.0: cdc-wdm1: USB WDM device [ 857.568912][T17760] wwan wwan0: port wwan0mbim0 attached [ 857.595540][T17760] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 56:1f:57:bd:ca:fc [ 857.660384][T17760] usb 5-1: USB disconnect, device number 39 [ 857.682041][T16993] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 857.693018][T17760] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 857.788635][T17760] wwan wwan0: port wwan0mbim0 disconnected [ 857.822381][T16993] usb 6-1: device descriptor read/64, error -71 [ 857.883047][T19228] all: renamed from bridge_slave_0 (while UP) [ 857.963016][T18500] usb 2-1: USB disconnect, device number 32 OK [ 858.064898][T16993] usb 6-1: new high-speed USB device number 17 using dummy_hcd Stopping syslogd: [ 858.202259][T16993] usb 6-1: device descriptor read/64, error -71 [ 858.314153][T16993] usb usb6-port1: attempt power cycle stopped /sbin/syslogd (pid 5189) OK [ 858.483362][ T9711] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 858.676145][T18519] usb 1-1: USB disconnect, device number 4 [ 858.691959][T16993] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 858.713383][T16993] usb 6-1: device descriptor read/8, error -71 [ 858.725287][ T9711] usb 5-1: Using ep0 maxpacket: 32 [ 858.745638][ T9711] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 858.756409][ T9711] usb 5-1: config 0 has no interface number 0 [ 858.778771][ T9711] usb 5-1: config 0 interface 12 has no altsetting 0 [ 858.801197][ T9711] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 858.810861][ T9711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.827389][ T9711] usb 5-1: Product: syz [ 858.831963][ T9711] usb 5-1: Manufacturer: syz [ 858.836955][ T9711] usb 5-1: SerialNumber: syz [ 858.846008][ T9711] usb 5-1: config 0 descriptor?? [ 858.962109][T16993] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 859.002886][T16993] usb 6-1: device descriptor read/8, error -71 [ 859.116103][T16993] usb usb6-port1: unable to enumerate USB device [ 859.438812][T18485] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 859.463271][T19248] @0ÿ: renamed from bond_slave_0 (while UP) [ 859.643942][T18485] usb 2-1: Using ep0 maxpacket: 8 [ 859.691536][T18485] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 859.711765][T18485] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.731854][T18485] usb 2-1: Product: syz [ 859.804249][T18485] usb 2-1: Manufacturer: syz [ 859.841917][T18485] usb 2-1: SerialNumber: syz [ 859.900616][T18485] usb 2-1: config 0 descriptor?? [ 859.944788][T18485] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only [ 860.044875][T18485] usb 2-1: setting power ON [ 860.061908][T18485] dvb-usb: bulk message failed: -22 (2/0) [ 860.089175][T18485] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 860.104103][T19259] netlink: 26 bytes leftover after parsing attributes in process `syz.0.4134'. [ 860.146582][T19252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4133'. [ 860.157629][T19259] netlink: 26 bytes leftover after parsing attributes in process `syz.0.4134'. [ 860.176354][T18485] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only [ 860.624583][T18485] usb 2-1: media controller created The system is going down NOW! [ 860.713063][ T5207] udevd[5207]: could not touch /run/udev/queue: Read-only file system Sent SIGTERM to all processes Connection to 10.128.1.20 closed by remote host. [ 861.002376][T18485] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 861.121606][T18485] usb 2-1: selecting invalid altsetting 6 [ 861.143711][T18485] usb 2-1: digital interface selection failed (-22) [ 861.150506][T18485] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 861.172863][T18485] usb 2-1: setting power OFF [ 861.177681][T18485] dvb-usb: bulk message failed: -22 (2/0) [ 861.184858][T18485] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 861.272099][T18485] (NULL device *): no alternate interface [ 861.434831][T18485] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 861.532641][T18485] usb 2-1: USB disconnect, device number 33 [ 861.866289][ T9711] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 861.882009][ T9711] f81534 5-1:0.12: f81534_find_config_idx: read failed: -32 [ 861.889366][ T9711] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 861.976310][ T9711] f81534 5-1:0.12: probe with driver f81534 failed with error -32 Sent SIGKILL to all processes Requesting system poweroff [ 863.174606][T18500] usb 5-1: USB disconnect, device number 40 [ 863.257537][ T9722] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 863.343582][ T9722] dvb_usb_dibusb_mb 3-1:7.145: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 863.385929][ T9722] dvb-usb: found a 'AVerMedia AverTV DVBT USB1.1' in cold state, will try to load a firmware [ 863.455970][ T9722] usb 3-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 863.486633][ T9722] usb 3-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 863.545838][ T9722] ------------[ cut here ]------------ [ 863.551347][ T9722] WARNING: CPU: 1 PID: 9722 at drivers/base/firmware_loader/fallback.c:148 firmware_fallback_sysfs+0x746/0x9b0 [ 863.563327][ T9722] Modules linked in: [ 863.567881][ T9722] CPU: 1 UID: 0 PID: 9722 Comm: kworker/1:18 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 863.579756][ T9722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 863.589932][ T9722] Workqueue: usb_hub_wq hub_event [ 863.595203][ T9722] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 863.601489][ T9722] Code: c4 fb e9 5d fc ff ff e8 78 0f c4 fb c6 05 2a af 8e 09 01 48 c7 c7 a0 b9 09 8c e8 65 42 2b fb e9 85 fc ff ff e8 5b 0f c4 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 80 ba 09 8c 4c 89 e2 e8 95 0f 30 fb e9 [ 863.621204][ T9722] RSP: 0018:ffffc90011b26890 EFLAGS: 00010246 [ 863.627348][ T9722] RAX: ffffffff85fc4c75 RBX: dffffc0000000000 RCX: 0000000000100000 [ 863.635402][ T9722] RDX: ffffc90019503000 RSI: 00000000000fffff RDI: 0000000000100000 [ 863.643456][ T9722] RBP: 0000000000000001 R08: ffffffff8fa101f7 R09: 1ffffffff1f4203e [ 863.651669][ T9722] R10: dffffc0000000000 R11: fffffbfff1f4203f R12: ffffffff8c537800 [ 863.659773][ T9722] R13: 0000000000001770 R14: ffff88806a6ec0b0 R15: 00000000fffffff5 [ 863.667792][ T9722] FS: 0000000000000000(0000) GS:ffff888125d55000(0000) knlGS:0000000000000000 [ 863.676773][ T9722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 863.683389][ T9722] CR2: 0000200000404030 CR3: 000000000df38000 CR4: 00000000003526f0 [ 863.691372][ T9722] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 863.699415][ T9722] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 863.707464][ T9722] Call Trace: [ 863.710757][ T9722] [ 863.713785][ T9722] ? kmem_cache_free+0x18f/0x400 [ 863.718734][ T9722] ? _request_firmware+0x6be/0x15b0 [ 863.724012][ T9722] _request_firmware+0xf83/0x15b0 [ 863.729090][ T9722] ? preempt_schedule_thunk+0x16/0x30 [ 863.734538][ T9722] ? __pfx__request_firmware+0x10/0x10 [ 863.740013][ T9722] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 863.745657][ T9722] request_firmware+0x36/0x50 [ 863.750374][ T9722] dvb_usb_download_firmware+0xaf/0x260 [ 863.755993][ T9722] ? __pfx__printk+0x10/0x10 [ 863.760631][ T9722] ? __pfx_dvb_usb_download_firmware+0x10/0x10 [ 863.766957][ T9722] ? dvb_usb_device_init+0x14c/0x2580 [ 863.772435][ T9722] dvb_usb_device_init+0xdd2/0x2580 [ 863.777758][ T9722] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 863.783803][ T9722] ? lockdep_hardirqs_on+0x9c/0x150 [ 863.789019][ T9722] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 863.795003][ T9722] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 863.801345][ T9722] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 863.807030][ T9722] ? __update_runtime_status+0x1b3/0x390 [ 863.812722][ T9722] ? __pm_runtime_set_status+0x785/0xa50 [ 863.818370][ T9722] dibusb_probe+0x2d/0xf0 [ 863.822792][ T9722] usb_probe_interface+0x644/0xbc0 [ 863.827925][ T9722] ? __pfx_usb_probe_interface+0x10/0x10 [ 863.833636][ T9722] really_probe+0x26d/0x9a0 [ 863.838178][ T9722] __driver_probe_device+0x18c/0x2f0 [ 863.843503][ T9722] driver_probe_device+0x4f/0x430 [ 863.848568][ T9722] __device_attach_driver+0x2ce/0x530 [ 863.854041][ T9722] bus_for_each_drv+0x24e/0x2e0 [ 863.858933][ T9722] ? __pfx___device_attach_driver+0x10/0x10 [ 863.864945][ T9722] ? __pfx_bus_for_each_drv+0x10/0x10 [ 863.870373][ T9722] __device_attach+0x2b8/0x400 [ 863.875315][ T9722] ? __pfx___device_attach+0x10/0x10 [ 863.880655][ T9722] ? do_raw_spin_unlock+0x122/0x240 [ 863.885958][ T9722] bus_probe_device+0x185/0x260 [ 863.890839][ T9722] device_add+0x7b6/0xb50 [ 863.895235][ T9722] usb_set_configuration+0x1a87/0x20e0 [ 863.900736][ T9722] usb_generic_driver_probe+0x8d/0x150 [ 863.906351][ T9722] usb_probe_device+0x1c1/0x390 [ 863.911250][ T9722] ? __pfx_usb_probe_device+0x10/0x10 [ 863.916701][ T9722] really_probe+0x26d/0x9a0 [ 863.921241][ T9722] __driver_probe_device+0x18c/0x2f0 [ 863.926575][ T9722] driver_probe_device+0x4f/0x430 [ 863.931615][ T9722] __device_attach_driver+0x2ce/0x530 [ 863.937116][ T9722] bus_for_each_drv+0x24e/0x2e0 [ 863.942074][ T9722] ? __pfx___device_attach_driver+0x10/0x10 [ 863.948018][ T9722] ? __pfx_bus_for_each_drv+0x10/0x10 [ 863.953484][ T9722] __device_attach+0x2b8/0x400 [ 863.958283][ T9722] ? __pfx___device_attach+0x10/0x10 [ 863.963692][ T9722] ? do_raw_spin_unlock+0x122/0x240 [ 863.968915][ T9722] bus_probe_device+0x185/0x260 [ 863.973854][ T9722] device_add+0x7b6/0xb50 [ 863.978214][ T9722] usb_new_device+0xa39/0x16c0 [ 863.983048][ T9722] ? __pfx_usb_new_device+0x10/0x10 [ 863.988269][ T9722] ? _raw_spin_unlock_irq+0x23/0x50 [ 863.993509][ T9722] ? lockdep_hardirqs_on+0x9c/0x150 [ 863.998724][ T9722] hub_event+0x2941/0x4a00 [ 864.003227][ T9722] ? __pfx_hub_event+0x10/0x10 [ 864.007998][ T9722] ? process_scheduled_works+0x9ef/0x17b0 [ 864.013764][ T9722] ? _raw_spin_unlock_irq+0x23/0x50 [ 864.018980][ T9722] ? process_scheduled_works+0x9ef/0x17b0 [ 864.024787][ T9722] ? process_scheduled_works+0x9ef/0x17b0 [ 864.030526][ T9722] process_scheduled_works+0xae1/0x17b0 [ 864.036143][ T9722] ? __pfx_process_scheduled_works+0x10/0x10 [ 864.042181][ T9722] worker_thread+0x8a0/0xda0 [ 864.046822][ T9722] kthread+0x70e/0x8a0 [ 864.050903][ T9722] ? __pfx_worker_thread+0x10/0x10 [ 864.056041][ T9722] ? __pfx_kthread+0x10/0x10 [ 864.060643][ T9722] ? _raw_spin_unlock_irq+0x23/0x50 [ 864.065886][ T9722] ? lockdep_hardirqs_on+0x9c/0x150 [ 864.071101][ T9722] ? __pfx_kthread+0x10/0x10 [ 864.075744][ T9722] ret_from_fork+0x3f9/0x770 [ 864.080353][ T9722] ? __pfx_ret_from_fork+0x10/0x10 [ 864.085518][ T9722] ? __switch_to_asm+0x39/0x70 [ 864.090300][ T9722] ? __switch_to_asm+0x33/0x70 [ 864.095113][ T9722] ? __pfx_kthread+0x10/0x10 [ 864.099717][ T9722] ret_from_fork_asm+0x1a/0x30 [ 864.104536][ T9722] [ 864.107562][ T9722] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 864.114866][ T9722] CPU: 1 UID: 0 PID: 9722 Comm: kworker/1:18 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 864.126723][ T9722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 864.136789][ T9722] Workqueue: usb_hub_wq hub_event [ 864.141837][ T9722] Call Trace: [ 864.145245][ T9722] [ 864.148219][ T9722] dump_stack_lvl+0x99/0x250 [ 864.152835][ T9722] ? __asan_memcpy+0x40/0x70 [ 864.157445][ T9722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 864.162677][ T9722] ? __pfx__printk+0x10/0x10 [ 864.167290][ T9722] panic+0x2db/0x790 [ 864.171211][ T9722] ? __pfx_panic+0x10/0x10 [ 864.175654][ T9722] ? ret_from_fork_asm+0x1a/0x30 [ 864.180606][ T9722] __warn+0x31b/0x4b0 [ 864.184782][ T9722] ? firmware_fallback_sysfs+0x746/0x9b0 [ 864.190425][ T9722] ? firmware_fallback_sysfs+0x746/0x9b0 [ 864.196065][ T9722] report_bug+0x2be/0x4f0 [ 864.200418][ T9722] ? firmware_fallback_sysfs+0x746/0x9b0 [ 864.206087][ T9722] ? firmware_fallback_sysfs+0x746/0x9b0 [ 864.211728][ T9722] ? firmware_fallback_sysfs+0x748/0x9b0 [ 864.217380][ T9722] handle_bug+0x84/0x160 [ 864.221675][ T9722] exc_invalid_op+0x1a/0x50 [ 864.226197][ T9722] asm_exc_invalid_op+0x1a/0x20 [ 864.231051][ T9722] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 864.237308][ T9722] Code: c4 fb e9 5d fc ff ff e8 78 0f c4 fb c6 05 2a af 8e 09 01 48 c7 c7 a0 b9 09 8c e8 65 42 2b fb e9 85 fc ff ff e8 5b 0f c4 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 80 ba 09 8c 4c 89 e2 e8 95 0f 30 fb e9 [ 864.256923][ T9722] RSP: 0018:ffffc90011b26890 EFLAGS: 00010246 [ 864.263003][ T9722] RAX: ffffffff85fc4c75 RBX: dffffc0000000000 RCX: 0000000000100000 [ 864.271029][ T9722] RDX: ffffc90019503000 RSI: 00000000000fffff RDI: 0000000000100000 [ 864.279010][ T9722] RBP: 0000000000000001 R08: ffffffff8fa101f7 R09: 1ffffffff1f4203e [ 864.286992][ T9722] R10: dffffc0000000000 R11: fffffbfff1f4203f R12: ffffffff8c537800 [ 864.294973][ T9722] R13: 0000000000001770 R14: ffff88806a6ec0b0 R15: 00000000fffffff5 [ 864.302959][ T9722] ? firmware_fallback_sysfs+0x745/0x9b0 [ 864.308612][ T9722] ? kmem_cache_free+0x18f/0x400 [ 864.313558][ T9722] ? _request_firmware+0x6be/0x15b0 [ 864.318793][ T9722] _request_firmware+0xf83/0x15b0 [ 864.323853][ T9722] ? preempt_schedule_thunk+0x16/0x30 [ 864.329256][ T9722] ? __pfx__request_firmware+0x10/0x10 [ 864.334732][ T9722] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 864.340297][ T9722] request_firmware+0x36/0x50 [ 864.344992][ T9722] dvb_usb_download_firmware+0xaf/0x260 [ 864.350633][ T9722] ? __pfx__printk+0x10/0x10 [ 864.355230][ T9722] ? __pfx_dvb_usb_download_firmware+0x10/0x10 [ 864.361391][ T9722] ? dvb_usb_device_init+0x14c/0x2580 [ 864.366775][ T9722] dvb_usb_device_init+0xdd2/0x2580 [ 864.372090][ T9722] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 864.377991][ T9722] ? lockdep_hardirqs_on+0x9c/0x150 [ 864.383204][ T9722] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 864.389126][ T9722] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 864.395463][ T9722] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 864.401125][ T9722] ? __update_runtime_status+0x1b3/0x390 [ 864.406766][ T9722] ? __pm_runtime_set_status+0x785/0xa50 [ 864.412412][ T9722] dibusb_probe+0x2d/0xf0 [ 864.416751][ T9722] usb_probe_interface+0x644/0xbc0 [ 864.421892][ T9722] ? __pfx_usb_probe_interface+0x10/0x10 [ 864.427555][ T9722] really_probe+0x26d/0x9a0 [ 864.432077][ T9722] __driver_probe_device+0x18c/0x2f0 [ 864.437373][ T9722] driver_probe_device+0x4f/0x430 [ 864.442410][ T9722] __device_attach_driver+0x2ce/0x530 [ 864.447791][ T9722] bus_for_each_drv+0x24e/0x2e0 [ 864.452675][ T9722] ? __pfx___device_attach_driver+0x10/0x10 [ 864.458758][ T9722] ? __pfx_bus_for_each_drv+0x10/0x10 [ 864.464154][ T9722] __device_attach+0x2b8/0x400 [ 864.468931][ T9722] ? __pfx___device_attach+0x10/0x10 [ 864.474312][ T9722] ? do_raw_spin_unlock+0x122/0x240 [ 864.479541][ T9722] bus_probe_device+0x185/0x260 [ 864.484413][ T9722] device_add+0x7b6/0xb50 [ 864.488765][ T9722] usb_set_configuration+0x1a87/0x20e0 [ 864.494257][ T9722] usb_generic_driver_probe+0x8d/0x150 [ 864.499725][ T9722] usb_probe_device+0x1c1/0x390 [ 864.504589][ T9722] ? __pfx_usb_probe_device+0x10/0x10 [ 864.509971][ T9722] really_probe+0x26d/0x9a0 [ 864.514507][ T9722] __driver_probe_device+0x18c/0x2f0 [ 864.519804][ T9722] driver_probe_device+0x4f/0x430 [ 864.524858][ T9722] __device_attach_driver+0x2ce/0x530 [ 864.530278][ T9722] bus_for_each_drv+0x24e/0x2e0 [ 864.535161][ T9722] ? __pfx___device_attach_driver+0x10/0x10 [ 864.541073][ T9722] ? __pfx_bus_for_each_drv+0x10/0x10 [ 864.546473][ T9722] __device_attach+0x2b8/0x400 [ 864.551252][ T9722] ? __pfx___device_attach+0x10/0x10 [ 864.556546][ T9722] ? do_raw_spin_unlock+0x122/0x240 [ 864.561756][ T9722] bus_probe_device+0x185/0x260 [ 864.566636][ T9722] device_add+0x7b6/0xb50 [ 864.570996][ T9722] usb_new_device+0xa39/0x16c0 [ 864.575805][ T9722] ? __pfx_usb_new_device+0x10/0x10 [ 864.581028][ T9722] ? _raw_spin_unlock_irq+0x23/0x50 [ 864.586328][ T9722] ? lockdep_hardirqs_on+0x9c/0x150 [ 864.591543][ T9722] hub_event+0x2941/0x4a00 [ 864.596005][ T9722] ? __pfx_hub_event+0x10/0x10 [ 864.600776][ T9722] ? process_scheduled_works+0x9ef/0x17b0 [ 864.606513][ T9722] ? _raw_spin_unlock_irq+0x23/0x50 [ 864.611717][ T9722] ? process_scheduled_works+0x9ef/0x17b0 [ 864.617450][ T9722] ? process_scheduled_works+0x9ef/0x17b0 [ 864.623188][ T9722] process_scheduled_works+0xae1/0x17b0 [ 864.628779][ T9722] ? __pfx_process_scheduled_works+0x10/0x10 [ 864.634790][ T9722] worker_thread+0x8a0/0xda0 [ 864.639403][ T9722] kthread+0x70e/0x8a0 [ 864.643479][ T9722] ? __pfx_worker_thread+0x10/0x10 [ 864.648589][ T9722] ? __pfx_kthread+0x10/0x10 [ 864.653187][ T9722] ? _raw_spin_unlock_irq+0x23/0x50 [ 864.658394][ T9722] ? lockdep_hardirqs_on+0x9c/0x150 [ 864.663611][ T9722] ? __pfx_kthread+0x10/0x10 [ 864.668205][ T9722] ret_from_fork+0x3f9/0x770 [ 864.672808][ T9722] ? __pfx_ret_from_fork+0x10/0x10 [ 864.677933][ T9722] ? __switch_to_asm+0x39/0x70 [ 864.682713][ T9722] ? __switch_to_asm+0x33/0x70 [ 864.687484][ T9722] ? __pfx_kthread+0x10/0x10 [ 864.692084][ T9722] ret_from_fork_asm+0x1a/0x30 [ 864.696865][ T9722] [ 864.700040][ T9722] Kernel Offset: disabled [ 864.704377][ T9722] Rebooting in 86400 seconds..