last executing test programs: 1m25.708860066s ago: executing program 1 (id=4183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000004000000000000feffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000011400007b8af8ff00000000bfa200000000000007020000ddffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 1m25.423890541s ago: executing program 1 (id=4186): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xeaffffff}, 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 1m25.22562616s ago: executing program 1 (id=4187): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffebe}]) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x44000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x470, 0x0, 0x328, 0x328, 0x1f8, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0x4], 0x5, 0x21, 0x2}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x82}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xfffffff7, 0x5, 0x3}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x2, 0x5}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x2], 0x1}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23]}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xcb, 0x9}}}, {{@uncond, 0x0, 0x200, 0x240, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@dev={0xfe, 0x80, '\x00', 0x25}, [0xff000000, 0xff, 0x0, 0xff000000], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xff, 0xffffff, 0xffffff00], 0x4d5, 0x3503, 0x6c, 0x1, 0x1, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff, 0xff000000, 0xff], 0x4d3, 0x0, 0x89, 0x1, 0xc, 0x2f}, {@ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0xff, 0xff, 0xffffff00], @ipv4=@local, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], 0x4d6, 0x3502, 0x2f, 0x0, 0x5}, {@ipv6=@rand_addr=' \x01\x00', [0xffffffff, 0xff, 0xffffffff], @ipv6=@empty, [0xff000000, 0x0, 0xff000000, 0xff000000], 0x4d3, 0x0, 0x21, 0x1, 0x4, 0x2}], 0x5, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@loopback, 0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) close_range(r2, r2, 0x0) 1m24.517321304s ago: executing program 1 (id=4190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x48e80, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000680)={'#! ', './file0', [{0x20, '#! '}], 0xa, "0a01e97940cf3aecc9c99a51d8190d57064219f393469b0c8148dfc7530ec2c4437da2f2c6f3f2400a837a4fb07e6457842cb9acbb98dbb34a1569b77913b0f3f32d740907c59c17d9ae1f282aa449f352717d5dd2d9621aa55898303ba0dc835a8006c417db560d22c08a78df5bf4573016a931611d7cbecbfd908569ffbe77f6ef13916e2d91df774613dffca28cad4ef7eda41c31815bf805073e2469474df9cbdb6c1d01c1cff34b38fbbdaa302851d9e8f410e324facf4e9290d02278294e29bd55c7f9931893e875f3d9e3dfc1660edf5c600467b9271273431eff1aa104fe51d334ed12c1fee905bf875237c7e0c292f9e6df51a446795fc2b7828da74baf02c076502577d01099db5f5f50719b479f398a3aea1a3b80eaad23b574b695b1a37102e5ca0ac96fe098e4818c5ad0834080efb30dfb162512fe359b86052adb6f5a12e7882863c55d366d05aae187446ff85761f061ab0f161cb43ad96fee7d2de9ee471b72d758a5b6f8ff6c40684f649fe08a10f2b9b47f247837d61f54ee17adaa6be90858432fe16504fcbb09c5bb5c60d6062fec83727a8a3d8a252509beb87794448cab09bb0577291afe46ce341823de4f8c81f985c2a597cd187e19ab7d840660f5500bc42a630dab5ec65b2e76753674f4c70caae52e601ab63ee6c9a66c6aecc1a9ecd288c5b94c132eb426"}, 0x202) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x1, 0x14, 0x1c, "7ee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff1000053000000000000000000000000b9a000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) (async) fallocate(r3, 0x3, 0x0, 0xffffffff000) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000440)='./file0\x00') pivot_root(&(0x7f0000000340)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0xc0}) (async) fdatasync(r1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) (async) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xc000, 0x0) 1m24.323473733s ago: executing program 1 (id=4192): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x344) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x8, 0x4, 0x4004, 0x1000, 0x4000ee, 0x0, 0x7fffffffffffb, 0x5, 0x10000000000000, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x347255}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0x3, 0x20000000000080, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000006, 0x2, 0x1fd, 0x8, 0x0, 0xf7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x9, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0xff, 0x100, 0x8000000000000001, 0xfffffffffffffff9, 0x3, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x9, 0x7fffffffffffffff, 0x6, 0xfffffffffffffffb, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8d, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x2, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0x3, 0x80000000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x8, 0xae, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x8, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES8=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000006000/0x3000)=nil) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1m23.556090039s ago: executing program 1 (id=4196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000004000000000000feffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000011500007b8af8ff00000000bfa200000000000007020000ddffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 1m22.277016782s ago: executing program 32 (id=4196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000004000000000000feffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000011500007b8af8ff00000000bfa200000000000007020000ddffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 1m2.608624026s ago: executing program 2 (id=4272): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069fa6b079a848a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x20000) 1m1.658168854s ago: executing program 2 (id=4275): syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000034c0)={0x2020}, 0xcac) r2 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x249c, 0x932c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0x0, 0x168, 0xffffffff, 0xffffffff, 0x270, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) syz_usb_connect$cdc_ecm(0x1, 0x6b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x1, 0x81, 0x0, 0xda, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x9, 0x24, 0x6, 0x0, 0x0, "ee593729"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x29, 0x4, 0x7}, [@mbim={0xc, 0x24, 0x1b, 0xd3, 0x2, 0xc, 0xf8, 0x200, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x5, 0x51}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x3a, 0x3, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x1, 0x9}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x1, 0xe8, 0x8, 0x20, 0xfd}, 0x137, &(0x7f0000000140)={0x5, 0xf, 0x137, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0xff, 0xff0f, 0xffff, [0xff00cf, 0x30]}, @generic={0xff, 0x10, 0xa, "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"}, @ssp_cap={0x1c, 0x10, 0xa, 0xb, 0x4, 0x8, 0xf000, 0xfbff, [0xff0000, 0xf, 0x3f00, 0xc000]}, @ptm_cap={0x3}]}, 0x6, [{0xfe, &(0x7f0000000280)=@string={0xfe, 0x3, "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"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x401}}, {0x14, &(0x7f00000003c0)=@string={0x14, 0x3, "d81f4489c88e72e94484704743cc7e29df70"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1809}}]}) 1m0.829731794s ago: executing program 2 (id=4279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) sendmmsg$unix(r3, &(0x7f00000bd000), 0x100, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f00001de000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="b8af05d10000000000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d90100000020207f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b877000f00d0", 0x4a}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x7, 0x5, 0x9, 0xfffffff9, 0xc34}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m0.213664951s ago: executing program 2 (id=4282): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000002200)=0xb0000) r2 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r2, &(0x7f0000001540)={0xa, 0x4e23, 0x10, @dev={0xfe, 0x80, '\x00', 0x17}, 0x40}, 0x1c) connect$inet6(r2, &(0x7f00000015c0)={0xa, 0x4e24, 0x9, @local, 0x9}, 0x1c) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, 0x0) r3 = creat(&(0x7f0000000c40)='./file0\x00', 0x100) r4 = getpid() prctl$PR_SCHED_CORE(0x53564d41, 0x0, r4, 0x5697fb8c14c50798, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) r5 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xa52, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd, 0x1e0, 0x97, "", [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x0, 0xbc, {0x9, 0x21, 0xfffd, 0x3, 0x1, {0x22, 0x4d7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xf0, 0x9c, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0x8, 0x3}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xfc, 0x5, 0x3f, 0x8, 0x8}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0xfe, 0x2, 0x0, 0xf000, 0x5, [0xff00cf, 0xc0]}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0xdbc, 0xf, 0x1, [0x0, 0x3f, 0x30, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "a0301754910b5f8f1b9d05f1e465e215"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0xc, 0xd, 0x6}]}, 0x3, [{0xa0, &(0x7f0000000200)=@string={0xa0, 0x3, "ec0e0833cf4dcf7260c9ca3d2db4af6279ed7da887e7d9cdd37731dc3479d46e9f20b201146b836e96812dbb3102dd1a03e8e4372137f17fd5e824276aeb77cd4b53988d541ea7a726364c1329ce27e9526d7da4d2b1e0a09a710e92f6ffb9627d4824a0851d080916aafb51796e1f8e10522be94372ad3a5ee9ee7574f01edd34fd24901dce797f374ef2d392acc4b4f35f8394d18cfac6f9ca556c0bd4"}}, {0xf4, &(0x7f00000002c0)=ANY=[@ANYBLOB="f403d6882411dfe4690636c1aebb3393abd8979d53b99fa7073698a212f3061ad358fe6521161757c46e793321da62a5a8ecf67b08f570de9f6ac4560b743b13c68eb3cfdc9cfe5bd64a8fb79c37b707f79727827ebe3f4c224e325db27a89de7839e3bc8f685ea939d12889f81b649fbec52f6e7e8e17f6f0c748ebe4c2f014d1108ac94b1015b1f228e375d80a2a49344ba99952f8f0c2b5e6ebfb22d94421fbf15dae695f4df1f0ac3efe911875894cfb511f26dc616353d85369ea63ea7f3a7b183516be6ff9e1c544530923589bcb373f51824c61670405f0ef784989dab8eb09b662f99a62e6d7"]}, {0xd9, &(0x7f00000003c0)=@string={0xd9, 0x3, "cb8ae380a723402063bf948ef0edb3c132b2be68d141e509a29dd48c252c443acce982f1942d7d55e4f66ce9dbda7250157da0a01cf42a3377c93bb64323a05a1df7649db8c5473fb76da68b1230d6021f6a4dfed39a7b892757dfd3293a8f9e969cb5f2a0ff74c24cd7a1bba88ef03baab72e4e86aa5d11249af72880472a9768ce56d7c9f9ecc0a70eafa56c88fb26d70782c7e2f836f39fd57dfe40551755ae6d071c9394d3898697b2fe85e7a453a47e5907198e19d708bffb54d233d3fa3e7b414a912e8ee7602759acaf33c5381d3328919e2f9d"}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000640)={0x24, &(0x7f0000000500)={0x20, 0xa, 0x54, {0x54, 0x21, "729b711c347b8bb8d3eef29a991bd15466adb0ec4f8ac9cc0b40adf7127108e82f20f0179e0c4fce0c938ee164673fd08d4d324044b4688aa46252c73e5aaa2e365be5c83bfc60b3bb8da80fe0af5b8815d0"}}, &(0x7f0000000580)={0x0, 0x3, 0x35, @string={0x35, 0x3, "3bd15e319c5a5885bda2d8a910caf6497d793b9f3b0278180df7cfcc74d659d3c22bc785fddf03e5081ff8a5cd5d63add31266"}}, &(0x7f00000005c0)={0x0, 0x22, 0x26, {[@global=@item_4={0x3, 0x1, 0x2, "9cc7b9cb"}, @main=@item_4={0x3, 0x0, 0xa, "08466ec0"}, @global=@item_4={0x3, 0x1, 0x2, "3b649825"}, @main=@item_012={0x1, 0x0, 0x9, "be"}, @main=@item_4={0x3, 0x0, 0x9, "550744d7"}, @local=@item_012={0x2, 0x2, 0x85adb21987a94fb7, "387f"}, @global=@item_4={0x3, 0x1, 0x9, "5c5df25a"}, @main=@item_012={0x2, 0x0, 0x8, "509c"}, @main=@item_4={0x3, 0x0, 0xc, "b9664016"}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0xb33}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x9, 0x8e, "0b7e92653ec962d9d7c51e2b66895976c4e03c980b54011e47cbe642aa4c5043e80515e1575699e07fa0caf5e59e28a55faf1e25d32e5115b54bbd71efa1a942953350dcf95ae24753859430e34e869be07f776d628c90711a8a9eddfb33c9f265cbce29828adda89bb8cbce655a8905302943ece227bff2912b29f65d1c5085d42c5ec583f3a29890f1ed4301af"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x74}, &(0x7f00000007c0)={0x20, 0x1, 0x1a, "2e3e84037331b167d223bcc58a79f679d95d6582972f19486eec"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0x7}}) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2091400, 0x0) 59.2735314s ago: executing program 2 (id=4289): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x40009, 0x0) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 58.656243419s ago: executing program 2 (id=4294): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xfffffffe, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xcc}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3fea}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000011) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x0) 57.88815116s ago: executing program 33 (id=4294): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0xfffffffe, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xcc}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3fea}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000011) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x0) 9.929583751s ago: executing program 6 (id=4502): mknod(0x0, 0x8001420, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000004c0)={r2, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000280)={r5, 0x0, 0x8001, 0x0, 0x0, [], [0x0, 0x0, 0x1, 0x2], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) unshare(0x6a040000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) close_range(r6, 0xffffffffffffffff, 0x0) 8.947799214s ago: executing program 6 (id=4514): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000840)={0x1, 0x5, 0x2, &(0x7f0000000640)={0x8, "ab7f4be23f8b5ef1a4dfba6d60e25f71e0a28ec43f69e69da6f9fee09e0cd5e20d"}}) 5.702174822s ago: executing program 6 (id=4553): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) 4.677684259s ago: executing program 6 (id=4565): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.49577996s ago: executing program 6 (id=4567): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e37e1b"], 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 3.379698598s ago: executing program 5 (id=4577): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$link(0x8, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0x8b, 0x100000500) r1 = add_key$keyring(0x0, &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400), 0x0, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x9, 0x6b7, 0x80, 0x7fc, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x700) 2.381213294s ago: executing program 5 (id=4585): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) sendmsg$sock(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000a40)="1873c77bb709", 0x6}], 0x1}, 0x880) sendmsg$inet6(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)="7f", 0x1}], 0x1}, 0x4040851) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2.230311254s ago: executing program 5 (id=4587): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x3b, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2d, 0xfffe, 0x0, 0x80, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x2, 0x0, 0x1000}, {"896cbcd670"}}}}}}, 0x0) 2.197167583s ago: executing program 3 (id=4588): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xd4, 0x0, 0xf}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.067630798s ago: executing program 5 (id=4589): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f00000d8000/0x1000)=nil, 0x1000, 0x9) 1.885592636s ago: executing program 3 (id=4591): openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0xc0082, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@fallback=r0, r0, 0x2f, 0x2024, 0x4}, 0x20) 1.839184382s ago: executing program 3 (id=4592): openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="c0c2b45dbd24", 0x6}, {&(0x7f0000000040)="a43b2eaab4feffffff0088a89ce06b7e", 0x10}, {&(0x7f0000000140)="1e06", 0x2}], 0x3) 1.764256471s ago: executing program 3 (id=4593): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1.629573646s ago: executing program 3 (id=4595): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0) syz_usb_connect(0x0, 0xa54, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x5a, 0x75, 0xf5, 0x40, 0x12d1, 0x8a26, 0xd53f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa42, 0x3, 0x8, 0x6, 0xc0, 0x0, "", [{{0x9, 0x4, 0x6e, 0xa6, 0x7, 0xff, 0x1, 0x3d, 0xb, [], [{{0x9, 0x5, 0x5, 0x2, 0x200, 0x1, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x5}, @generic={0x4b, 0xd, "77fa2e08067a21855a555f342f702a7227801bc9cfece2c5f1316abd0346d85e18f77f20d23b967867acdb83131bfbbfda3d251c2b51e5d0a8c80baadcf670cbf226b72d30253fd6da"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x7f7, 0x0, 0x5, 0x9, [@generic={0x6b, 0xc, "442d1a9ffb9b78ea807044c2be00b1bac44efabe73fac7f3aca38bd621b196dc349603209987d1f7d9795ebf191fb93acaceb38680df2d384ced04329bf98aed15b2dd491706915fd1a1af6c106f33f9b4e4d8a346286f696818c353ef90102c9885e31f7f5c055ea7"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0xffff}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0xff, 0x10, 0x6, [@generic={0x8c, 0x5, "7689209c6e35dd82c54a8f35e5e0a35fb75e14c519770458787a9a37feb8b10f03ab3fa51660190e585c1009758cdf75f778d0bc3bddc174ec45cde0922e089cb03bd30f4c5a45b27aabb716e1c82b6d6f3485d69e495f6cc7c61d1cbd76f6113337daefb9eaab8f91330a6732d33e2ca069a0fb1fd64026d335b22084e188ac3838a7cfe7c34a2a7f16"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x6, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf, 0xfffd}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x7, 0xd4, 0x9}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x40, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0xea}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x9}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0xb, 0x20, 0x0, [@generic={0x50, 0x6, "6d2d846340fbe898a92a210b9133437bca7024a22bd2dfb0b50d336165ef93a28f37cbe0bd9c3d90b28d899be3b573cd05a64f6c7030845e2424fc4832aba6fbcdb1f1c55b694db407c783135318"}]}}]}}, {{0x9, 0x4, 0x4, 0xac, 0xa, 0xe7, 0x13, 0x16, 0xd, [@generic={0x9b, 0xc, "b33d2661cccc5149ddd1e5c8c024d8f20d6016125dbbd54e533fa1d22f00033f3f593a5131cf455ce2f293f9d2fe99211900eb82cb665864ef4a4b3d5ab976dd877c8e7faa2f89db3f16259fd69fce700458dbab918d61215ecf46a4f8cae4b6ccfb9c9a50948142c7456f895174a35dbf28150f9d5aadf3ea41e1f08cb96c30fa571a0fbc92406063bbe26946204823beab4a21362f309c5f"}], [{{0x9, 0x5, 0x8, 0x0, 0x8, 0x8, 0xcc, 0xa4}}, {{0x9, 0x5, 0xa, 0x10, 0x3cf, 0x1, 0xe2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40}]}}, {{0x9, 0x5, 0x3, 0x4, 0x18, 0xf, 0x5, 0x2, [@generic={0x3b, 0x31, "844f84e5c8ec9272f900b709a70c72aa0ecbb51dc8a9573ae855a103826fae057c486dd4540dc7f2af21eab2f69264e6e9775a2864ed925153"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xff, 0x2}]}}, {{0x9, 0x5, 0x3, 0x2, 0x18, 0x4, 0x8, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x1cf, 0x2, 0x80, 0x8, [@generic={0x98, 0x1, "da840e4ce24d5229b6b5a39d3c5fcb56b215dbd9ad382dcab2d72beb527f63334e428b9dae72f795f51d37ba8e87418172c4948a661c3d0c89790908e59d0c806a618dfe98f2d6e8f6a4eb2f1a767e334e0c41f13054419abccf8903acb5d0553649b25e00d679416bd932ed9d39ec8f6fa5c512576a66d98a60b69c137eaebc3486ece6a660ffe9e46e2ed1f721117b6e94bf016bc8"}, @generic={0xf3, 0x22, "897a00f00c281494e4c98a43c63c3387d82abea377d80e9af36ff1f6c01808d283832ee4ae2a6218a80393fe7b62ea074c2d4071ae54be8beccc732fd31a21f65ddf8be150329ca3b72417723f9dd80a029280ee23f25e817e3ee821db842fc076df887e3c89455d03cefcb95b87d5f5b5fe3597164eac46083493fcd6ebc0fb0b1578e9440c760d19a741cdb647b4d1c7130701d9c424f55a51ea2cb24cfe07f76135b46c93f2881acdc73d511bbb68ac78ecb2880c6530edde9b5cbba8840915336d174d3b06bd2fa09d1c456fc01089edf1044e20e8674632382a7f2085f48aa592c7c86585f3cf3db7c066a3f386b5"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x0, 0xf, 0x1d, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x3}, @generic={0x3d, 0xd, "ffc27636d07bdabe16394f2de58857090f47e9373f141420ef939907b51d51b25da72e4286e4ef31dea691d8c45bcceb4f66871cc977743a12a0db"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x41, 0xf, 0xb, [@generic={0x62, 0x1, "c9f0c5da5ad8496489f4547f941bfaeff34eaab665a2781e93fdf2542ab7cbfeb39ac87fd8431106df56e094466fe2e34c799e8f87fdfafe6b5ab85aa3943efaf8084f60c84949f0fa743388e278c90797ef2443d7307da1fd93dffd3b5070e4"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x8, 0xfe, 0x64, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xa, 0x14}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x5, 0x4, 0x1}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x9, 0x5, 0x2, [@generic={0x64, 0x23, "26bc8de60fb28b990ef5f43517b2eaaf76e7aa6b99c07f11658b4b9a73d584df7e8f0046a70c4cafe3a4a1f6ee2c5539ed111f8e913df8d0bf4ea5653b287c012cac7897065b97c8fe503c3753c66b7c147b303c4c92502d7411a70856809a4b3c59"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0xa}]}}]}}, {{0x9, 0x4, 0x97, 0x0, 0xd, 0x85, 0x98, 0x21, 0xfe, [], [{{0x9, 0x5, 0xb, 0x8, 0x10f, 0x3, 0xfa, 0xab}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x5, 0x5f, 0x4, [@generic={0xc5, 0x24, "d9c950ef688647f22d74905ba99271f3ede72b373df1e6e3104b7cddf0cc922cf8252e5d977288a6c31f8dad3955fc982925db5e34b42df6a3fdad95816092eebce1cc661d4dc56b5b36b5e2e16609b1ac25b2c506e70a55eff583eef7b8c1e681c65def0b62d2eb386b3a56a33ed644e2ba54c5877864e66de2b49275c47649f4a15fb78e1e30a4552658f4e0a0ce62d3e68148ef02407bc5a7c12df8ab1bc598766effcbc556cc4e341b80ce6d3d2217174abb8722f7c39f225e651f1ddac4f79d3f"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0xfb45}]}}, {{0x9, 0x5, 0x80, 0x0, 0x0, 0x3, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x2da}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x3}]}}, {{0x9, 0x5, 0xe, 0x4, 0x640, 0x0, 0x5, 0x2}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x3, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfe, 0x40}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x8, 0x7, 0xa, [@generic={0xec, 0x30, "184762f9b7f123668be43f7a13a4e7b364114936a94cc7758a66ceee9a471bd264801e5a5693c51ff4692634a9669f1843f7341e29525b6820afa25670a03074b2bae884647a04932b68539dcfed5703f16ad4dde2cb14329685c008918a377cb53b4c9e61e443960fc7e0a61b26dda4df58b1905cc572d1fb964f995067a344134f0996a8d44b6c733a7347bdf3ff41bfe7a2b75846e43f2da009559a3b62dc68331351a17c95b4e276e7ed713a0269b888cdef9825f8cbc8d6f982f04d79a424e6aa6052d6f377fa916f3e0f4bbf09a8e39a3d42410a988cd42ce084b59adac413d07b56bd8db20cf1"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x67, 0x7f}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0xd2, 0xb, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xa, 0x81}]}}, {{0x9, 0x5, 0x7, 0x43d12c18b7ba79a2, 0x0, 0x8, 0x72, 0x1e}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x6, 0x3, 0x6, [@generic={0x53, 0x7707fde80985ea62, "295e4704e2fc5b68f24a0e8ca21809b2df0475a810660bc9a261d29b3a6371147f446b403b3c18f58b697d98492eb0df7f74ae12cc3f7f356550adb7d7e2164e56e36f6edc7dd3267cefda348ec1969d8d"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x2, 0x6, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf3, 0xfa3b}, @generic={0x6c, 0xf, "7b0f535185140085a8bd6c445373b8fe12fcda4d9f790ddda595c1c842170dfd8031ac9b366145f2bc8150d90106cd20c611c42a01052f39f9af789c25b981405141d3095ad68e3a90094c202c41c7871dc6e75638ea951717611f1dfc3c2e7dcb23eafd65279adb5736"}]}}, {{0x9, 0x5, 0xc, 0x1d, 0x40, 0x4, 0x4, 0x62, [@generic={0x13, 0xe, "7ce8f57689b65670ad13a7100f56fba552"}]}}, {{0x9, 0x5, 0x8b, 0x10, 0x20, 0x9, 0x33, 0x42, [@generic={0x76, 0x11, "a88830ebd88c0d8224e2aa0dce22bd5f193fd3786edf03fca0162274cffb284cfbe5c6ce5df969ae3dc8e9c705d127a09882c797b411b24a8834622373d433b049a4daf7b278f6bc501d5931e9d23c6220400e4cec2617cbaf9d25c3983897c39bdaea4bd313906bb59fa3322569998b10b3dd8f"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0x5, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x8}, @generic={0x95, 0x21, "76fd07860dac2ac4158ea624a135c47be84e4154e04c63c1f1ff48d00b226377772d2107880b2a86452d1f2ee37ab2599f99638d1393b6cd225b0ee7c269b1dd9479b4dcdcdc5eb17b14e1d02894b21fbb62b1cfba65a15874b288a34c62d348daa9f5f33d43c3c4b8b11d3742b7170b42e7749062e4b1390cb6fcae4154ecb32a788ff057029092c5d97ff11ad879910e8783"}]}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x250, 0x6, 0x1, 0x7f, 0x40, 0x7f}, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="050ff4b50200000000000000ed14a114ecd1d501ff03b047da51f183754e011214852cb2"], 0x2, [{0xaf, &(0x7f0000000c00)=@string={0xaf, 0x3, "588588dc03d65578e1de4533e39366f57532060754a63aedf24b32558d7ad9205993ffaf6172dd88913fbc2232ce7049fe52ce6350d695d3679824b28779649946df429413f21b148e3d46249da3790796bc61e6037e94e8ca57fce23e49c30fec0868d027d3ec25c4d21abc058c41d95dff3019a207e554d21ab3566f8a34dc081ad413370f1553e3e9ac748363c380731df8c9c937ffcbc56f205a023d2eca39e10ba6ad058ae66105fd7c85"}}, {0xd1, &(0x7f0000000cc0)=@string={0xd1, 0x3, "fe19e7a8a85fef38d3d61deb3a8ae8d122ec72eed5d6af83cabc977aa86d3a05f13ba4c52282c1f15306788a363a9650defd3a11b9ad38ba1a65a4423ce14463b5eba1d84d1932d920b6e8b0fa5d8055e420405b927398330544983cbbbd2c0823aea09c0fed3c7cb8307eb6a6f6602ad1aa397910d37903fe0fe50e487c034237af53ccf45ce45092a253948e45548a74b599801c3a43a1238f57e2a2af29746a7cc5d251b908804ed030bb8a717d94c4e7f4afa959fd59fe2083730d3ef83b4abcb17337ae16c31aebc727f0b850"}}]}) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@dstopts_2292={{0xb8, 0x29, 0x4, {0x4, 0x13, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @generic={0x80, 0xe, "09e12e5f0b6bdcf72f2ec7008a15"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @pad1, @ra={0x5, 0x2, 0xbf4}, @generic={0x93, 0x6, "e80ee304ecb7"}]}}}, @hopopts_2292={{0x60, 0x29, 0x36, {0x3b, 0x8, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x6c, 0x8, [0x2, 0xfffffffffffffff7, 0x6, 0x6, 0x7]}}, @padn]}}}], 0x118}}], 0x1, 0x810) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r13 = accept4(r12, 0x0, 0x0, 0x800) sendmmsg$alg(r13, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 1.604832495s ago: executing program 0 (id=4596): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_usbip_server_init(0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 1.345816475s ago: executing program 6 (id=4598): syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000001c0)=0x8) read$watch_queue(r4, &(0x7f0000000000)=""/1, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x26) keyctl$revoke(0x3, r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x401374, &(0x7f0000000380)={0x0, 0x79b2, 0x800, 0x1, 0x285}, 0x0, 0x0, &(0x7f0000000000)) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.258073273s ago: executing program 4 (id=4599): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x17}, @remote}}}], 0x20}}], 0x1, 0x4000800) 966.040648ms ago: executing program 5 (id=4600): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff}, {0x4, 0x0, 0x40000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x4, 0x3}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000b80)={@multicast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x30, 0x2c, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@hopopts={0x29}], @ni={0x8c, 0x0, 0x0, 0x8, 0x4, 0x2, "6d2634cc62d045903c2b5ac3a6368a46130a35c3099a9573"}}}}}}, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000800)={0x10000, 0x5, 0xfec00000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x0) write$binfmt_script(r6, &(0x7f0000000600), 0xfec8) recvmmsg(r6, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r7 = syz_open_dev$evdev(&(0x7f00000002c0), 0x1000, 0x42) ioctl$EVIOCGMTSLOTS(r7, 0x8040450a, &(0x7f0000000b00)=""/118) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 904.799126ms ago: executing program 0 (id=4601): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000006580)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="4e1c5c", 0x3}], 0x1, 0x0, 0x0, 0x4000}], 0x1, 0xe803) 869.863653ms ago: executing program 4 (id=4602): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x40, r2, 0x1, 0x70bd65, 0x200000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0x4}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_IE={0x10, 0x2a, [@ibss={0x6, 0x2, 0xb}, @random_vendor={0xdd, 0x6, "2366c403e560"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4880}, 0x0) 687.111405ms ago: executing program 5 (id=4603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r2, 0x1, 0x70bd25, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x4008004) close(r0) r3 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#O\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xe5\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19c\x17\xecP\xbb\xd8\xef\xed\x97\xd8p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k0\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xeek\xab\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xc8\x80=\xd5\tU\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3;\xf5\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94VsR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6\x05\x00{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1C\x1f%\x04\x9a\xa0l\xa3}\xf2r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17\x00\x00\x00\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc5F\xc98Z\xe6\x00'/1140, 0xf) fcntl$addseals(r3, 0x409, 0xa) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x13, r3, 0x0) r4 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="000c0d0000003b4bd897f048653f554ba8e523"], 0x0, 0x0, 0x0, 0x0, 0x0}) 673.890808ms ago: executing program 0 (id=4604): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd00000080190000000000000000000000000000000000beda00", [0x8, 0xffffffff9673e35d]}}) 591.598531ms ago: executing program 4 (id=4605): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x40, 0x0, 0x1, 0x70bd65, 0x200000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0x4}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_IE={0x10, 0x2a, [@ibss={0x6, 0x2, 0xb}, @random_vendor={0xdd, 0x6, "2366c403e560"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4880}, 0x0) 381.447991ms ago: executing program 0 (id=4606): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 380.054617ms ago: executing program 4 (id=4607): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140), 0x4) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'tunl0\x00'}}, 0x1e) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 289.64466ms ago: executing program 4 (id=4608): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x5, 0x1007}, 0x4) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'tunl0\x00'}}, 0x1e) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x3e8, 0x0) 288.296168ms ago: executing program 0 (id=4609): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0xc4}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfa", 0x9c}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x0) write(r2, 0x0, 0x0) 137.760463ms ago: executing program 4 (id=4610): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2a, '\x00', r1, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xde, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0xa8, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x10, "9595f429ae08a565c9a41d413270a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0c"}]}}}}}}, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000552a5920240401c05faa0102030109021b0001000010000904"], 0x0) 49.219356ms ago: executing program 0 (id=4611): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_usbip_server_init(0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 0s ago: executing program 3 (id=4612): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4e00000010000000000000000000000000000000ca2379ad375e79d5b15676a1fe1533f63f74b4aa8387e46adc44f78416cd9d8ed7321b258cbbbcf2d6d46361f05c01dfec20b4047645e3106786c7469931edae24cb080cb2af0bb901e4ea63a476ed94fd666d2749cb42446ee742ff7f6e72f8bc6eb84e3007f6e4ea41ecce093f78e474efe57c83f0c542a5c5f1ab38b761a3d4a417e0ee250f24d60500edc35305be1c6dc608", @ANYRES32=0x0, @ANYBLOB="05160000740f0000240012800b00010067726574617000001400028006000e000300000008000700e000000108000a00", @ANYRES32=r8, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r7) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r9, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000c}], 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000900)=r10, 0x4) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r13, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) r14 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000104c054b020000006cf94be627d0d2ec0000000009040000090300ca00092108000b01222900091581030500000008"], 0x0) syz_usb_control_io$hid(r14, 0x0, 0x0) syz_usb_control_io$hid(r14, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r12, r13, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000040)="0f09f43662ab000000000f79d33e672e0f01c20f080f01df3ef27a00c4e231aceac4c2f5b8cd", 0x26}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r13, 0x4068aea3, &(0x7f00000002c0)={0xc7, 0x0, 0x1}) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000100)={0x9, 0x3, 0x6800, 0x400, 0x5, 0xa2, 0x4}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0xfffffffffffffddd, 0x24, 0xd0f, 0x70bd2f, 0x0, {0x60, 0x0, 0x0, r15, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x403, 0x8001, 0x1400}, 0xe5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) kernel console output (not intermixed with test programs): rface number: 132 but max is 0 [ 857.541299][ T807] usb 1-1: config 0 has no interface number 0 [ 857.560254][ T807] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 857.583733][ T807] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 857.585452][ T1223] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 857.592892][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.592916][ T807] usb 1-1: Product: syz [ 857.592931][ T807] usb 1-1: Manufacturer: syz [ 857.592947][ T807] usb 1-1: SerialNumber: syz [ 857.630537][ T807] usb 1-1: config 0 descriptor?? [ 857.640019][ T1223] usb 4-1: config 0 interface 0 has no altsetting 0 [ 857.657365][ T807] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 857.659158][ T1223] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 857.667558][ T807] em28xx 1-1:0.132: Video interface 132 found: [ 857.687404][ T1223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.696607][ T1223] usb 4-1: Product: syz [ 857.701125][ T1223] usb 4-1: Manufacturer: syz [ 857.706605][ T1223] usb 4-1: SerialNumber: syz [ 857.717835][ T1223] usb 4-1: config 0 descriptor?? [ 857.732820][ T1223] usb 4-1: selecting invalid altsetting 0 [ 857.802832][T24949] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 857.813693][T28026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.834904][T28026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.904937][ T807] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 857.974465][T24949] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 857.990658][T24949] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 858.008046][T24949] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 858.021215][T24949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.040321][T24949] usb 5-1: config 0 descriptor?? [ 858.063370][T24949] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 858.111359][T27986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4170'. [ 858.144875][ T807] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 858.168816][ T807] em28xx 1-1:0.132: board has no eeprom [ 858.318909][T24949] usb 4-1: USB disconnect, device number 124 [ 858.762386][ T807] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 858.770532][ T807] em28xx 1-1:0.132: analog set to bulk mode. [ 858.777444][T24949] em28xx 1-1:0.132: Registering V4L2 extension [ 858.796497][ T807] usb 1-1: USB disconnect, device number 100 [ 858.814381][ T807] em28xx 1-1:0.132: Disconnecting em28xx [ 859.112206][T24949] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 859.127724][T24949] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 859.144606][T24949] em28xx 1-1:0.132: No AC97 audio processor [ 859.161132][T24949] videodev: could not get a free minor [ 859.175341][T24949] em28xx 1-1:0.132: unable to register video device (error=-23). [ 859.192888][T24949] em28xx 1-1:0.132: Remote control support is not available for this card. [ 859.212195][ T807] em28xx 1-1:0.132: Closing input extension [ 859.304505][ T807] em28xx 1-1:0.132: Freeing device [ 859.426458][ T5726] usb 5-1: USB disconnect, device number 108 [ 859.721817][T28132] loop2: detected capacity change from 0 to 7 [ 859.734899][T28132] Dev loop2: unable to read RDB block 7 [ 859.741162][T28132] loop2: unable to read partition table [ 859.749848][T28132] loop2: partition table beyond EOD, truncated [ 859.766788][T28132] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 859.926522][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 859.926538][ T30] audit: type=1326 audit(1779268620.659:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28139 comm="syz.0.4182" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb04e39ce59 code=0x0 [ 859.966894][T28138] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 860.016901][T28138] 8021q: adding VLAN 0 to HW filter on device bond2 [ 860.026331][T22133] ip6_tnl_xmit_ctl: 9 callbacks suppressed [ 860.026346][T22133] ip6_tunnel: K xmit: Local address not yet configured! [ 860.472525][ T5726] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 860.635458][ T9] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 860.672657][ T5726] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 860.710533][ T5726] usb 1-1: config 0 interface 0 has no altsetting 0 [ 860.738164][ T5726] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 860.750586][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.760405][ T5726] usb 1-1: Product: syz [ 860.765349][ T5726] usb 1-1: Manufacturer: syz [ 860.770694][ T5726] usb 1-1: SerialNumber: syz [ 860.783217][ T9] usb 5-1: device descriptor read/64, error -71 [ 860.831542][ T5726] usb 1-1: config 0 descriptor?? [ 860.893582][ T5726] usb 1-1: selecting invalid altsetting 0 [ 861.043014][ T9] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 861.102491][T28153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4184'. [ 861.215997][ T9] usb 5-1: device descriptor read/64, error -71 [ 861.344776][ T9] usb usb5-port1: attempt power cycle [ 861.547764][ T807] usb 1-1: USB disconnect, device number 101 [ 861.714801][ T9] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 861.763753][ T9] usb 5-1: device descriptor read/8, error -71 [ 861.791489][T28236] netlink: 'syz.3.4193': attribute type 39 has an invalid length. [ 862.012504][ T9] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 862.055366][ T9] usb 5-1: device descriptor read/8, error -71 [ 862.139340][T12388] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.192865][ T9] usb usb5-port1: unable to enumerate USB device [ 862.452814][ T5360] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 862.526134][T12388] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.644946][ T5360] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 862.644973][ T5360] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 862.645014][ T5360] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 862.645036][ T5360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.662806][ T5360] usb 1-1: config 0 descriptor?? [ 862.772753][T28253] fuse: fd is not a fuse device [ 862.823474][T24949] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 862.973006][T12388] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.052629][T24949] usb 4-1: device descriptor read/64, error -71 [ 863.176699][ T5360] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 863.313485][T24949] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 863.458173][T12388] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.486584][T24949] usb 4-1: device descriptor read/64, error -71 [ 863.609045][T24949] usb usb4-port1: attempt power cycle [ 863.952680][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 863.973763][ T9] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 864.085743][T24949] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 864.206571][T24949] usb 4-1: device descriptor read/8, error -71 [ 864.209209][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 864.320205][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 864.389867][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 864.455994][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 864.461005][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.479436][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 864.489393][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 864.508328][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 864.525353][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 864.539852][T12388] bridge_slave_1: left allmulticast mode [ 864.571432][T12388] bridge_slave_1: left promiscuous mode [ 864.579508][T24949] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 864.606529][ T9] usb 5-1: config 0 descriptor?? [ 864.637635][T12388] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.664409][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 864.773908][T24949] usb 4-1: device descriptor read/8, error -71 [ 864.899708][T12388] bridge_slave_0: left allmulticast mode [ 864.975758][T24949] usb usb4-port1: unable to enumerate USB device [ 865.090925][T12388] bridge_slave_0: left promiscuous mode [ 865.132811][T12388] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.458928][ T5683] usb 1-1: USB disconnect, device number 102 [ 865.604548][T28309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.694679][T28309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.023684][T28334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4202'. [ 866.444851][T12388] bond1 (unregistering): (slave geneve2): Releasing active interface [ 866.480622][T12388] geneve2 (unregistering): left allmulticast mode [ 866.642512][ T5726] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 866.673348][ T5639] Bluetooth: hci0: command tx timeout [ 866.734035][T12388] bond1 (unregistering): Released all slaves [ 866.806546][ T5726] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 866.826631][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 866.869592][ T5726] usb 1-1: config 0 interface 0 has no altsetting 0 [ 866.951510][ T5726] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 866.986317][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.017486][ T5726] usb 1-1: Product: syz [ 867.033303][ T5726] usb 1-1: Manufacturer: syz [ 867.052247][ T5726] usb 1-1: SerialNumber: syz [ 867.096053][ T5726] usb 1-1: config 0 descriptor?? [ 867.126884][ T5726] usb 1-1: selecting invalid altsetting 0 [ 867.389121][T21124] usb 5-1: USB disconnect, device number 113 [ 867.448581][T28392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4204'. [ 867.693072][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 867.706210][T28416] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4207'. [ 867.854763][ T9] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 867.873517][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 867.892665][T12388] hsr_slave_0: left promiscuous mode [ 867.916362][T12388] hsr_slave_1: left promiscuous mode [ 867.916786][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 867.947333][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.959562][ T9] usb 4-1: Product: syz [ 867.963375][T12388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 867.965001][ T9] usb 4-1: Manufacturer: syz [ 867.997023][T12388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.002488][ T9] usb 4-1: SerialNumber: syz [ 868.040330][ T9] usb 4-1: config 0 descriptor?? [ 868.050358][T12388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.066713][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 868.083928][T12388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.137529][T12388] veth1_macvtap: left promiscuous mode [ 868.157042][T12388] veth0_macvtap: left promiscuous mode [ 868.174943][T12388] veth1_vlan: left promiscuous mode [ 868.194882][T12388] veth0_vlan: left promiscuous mode [ 868.696333][T28440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.714996][T28440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.758471][ T5639] Bluetooth: hci0: command tx timeout [ 868.782078][T28440] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(16) [ 868.788700][T28440] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 868.831489][T28440] vhci_hcd vhci_hcd.0: Device attached [ 868.875579][T12388] team0 (unregistering): Port device team_slave_1 removed [ 868.907112][T12388] team0 (unregistering): Port device team_slave_0 removed [ 869.062672][ T5711] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 869.128809][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 869.135957][T28444] vhci_hcd: connection reset by peer [ 869.144551][T22143] vhci_hcd vhci_hcd.2: stop threads [ 869.155778][T22143] vhci_hcd vhci_hcd.2: release socket [ 869.167525][T24949] usb 1-1: USB disconnect, device number 103 [ 869.175197][T22143] vhci_hcd vhci_hcd.2: disconnect device [ 869.533248][ T9] videodev: could not get a free minor [ 869.554515][ T9] gspca_main: video_register_device err -23 [ 869.595082][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -23 [ 869.960040][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.970397][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.006877][ T30] audit: type=1326 audit(1779268630.739:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28526 comm="syz.2.4212" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e839ce59 code=0x7ffc0000 [ 870.062441][ T30] audit: type=1326 audit(1779268630.739:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28526 comm="syz.2.4212" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e839ce59 code=0x7ffc0000 [ 870.136449][ T30] audit: type=1326 audit(1779268630.779:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28526 comm="syz.2.4212" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30e839ce59 code=0x7ffc0000 [ 870.202980][ T30] audit: type=1326 audit(1779268630.779:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28526 comm="syz.2.4212" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e839ce59 code=0x7ffc0000 [ 870.228478][ T30] audit: type=1326 audit(1779268630.799:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28526 comm="syz.2.4212" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f30e839ce59 code=0x7ffc0000 [ 870.254048][ T30] audit: type=1326 audit(1779268630.849:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28526 comm="syz.2.4212" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e839ce59 code=0x7ffc0000 [ 870.305273][ T30] audit: type=1326 audit(1779268630.859:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28526 comm="syz.2.4212" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e839ce59 code=0x7ffc0000 [ 870.352141][ T30] audit: type=1326 audit(1779268630.899:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28526 comm="syz.2.4212" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f30e839ce59 code=0x7ffc0000 [ 870.403116][ T5360] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 870.438602][ T30] audit: type=1326 audit(1779268630.929:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28526 comm="syz.2.4212" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e839ce59 code=0x7ffc0000 [ 870.500037][T28306] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.523810][ T30] audit: type=1326 audit(1779268630.929:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28526 comm="syz.2.4212" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e839ce59 code=0x7ffc0000 [ 870.534912][T28306] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.559642][T21124] usb 4-1: USB disconnect, device number 3 [ 870.586443][ T5360] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 870.625322][ T5360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.650013][T28306] bridge_slave_0: entered allmulticast mode [ 870.678543][ T5360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.693106][T28306] bridge_slave_0: entered promiscuous mode [ 870.737225][ T5360] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 870.754560][T28306] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.763006][ T5360] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 870.787955][ T5360] usb 5-1: Manufacturer: syz [ 870.792013][T28306] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.816526][ T5360] usb 5-1: config 0 descriptor?? [ 870.825857][T28306] bridge_slave_1: entered allmulticast mode [ 870.832672][ T5639] Bluetooth: hci0: command tx timeout [ 870.835749][ T5360] igorplugusb 5-1:0.0: endpoint incorrect [ 870.866169][T28306] bridge_slave_1: entered promiscuous mode [ 871.054192][T28306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.099718][T28306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.124186][T28564] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(16) [ 871.130807][T28564] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 871.174334][T28564] vhci_hcd vhci_hcd.0: Device attached [ 871.208777][T28640] vhci_hcd: connection closed [ 871.209065][T12388] vhci_hcd vhci_hcd.4: stop threads [ 871.243149][ T807] usb 5-1: USB disconnect, device number 114 [ 871.266414][T12388] vhci_hcd vhci_hcd.4: release socket [ 871.301341][T12388] vhci_hcd vhci_hcd.4: disconnect device [ 871.334493][T28306] team0: Port device team_slave_0 added [ 871.352551][ T5360] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 871.364287][T28306] team0: Port device team_slave_1 added [ 871.440766][T28678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.455712][T28678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.479391][T28678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.508828][T28678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.519110][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 871.586200][T28306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.626739][T28306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.673531][T28306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.714750][T28678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4222'. [ 871.732193][T28306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.741168][T28306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.774722][T28306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.872528][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 872.081176][T28306] hsr_slave_0: entered promiscuous mode [ 872.101334][T28306] hsr_slave_1: entered promiscuous mode [ 872.115836][T28306] debugfs: 'hsr0' already exists in 'hsr' [ 872.122033][T28306] Cannot create hsr debugfs directory [ 872.498230][T28789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.543212][T28789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.713095][ T5360] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 872.772538][T21124] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 872.910876][ T5360] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 872.912825][ T5639] Bluetooth: hci0: command tx timeout [ 872.944958][T21124] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 872.947529][ T5360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.967375][T21124] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 872.976780][T28856] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 873.004044][T21124] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 873.014863][ T5360] usb 4-1: Product: syz [ 873.015025][T21124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.029231][T21124] usb 1-1: Product: syz [ 873.034293][T21124] usb 1-1: Manufacturer: syz [ 873.039675][T21124] usb 1-1: SerialNumber: syz [ 873.048491][ T5360] usb 4-1: Manufacturer: syz [ 873.074383][ T5360] usb 4-1: SerialNumber: syz [ 873.089575][T21124] usb 1-1: 0:2 : does not exist [ 873.114211][T21124] usb 1-1: unit 9 not found! [ 873.137866][ T5360] usb 4-1: config 0 descriptor?? [ 873.372919][ T5360] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 873.401429][T21124] usb 1-1: USB disconnect, device number 104 [ 873.410626][ T5360] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 873.421320][T28306] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 873.470805][T28882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.482798][ T807] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 873.502067][ T5360] usb 4-1: USB disconnect, device number 4 [ 873.544450][T28882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.555078][T28306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 873.603867][T28306] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 873.663646][T28306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 873.685184][T28306] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 873.713446][T28306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 873.727710][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 873.737849][T28306] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 873.747067][ T807] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 873.757612][ T807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.773487][ T807] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 873.786080][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.798018][T28306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 873.810455][ T807] usb 5-1: Product: syz [ 873.830165][ T807] usb 5-1: Manufacturer: syz [ 873.844987][ T807] usb 5-1: SerialNumber: syz [ 873.875581][ T807] usb 5-1: config 0 descriptor?? [ 873.914873][ T807] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 873.949080][ T807] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 874.151372][ T807] usb 5-1: USB disconnect, device number 115 [ 874.197613][ T5711] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 874.240358][T28306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.353564][T28306] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.428444][T22142] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.436408][T22142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.561598][T12387] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.570070][T12387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.919238][T28306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.993643][T21124] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 875.111770][T28306] veth0_vlan: entered promiscuous mode [ 875.145484][T28306] veth1_vlan: entered promiscuous mode [ 875.195804][T21124] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 875.224186][T21124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 875.238740][T21124] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 875.239916][T28306] veth0_macvtap: entered promiscuous mode [ 875.268911][T21124] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 875.312717][T21124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.359201][T28306] veth1_macvtap: entered promiscuous mode [ 875.362891][T21124] usb 4-1: config 0 descriptor?? [ 875.380304][T28948] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 875.460887][T28306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.516019][T28306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.568804][T22143] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.605939][T22143] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.644511][T22143] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.695798][T22143] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.765909][T28973] netlink: 'syz.4.4240': attribute type 1 has an invalid length. [ 876.005198][T28948] netlink: 'syz.3.4236': attribute type 1 has an invalid length. [ 876.130658][T28990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.169134][T28990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.421922][T29010] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4240'. [ 876.837945][T28973] bond3: entered promiscuous mode [ 876.862159][T28973] 8021q: adding VLAN 0 to HW filter on device bond3 [ 876.974237][T21124] usbhid 4-1:0.0: can't add hid device: -71 [ 877.010911][T21124] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 877.042845][T21124] usb 4-1: USB disconnect, device number 5 [ 877.285671][T28976] bond3: (slave bridge1): making interface the new active one [ 877.317373][T28976] bridge1: entered promiscuous mode [ 877.569414][T28976] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 877.879550][T22142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.919881][T22142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.091983][T29058] syz_tun: entered allmulticast mode [ 878.145115][T10381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.194896][T10381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.400767][T29076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4249'. [ 878.481654][T29078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.513239][ T9] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 878.552418][T24949] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 878.576021][T29078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.591086][T29084] loop2: detected capacity change from 0 to 7 [ 878.604126][T29084] Dev loop2: unable to read RDB block 7 [ 878.609961][T29084] loop2: unable to read partition table [ 878.616726][T29084] loop2: partition table beyond EOD, truncated [ 878.623419][T29084] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 878.713549][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 878.723785][T24949] usb 4-1: Using ep0 maxpacket: 32 [ 878.749208][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 878.753363][T24949] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 878.810253][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.823109][T24949] usb 4-1: config 0 has no interface number 0 [ 878.844967][T24949] usb 4-1: config 0 interface 12 has no altsetting 0 [ 878.870481][T24949] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 878.889265][T24949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.916593][ T9] usb 1-1: config 0 descriptor?? [ 878.929332][T24949] usb 4-1: Product: syz [ 878.946290][T24949] usb 4-1: Manufacturer: syz [ 878.963093][T24949] usb 4-1: SerialNumber: syz [ 878.977853][T24949] usb 4-1: config 0 descriptor?? [ 879.161993][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 879.213574][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 879.256435][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 879.266004][ T9] usb 1-1: media controller created [ 879.348982][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 879.467536][ T9] az6027: usb out operation failed. (-71) [ 879.483099][ T9] az6027: usb out operation failed. (-71) [ 879.491254][ T9] stb0899_attach: Driver disabled by Kconfig [ 879.499518][ T9] az6027: no front-end attached [ 879.499518][ T9] [ 879.529835][ T9] az6027: usb out operation failed. (-71) [ 879.559841][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 879.607646][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input106 [ 879.667292][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 879.709006][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 879.816058][ T9] usb 1-1: USB disconnect, device number 105 [ 880.166982][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 880.437949][T29069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.496901][T29069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.965735][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 881.144159][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 881.341982][T29206] nvme_fabrics: missing parameter 'transport=%s' [ 881.371641][T29206] nvme_fabrics: missing parameter 'nqn=%s' [ 881.414785][T24949] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 0 failed: -71 [ 881.449764][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 881.455315][T24949] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 881.514583][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 881.542759][ T9] usb 6-1: can't read configurations, error -71 [ 881.547211][T24949] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 881.604565][T24949] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 881.692745][T24949] usb 4-1: USB disconnect, device number 6 [ 882.490841][T29257] fuse: Unknown parameter '00000000000000000003000000000000000000000030000000000000000000000300000000000000000000' [ 882.728344][T29185] Set syz1 is full, maxelem 65536 reached [ 883.035158][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 883.231932][ T9] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 883.267363][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 883.321361][ T9] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 883.352096][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.382838][ T9] usb 6-1: Product: syz [ 883.389425][ T9] usb 6-1: Manufacturer: syz [ 883.413012][ T9] usb 6-1: SerialNumber: syz [ 883.422590][ T1223] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 883.441796][ T9] usb 6-1: config 0 descriptor?? [ 883.464733][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 883.545507][T29304] fuse: Unknown parameter '000000000000000000000x0000000000000006' [ 883.602527][ T1223] usb 4-1: Using ep0 maxpacket: 8 [ 883.617422][ T1223] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.638859][ T1223] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 883.657248][ T1223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 883.679531][ T1223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 883.692140][ T1223] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 883.704929][ T1223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 883.717445][T21124] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 883.730445][ T1223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 883.751300][ T1223] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 883.770699][ T1223] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 883.782463][ T1223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.798061][ T1223] usb 4-1: Product: syz [ 883.805942][ T1223] usb 4-1: Manufacturer: syz [ 883.816987][ T1223] usb 4-1: SerialNumber: syz [ 883.838024][ T1223] usb 4-1: config 0 descriptor?? [ 883.846097][T29279] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 883.869247][ T1223] ati_remote 4-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 883.878011][T21124] usb 1-1: device descriptor read/64, error -71 [ 884.070847][ T1223] usb 4-1: USB disconnect, device number 7 [ 884.125741][T21124] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 884.277081][T29318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.278812][T21124] usb 1-1: device descriptor read/64, error -71 [ 884.303045][T29318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.330688][T29318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.347826][T29318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.371787][T29318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.390253][T29318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.424753][T21124] usb usb1-port1: attempt power cycle [ 884.772986][T21124] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 884.819894][T21124] usb 1-1: device descriptor read/8, error -71 [ 884.998023][T29340] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4277'. [ 885.082666][T21124] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 885.123926][T21124] usb 1-1: device descriptor read/8, error -71 [ 885.253129][T21124] usb usb1-port1: unable to enumerate USB device [ 885.392950][ T9] gspca_sunplus: reg_r err -110 [ 885.400182][ T9] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 885.688544][ T5360] usb 6-1: USB disconnect, device number 4 [ 885.780409][T29378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.877630][T29378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.886308][T29384] fuse: Bad value for 'fd' [ 886.531933][T29411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4286'. [ 886.618336][T29429] kernel profiling enabled (shift: 9) [ 886.885654][T24949] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 886.925756][T29444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 886.964821][T22667] syz_tun (unregistering): left allmulticast mode [ 887.076204][T24949] usb 1-1: Using ep0 maxpacket: 8 [ 887.111339][ T5711] usb 3-1: USB disconnect, device number 3 [ 887.120410][T24949] usb 1-1: unable to get BOS descriptor or descriptor too short [ 887.159572][T24949] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 887.210286][T24949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 887.255561][T24949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 887.320071][T24949] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 887.378291][T24949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 887.436454][T24949] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 887.514679][T24949] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 887.531944][T24949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.561070][T24949] usb 1-1: Product: syz [ 887.574497][T22143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 887.586577][T24949] usb 1-1: Manufacturer: syz [ 887.596031][T24949] usb 1-1: SerialNumber: syz [ 887.614267][T24949] usb 1-1: config 0 descriptor?? [ 887.622246][T22143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.642950][T29429] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 887.677297][T24949] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 887.873996][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 887.995083][T24949] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 888.078272][T24949] usb 1-1: USB disconnect, device number 110 [ 888.098588][T29506] loop8: detected capacity change from 0 to 7 [ 888.136983][T29506] Dev loop8: unable to read RDB block 7 [ 888.151966][T29506] loop8: unable to read partition table [ 888.179765][T29506] loop8: partition table beyond EOD, truncated [ 888.201569][ T7588] udevd[7588]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 888.221047][T22143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.247547][T29506] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 888.261625][T22143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.568260][T22143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.611500][T29533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4300'. [ 888.631765][T22143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.730779][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 888.751484][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 888.767314][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 888.804492][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 888.815143][ T5360] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 888.815372][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 888.886793][T22143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.927634][T22143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.939048][T24949] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 888.984708][ T5360] usb 6-1: Using ep0 maxpacket: 16 [ 889.016791][ T5360] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 889.040941][ T5360] usb 6-1: config 1 has no interface number 0 [ 889.092989][ T5360] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 889.126455][T24949] usb 5-1: Using ep0 maxpacket: 8 [ 889.160998][T24949] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.171660][ T5360] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 889.228811][T24949] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 889.238293][ T5360] usb 6-1: config 1 interface 105 has no altsetting 0 [ 889.287805][T24949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.310510][ T5360] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 889.336424][ T5360] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 889.347553][T24949] usb 5-1: config 0 descriptor?? [ 889.376169][T24949] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22 [ 889.387147][ T5360] usb 6-1: Product: syz [ 889.399222][ T5360] usb 6-1: Manufacturer: syz [ 889.410409][ T5360] usb 6-1: SerialNumber: syz [ 889.441817][T29526] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 889.455606][T29526] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 889.562800][ T807] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 889.589442][T24949] usb 5-1: USB disconnect, device number 117 [ 889.738442][ T807] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 889.777165][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.816976][ T807] usb 4-1: Product: syz [ 889.828715][ T807] usb 4-1: Manufacturer: syz [ 889.838935][ T807] usb 4-1: SerialNumber: syz [ 889.866958][ T807] usb 4-1: config 0 descriptor?? [ 889.885104][T29526] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 889.902123][T29526] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 889.918213][T22143] bridge_slave_1: left allmulticast mode [ 889.929204][T22143] bridge_slave_1: left promiscuous mode [ 889.943941][T22143] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.117394][ T807] usb 4-1: Firmware version (0.0) predates our first public release. [ 890.145155][ T807] usb 4-1: Please update to version 0.2 or newer [ 890.170371][ T807] usb 4-1: Firmware: build [ 890.395083][T29651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.425791][T29651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.604565][ T5726] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 890.774996][ T5726] usb 5-1: config 0 has an invalid interface number: 17 but max is 0 [ 890.784601][ T5726] usb 5-1: config 0 has no interface number 0 [ 890.791267][ T5726] usb 5-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 890.806166][ T5726] usb 5-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid maxpacket 41239, setting to 1024 [ 890.818739][ T5726] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 890.829040][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.836343][T22143] bond1 (unregistering): Released all slaves [ 890.847087][ T5726] usb 5-1: config 0 descriptor?? [ 890.878658][T22143] bond0 (unregistering): Released all slaves [ 890.905531][T22143] bond2 (unregistering): Released all slaves [ 890.913184][ T5627] Bluetooth: hci3: command tx timeout [ 891.110330][T22143] tipc: Left network mode [ 891.164021][ T5690] usb 4-1: USB disconnect, device number 8 [ 891.309708][T29650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.359480][T29650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.596036][T22143] IPVS: stopping master sync thread 26184 ... [ 891.637090][ T5726] usbhid 5-1:0.17: can't add hid device: -71 [ 891.661822][ T5726] usbhid 5-1:0.17: probe with driver usbhid failed with error -71 [ 891.707767][ T5360] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 891.719423][ T5726] usb 5-1: USB disconnect, device number 118 [ 891.754339][ T5360] aqc111 6-1:1.105: probe with driver aqc111 failed with error -71 [ 891.777043][ T5360] usb 6-1: USB disconnect, device number 5 [ 891.813311][T29723] fuse: Bad value for 'fd' [ 892.071268][T29716] pimreg0: tun_chr_ioctl cmd 35111 [ 892.492709][ T5690] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 892.680428][ T5690] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 892.713503][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.740016][ T5690] usb 6-1: Product: syz [ 892.759101][T22143] hsr_slave_0: left promiscuous mode [ 892.761993][ T5690] usb 6-1: Manufacturer: syz [ 892.781942][ T5690] usb 6-1: SerialNumber: syz [ 892.831802][ T5690] usb 6-1: config 0 descriptor?? [ 892.832635][T22143] hsr_slave_1: left promiscuous mode [ 892.876923][T22143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.895223][T22143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.926157][T22143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.936098][T22143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.005106][ T5627] Bluetooth: hci3: command tx timeout [ 893.023839][T22143] veth1_macvtap: left promiscuous mode [ 893.052521][T22143] veth0_macvtap: left promiscuous mode [ 893.062799][T22143] veth1_vlan: left promiscuous mode [ 893.085699][T22143] veth0_vlan: left promiscuous mode [ 893.086040][ T5690] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 893.402394][ T5683] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 893.491374][T22143] team0 (unregistering): Port device team_slave_1 removed [ 893.511525][T22143] team0 (unregistering): Port device team_slave_0 removed [ 893.699666][T29548] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.714408][ T5690] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 893.731775][T29548] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.733060][T29850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4314'. [ 893.760368][T29548] bridge_slave_0: entered allmulticast mode [ 893.779572][T29548] bridge_slave_0: entered promiscuous mode [ 893.797738][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 893.838552][T29548] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.847908][ T5683] usb 5-1: unable to get BOS descriptor or descriptor too short [ 893.866050][ T5683] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 893.873820][ T5683] usb 5-1: can't read configurations, error -71 [ 893.877180][T29548] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.900465][T29548] bridge_slave_1: entered allmulticast mode [ 893.924117][T29548] bridge_slave_1: entered promiscuous mode [ 893.946886][T29862] FAULT_INJECTION: forcing a failure. [ 893.946886][T29862] name failslab, interval 1, probability 0, space 0, times 0 [ 893.962164][T29862] CPU: 0 UID: 0 PID: 29862 Comm: syz.3.4316 Tainted: G L syzkaller #0 PREEMPT(full) [ 893.962190][T29862] Tainted: [L]=SOFTLOCKUP [ 893.962197][T29862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 893.962208][T29862] Call Trace: [ 893.962215][T29862] [ 893.962223][T29862] dump_stack_lvl+0xe8/0x150 [ 893.962247][T29862] should_fail_ex+0x412/0x560 [ 893.962274][T29862] should_failslab+0xa8/0x100 [ 893.962304][T29862] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 893.962328][T29862] ? __alloc_skb+0x1d0/0x7d0 [ 893.962347][T29862] ? __local_bh_enable_ip+0xd0/0x130 [ 893.962370][T29862] __alloc_skb+0x1d0/0x7d0 [ 893.962403][T29862] sock_wmalloc+0xb2/0x130 [ 893.962430][T29862] pppoe_sendmsg+0x2b4/0x7c0 [ 893.962453][T29862] ? __pfx_aa_sk_perm+0x10/0x10 [ 893.962477][T29862] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 893.962501][T29862] ? aa_sock_msg_perm+0xf1/0x1b0 [ 893.962525][T29862] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 893.962550][T29862] ____sys_sendmsg+0x972/0x9f0 [ 893.962573][T29862] ? __might_fault+0xaf/0x130 [ 893.962598][T29862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 893.962632][T29862] ? import_iovec+0x73/0xa0 [ 893.962660][T29862] ___sys_sendmsg+0x2a5/0x360 [ 893.962683][T29862] ? __lock_acquire+0x6b5/0x2cf0 [ 893.962706][T29862] ? __pfx____sys_sendmsg+0x10/0x10 [ 893.962735][T29862] ? kstrtouint+0x6e/0xe0 [ 893.962781][T29862] ? __fget_files+0x2a/0x420 [ 893.962801][T29862] ? __fget_files+0x3a0/0x420 [ 893.962830][T29862] __sys_sendmmsg+0x27c/0x4e0 [ 893.962859][T29862] ? __pfx___sys_sendmmsg+0x10/0x10 [ 893.962882][T29862] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 893.962925][T29862] ? ksys_write+0x242/0x270 [ 893.962949][T29862] ? __pfx_ksys_write+0x10/0x10 [ 893.962977][T29862] __x64_sys_sendmmsg+0xa0/0xc0 [ 893.963001][T29862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.963018][T29862] do_syscall_64+0x15f/0xf80 [ 893.963041][T29862] ? trace_irq_disable+0x3b/0x140 [ 893.963065][T29862] ? clear_bhb_loop+0x40/0x90 [ 893.963085][T29862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.963101][T29862] RIP: 0033:0x7fe19c19ce59 [ 893.963117][T29862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.963130][T29862] RSP: 002b:00007fe19d11d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 893.963147][T29862] RAX: ffffffffffffffda RBX: 00007fe19c415fa0 RCX: 00007fe19c19ce59 [ 893.963156][T29862] RDX: 00000000000003e8 RSI: 0000200000002340 RDI: 0000000000000003 [ 893.963164][T29862] RBP: 00007fe19d11d090 R08: 0000000000000000 R09: 0000000000000000 [ 893.963174][T29862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.963184][T29862] R13: 00007fe19c416038 R14: 00007fe19c415fa0 R15: 00007fe19c53fa48 [ 893.963212][T29862] [ 894.303206][ T5726] usb 6-1: USB disconnect, device number 6 [ 894.388429][T29548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.455510][T29548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.610386][T29548] team0: Port device team_slave_0 added [ 894.643766][T29548] team0: Port device team_slave_1 added [ 894.763185][ T5726] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 894.780641][T29548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.803998][T29548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.882782][T29548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.925376][ T1223] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 894.943207][ T5726] usb 6-1: config 0 has an invalid interface number: 235 but max is 0 [ 894.989355][T29548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.993050][ T5726] usb 6-1: config 0 has no interface number 0 [ 895.028771][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 895.028782][ T30] audit: type=1800 audit(1779268655.759:5098): pid=29957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4320" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 895.036441][ T5726] usb 6-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 895.055977][T29548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.111816][ T5627] Bluetooth: hci3: command tx timeout [ 895.124254][ T5726] usb 6-1: config 0 interface 235 has no altsetting 0 [ 895.133448][ T5726] usb 6-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 895.142857][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.152701][ T5726] usb 6-1: Product: syz [ 895.156949][ T5726] usb 6-1: Manufacturer: syz [ 895.162433][ T5726] usb 6-1: SerialNumber: syz [ 895.174592][ T5726] usb 6-1: config 0 descriptor?? [ 895.202044][T29548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.202920][ T1223] usb 1-1: Using ep0 maxpacket: 32 [ 895.223181][ T5726] keyspan 6-1:0.235: Keyspan 1 port adapter converter detected [ 895.265654][ T1223] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 895.274031][ T1223] usb 1-1: config 0 has no interface number 0 [ 895.280657][ T5726] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 87 [ 895.301883][ T1223] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 895.312018][ T1223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.330336][ T5726] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 7 [ 895.341936][ T1223] usb 1-1: Product: syz [ 895.348009][ T1223] usb 1-1: Manufacturer: syz [ 895.355884][ T5726] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 81 [ 895.365037][ T1223] usb 1-1: SerialNumber: syz [ 895.369747][ T5726] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 1 [ 895.385789][ T5726] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 85 [ 895.395441][ T1223] usb 1-1: config 0 descriptor?? [ 895.468551][ T5726] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 895.556699][ T5726] usb 6-1: USB disconnect, device number 7 [ 895.660304][ T5726] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 895.690580][T29548] hsr_slave_0: entered promiscuous mode [ 895.711245][T29548] hsr_slave_1: entered promiscuous mode [ 895.739374][ T5726] keyspan 6-1:0.235: device disconnected [ 895.810331][ T1223] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 895.843091][ T1223] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 895.962598][ T5690] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 896.021254][ T5289] 8021q: adding VLAN 0 to HW filter on device eth6 [ 896.090617][ T1223] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 896.118003][ T1223] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 896.134715][ T5690] usb 5-1: config index 0 descriptor too short (expected 914, got 146) [ 896.361892][ T5690] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.726631][ T5690] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 4 [ 896.804553][T29548] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 896.828720][T29548] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 896.844004][T29548] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 896.863062][T29548] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 896.880379][T29548] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 896.889522][ T5690] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 896.900694][T29548] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 896.920008][T29548] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 896.922677][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 896.947925][T29548] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 896.967095][ T5690] usb 5-1: SerialNumber: syz [ 896.991539][ T5690] usb 5-1: config 0 descriptor?? [ 897.152468][ T5627] Bluetooth: hci3: command tx timeout [ 897.251940][T29548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.344334][ T5289] 8021q: adding VLAN 0 to HW filter on device eth7 [ 897.622752][T29548] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.657178][ T5360] usb 1-1: USB disconnect, device number 111 [ 897.679181][T12374] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.686299][T12374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.756546][T10381] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.763688][T10381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.774199][ T5726] usb 5-1: USB disconnect, device number 121 [ 897.836260][T29548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 897.884958][T29548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.929072][T29548] veth0_vlan: entered promiscuous mode [ 897.948983][T29548] veth1_vlan: entered promiscuous mode [ 897.998666][T29548] veth0_macvtap: entered promiscuous mode [ 898.018951][T29548] veth1_macvtap: entered promiscuous mode [ 898.233905][T29548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.244088][T29548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.267423][T12374] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.267460][T12374] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.267493][T12374] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.267516][T12374] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.446193][ T5289] 8021q: adding VLAN 0 to HW filter on device eth8 [ 898.630332][T10381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.638472][T10381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.686160][T12388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.748603][T12388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.927561][T30181] fuse: Bad value for 'fd' [ 899.652679][ T5726] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 899.804352][ T5726] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 899.822634][ T5726] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 899.842494][ T5726] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 899.852692][T24949] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 899.864003][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.881082][ T5726] usb 5-1: Product: syz [ 899.885454][ T5726] usb 5-1: Manufacturer: syz [ 899.890084][ T5726] usb 5-1: SerialNumber: syz [ 899.901656][ T5726] usb 5-1: config 0 descriptor?? [ 899.915013][ T5726] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 899.969470][T30231] fuse: Bad value for 'fd' [ 900.014809][T24949] usb 1-1: too many configurations: 48, using maximum allowed: 8 [ 900.024314][ T5711] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 900.056428][T24949] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 900.066782][T24949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.075184][T24949] usb 1-1: Product: syz [ 900.079363][T24949] usb 1-1: Manufacturer: syz [ 900.084248][T24949] usb 1-1: SerialNumber: syz [ 900.202449][ T5711] usb 6-1: Using ep0 maxpacket: 16 [ 900.209401][ T5711] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 900.221386][ T5711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 900.234706][ T5711] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 900.243964][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.252040][ T5711] usb 6-1: Product: syz [ 900.256362][ T5711] usb 6-1: Manufacturer: syz [ 900.261022][ T5711] usb 6-1: SerialNumber: syz [ 900.268494][ T5711] usb 6-1: config 0 descriptor?? [ 900.279335][ T5711] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 900.282509][T21124] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 900.288666][ T5711] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 900.452423][T21124] usb 4-1: Using ep0 maxpacket: 16 [ 900.461774][T21124] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 900.471025][T21124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.479229][T21124] usb 4-1: Product: syz [ 900.484250][T21124] usb 4-1: Manufacturer: syz [ 900.489532][T21124] usb 4-1: SerialNumber: syz [ 900.499834][T21124] r8152-cfgselector 4-1: Unknown version 0x0000 [ 900.506857][T21124] r8152-cfgselector 4-1: config 0 descriptor?? [ 900.510991][T24949] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 900.527095][T24949] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 900.718785][T21124] r8152-cfgselector 4-1: Needed 2 retries to read version [ 900.744131][T30213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.756653][T30213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.897954][ T5711] em28xx 6-1:0.0: chip ID is em2882/3 [ 900.926145][T21124] r8152-cfgselector 4-1: USB disconnect, device number 9 [ 901.099086][ T5711] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 901.109334][ T5711] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 901.118018][ T5711] em28xx 6-1:0.0: No AC97 audio processor [ 901.132068][ T5711] usb 6-1: USB disconnect, device number 8 [ 901.145047][ T5711] em28xx 6-1:0.0: Disconnecting em28xx [ 901.160060][ T5711] em28xx 6-1:0.0: Freeing device [ 901.377692][T24949] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 901.394968][T24949] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 901.406670][T24949] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 901.419813][T24949] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 901.444528][T24949] usb 1-1: USB disconnect, device number 112 [ 901.523741][T30278] FAULT_INJECTION: forcing a failure. [ 901.523741][T30278] name failslab, interval 1, probability 0, space 0, times 0 [ 901.537777][T30278] CPU: 0 UID: 0 PID: 30278 Comm: syz.3.4339 Tainted: G L syzkaller #0 PREEMPT(full) [ 901.537793][T30278] Tainted: [L]=SOFTLOCKUP [ 901.537797][T30278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 901.537803][T30278] Call Trace: [ 901.537808][T30278] [ 901.537813][T30278] dump_stack_lvl+0xe8/0x150 [ 901.537829][T30278] should_fail_ex+0x412/0x560 [ 901.537846][T30278] should_failslab+0xa8/0x100 [ 901.537867][T30278] ? skb_clone+0x212/0x3a0 [ 901.537882][T30278] kmem_cache_alloc_noprof+0x87/0x650 [ 901.537895][T30278] ? dev_queue_xmit_nit+0x2d/0xad0 [ 901.537912][T30278] skb_clone+0x212/0x3a0 [ 901.537925][T30278] ? dev_queue_xmit_nit+0x59f/0xad0 [ 901.537938][T30278] dev_queue_xmit_nit+0x29a/0xad0 [ 901.537951][T30278] ? dev_queue_xmit_nit+0x2d/0xad0 [ 901.537969][T30278] dev_hard_start_xmit+0x1c1/0x830 [ 901.537990][T30278] __dev_queue_xmit+0x14d9/0x3950 [ 901.538004][T30278] ? __dev_queue_xmit+0x2b6/0x3950 [ 901.538020][T30278] ? __pfx___dev_queue_xmit+0x10/0x10 [ 901.538032][T30278] ? _copy_from_iter+0x2d3/0x1670 [ 901.538044][T30278] ? rcu_is_watching+0x15/0xb0 [ 901.538057][T30278] ? trace_kmem_cache_alloc+0x29/0xe0 [ 901.538072][T30278] ? __pfx__copy_from_iter+0x10/0x10 [ 901.538087][T30278] ? skb_set_owner_w+0x180/0x3e0 [ 901.538102][T30278] ? pppoe_sendmsg+0x556/0x7c0 [ 901.538120][T30278] pppoe_sendmsg+0x5a7/0x7c0 [ 901.538137][T30278] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 901.538150][T30278] ? aa_sock_msg_perm+0xf1/0x1b0 [ 901.538165][T30278] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 901.538179][T30278] ____sys_sendmsg+0x972/0x9f0 [ 901.538193][T30278] ? __might_fault+0xaf/0x130 [ 901.538208][T30278] ? __pfx_____sys_sendmsg+0x10/0x10 [ 901.538226][T30278] ? import_iovec+0x73/0xa0 [ 901.538241][T30278] ___sys_sendmsg+0x2a5/0x360 [ 901.538254][T30278] ? __lock_acquire+0x6b5/0x2cf0 [ 901.538268][T30278] ? __pfx____sys_sendmsg+0x10/0x10 [ 901.538284][T30278] ? kstrtouint+0x6e/0xe0 [ 901.538309][T30278] ? __fget_files+0x2a/0x420 [ 901.538320][T30278] ? __fget_files+0x3a0/0x420 [ 901.538336][T30278] __sys_sendmmsg+0x27c/0x4e0 [ 901.538352][T30278] ? __pfx___sys_sendmmsg+0x10/0x10 [ 901.538365][T30278] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 901.538388][T30278] ? ksys_write+0x242/0x270 [ 901.538403][T30278] ? __pfx_ksys_write+0x10/0x10 [ 901.538419][T30278] __x64_sys_sendmmsg+0xa0/0xc0 [ 901.538433][T30278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.538444][T30278] do_syscall_64+0x15f/0xf80 [ 901.538458][T30278] ? trace_irq_disable+0x3b/0x140 [ 901.538472][T30278] ? clear_bhb_loop+0x40/0x90 [ 901.538484][T30278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.538494][T30278] RIP: 0033:0x7fe19c19ce59 [ 901.538504][T30278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.538513][T30278] RSP: 002b:00007fe19d11d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 901.538525][T30278] RAX: ffffffffffffffda RBX: 00007fe19c415fa0 RCX: 00007fe19c19ce59 [ 901.538532][T30278] RDX: 00000000000003e8 RSI: 0000200000002340 RDI: 0000000000000003 [ 901.538539][T30278] RBP: 00007fe19d11d090 R08: 0000000000000000 R09: 0000000000000000 [ 901.538545][T30278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.538551][T30278] R13: 00007fe19c416038 R14: 00007fe19c415fa0 R15: 00007fe19c53fa48 [ 901.538566][T30278] [ 901.907233][ T5711] usb 5-1: USB disconnect, device number 122 [ 902.172423][ T5726] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 902.328606][ T5726] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 902.346885][ T5726] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 902.365566][ T5726] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 902.380994][ T5726] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 902.401089][ T5726] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 902.413123][ T5726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.433818][ T5726] usb 6-1: config 0 descriptor?? [ 902.542886][ T9] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 902.722724][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 902.731019][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.741810][ T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 902.754883][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 902.767009][ T9] usb 1-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 902.778120][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.790963][ T9] usb 1-1: Product: syz [ 902.797210][ T9] usb 1-1: Manufacturer: syz [ 902.801870][ T9] usb 1-1: SerialNumber: syz [ 902.896274][ T5726] plantronics 0003:047F:FFFF.0054: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 903.073335][ T5711] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 903.089891][T30351] fuse: Bad value for 'fd' [ 903.098688][T30300] kvm: apic: phys broadcast and lowest prio [ 903.157464][T30355] input: syz0 as /devices/virtual/input/input108 [ 903.244009][ T5711] usb 5-1: Using ep0 maxpacket: 8 [ 903.250900][ T5711] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 903.263370][ T5711] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 903.281269][ T5711] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 903.290268][ T5711] usb 5-1: Product: syz [ 903.295092][ T5711] usb 5-1: Manufacturer: syz [ 903.300269][ T5711] usb 5-1: SerialNumber: syz [ 903.560702][ T5711] usb 5-1: Invalid connection information received from device [ 903.703448][T21124] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 903.746187][ T5711] usb 6-1: USB disconnect, device number 9 [ 903.817771][ T5360] usb 5-1: USB disconnect, device number 123 [ 903.863951][T21124] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 903.872168][T21124] usb 4-1: config 0 has no interface number 0 [ 903.880366][T21124] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.895504][T21124] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.905667][T21124] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 903.915007][T21124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.930560][T21124] usb 4-1: config 0 descriptor?? [ 904.200937][T30376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.211128][T30376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.754398][T30376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4352'. [ 904.812498][ T9] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 904.995120][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.020962][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.040250][T21124] prodikeys 0003:041E:2801.0055: collection stack underflow [ 905.049160][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 905.058389][T21124] prodikeys 0003:041E:2801.0055: item 0 1 0 12 parsing failed [ 905.071896][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.080996][T21124] prodikeys 0003:041E:2801.0055: hid parse failed [ 905.092566][T21124] prodikeys 0003:041E:2801.0055: probe with driver prodikeys failed with error -22 [ 905.166245][ T9] usb 5-1: config 0 descriptor?? [ 905.217616][ T5711] usb 4-1: USB disconnect, device number 10 [ 905.295682][ T5726] usb 1-1: USB disconnect, device number 113 [ 905.661412][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 905.683342][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 905.700259][ T9] usb 5-1: USB disconnect, device number 124 [ 906.141384][T30488] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4361'. [ 906.153447][ T5711] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 906.170027][T30488] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.177725][T30488] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.229563][T30488] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4361'. [ 906.333989][ T5711] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 906.346033][ T5711] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 906.359403][ T5711] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40 [ 906.368549][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.377986][ T5711] usb 4-1: Product: syz [ 906.382265][ T5711] usb 4-1: Manufacturer: syz [ 906.387222][ T5711] usb 4-1: SerialNumber: syz [ 906.433025][ T5360] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 906.482459][ T9] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 906.584322][ T5360] usb 6-1: config index 0 descriptor too short (expected 2304, got 36) [ 906.604647][ T5360] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 906.619790][ T5711] usb 4-1: unit 7 not found! [ 906.629062][ T5360] usb 6-1: can't read configurations, error -22 [ 906.639235][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 906.654454][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 906.669445][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 906.703257][ T5711] usb 4-1: USB disconnect, device number 11 [ 906.772364][ T5360] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 906.895301][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 906.920192][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 906.933439][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.975368][ T9] usb 5-1: config 0 descriptor?? [ 906.984258][ T5360] usb 6-1: config index 0 descriptor too short (expected 2304, got 36) [ 907.015350][ T5360] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 907.039224][ T5360] usb 6-1: can't read configurations, error -22 [ 907.052949][ T5360] usb usb6-port1: attempt power cycle [ 907.413184][ T5360] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 907.434662][ T9] plantronics 0003:047F:FFFF.0056: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 907.455925][ T5360] usb 6-1: config index 0 descriptor too short (expected 2304, got 36) [ 907.485062][ T5360] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 907.504748][ T5360] usb 6-1: can't read configurations, error -22 [ 907.653508][ T5360] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 907.694947][ T5360] usb 6-1: config index 0 descriptor too short (expected 2304, got 36) [ 907.713361][ T807] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 907.721214][ T5360] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 907.734410][ T5360] usb 6-1: can't read configurations, error -22 [ 907.752655][ T5360] usb usb6-port1: unable to enumerate USB device [ 907.895577][ T807] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 907.917518][ T807] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 907.942478][ T5690] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 907.950089][ T807] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 907.960239][ T807] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 907.971486][ T807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.001121][ T807] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 908.117928][ T5690] usb 4-1: unable to get BOS descriptor or descriptor too short [ 908.143123][ T5690] usb 4-1: not running at top speed; connect to a high speed hub [ 908.167548][ T5690] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 77, changing to 4 [ 908.197325][ T5690] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 908.215373][ T807] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 908.229197][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.240240][ T5690] usb 4-1: Product: syz [ 908.247669][ T5690] usb 4-1: Manufacturer: syz [ 908.252789][ T5690] usb 4-1: SerialNumber: syz [ 908.265426][ T9] usb 1-1: USB disconnect, device number 114 [ 908.346898][ T807] usb 5-1: USB disconnect, device number 125 [ 908.494702][ T5690] snd-ua101 4-1:1.1: invalid format type [ 908.505165][ T5690] snd-ua101 4-1:1.0: invalid num_altsetting [ 908.524833][ T5690] usb 4-1: USB disconnect, device number 12 [ 909.643787][T30657] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4371'. [ 910.034277][ T9] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 910.223182][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 910.245530][ T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 910.246441][T30710] fuse: Bad value for 'fd' [ 910.284580][ T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 910.318700][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 910.349836][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 910.386742][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 910.407258][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 910.421447][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 910.472859][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.526409][ T9] usb 5-1: config 0 descriptor?? [ 910.768920][ T9] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 126 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 911.088974][T30695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.130135][T30695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.512659][ T5690] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 911.682383][ T5726] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 911.689534][ T5690] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 911.711232][ T5690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 911.725824][ T5360] usb 5-1: USB disconnect, device number 126 [ 911.748584][ T5690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 911.759529][ T5360] usblp0: removed [ 911.797722][ T5690] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 911.838948][ T5726] usb 6-1: unable to get BOS descriptor or descriptor too short [ 911.851759][ T5690] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 911.862767][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.899988][ T5690] usb 4-1: config 0 descriptor?? [ 911.971912][ T5726] usb 6-1: not running at top speed; connect to a high speed hub [ 912.044032][ T5726] usb 6-1: config 5 has an invalid interface number: 246 but max is 0 [ 912.090250][ T5726] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 912.150588][ T5726] usb 6-1: config 5 has no interface number 0 [ 912.162955][ T5726] usb 6-1: config 5 interface 246 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 912.184536][ T5726] usb 6-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 912.218662][ T5726] usb 6-1: config 5 interface 246 has no altsetting 0 [ 912.244076][ T5726] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 912.254624][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.269589][ T5726] usb 6-1: Product: syz [ 912.280273][ T5726] usb 6-1: Manufacturer: syz [ 912.290500][ T5726] usb 6-1: SerialNumber: syz [ 912.457752][T30805] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4388'. [ 912.501607][T30805] syzkaller0: entered promiscuous mode [ 912.529336][T30805] syzkaller0: entered allmulticast mode [ 912.568816][ T5690] plantronics 0003:047F:FFFF.0057: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 912.590222][ T5726] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 912.660494][T22143] usb 6-1: Failed to submit usb control message: -71 [ 912.671516][ T5726] usb 6-1: USB disconnect, device number 14 [ 912.705472][T22143] usb 6-1: unable to send the bmi data to the device: -71 [ 912.727986][T22143] usb 6-1: unable to get target info from device [ 912.765542][T22143] usb 6-1: could not get target info (-71) [ 912.777346][T22143] usb 6-1: could not probe fw (-71) [ 913.508685][ T5690] usb 4-1: USB disconnect, device number 13 [ 913.577580][T30867] IPVS: set_ctl: invalid protocol: 45002 100.1.1.2:20002 [ 914.382365][ T5360] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 914.433419][ T5690] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 914.515636][ T5360] usb 5-1: device descriptor read/64, error -71 [ 914.552679][T21124] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 914.594880][ T5690] usb 4-1: Using ep0 maxpacket: 32 [ 914.598204][ T5690] usb 4-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice= 0.40 [ 914.598232][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.598252][ T5690] usb 4-1: Product: syz [ 914.598267][ T5690] usb 4-1: Manufacturer: syz [ 914.598282][ T5690] usb 4-1: SerialNumber: syz [ 914.719672][T21124] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 914.733099][T21124] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 914.733128][T21124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 914.733149][T21124] usb 1-1: Product: syz [ 914.733163][T21124] usb 1-1: Manufacturer: syz [ 914.733174][T21124] usb 1-1: SerialNumber: syz [ 914.769688][ T5360] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 914.872628][ T5690] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 914.873467][ T5690] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 914.873794][ T5690] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 914.880546][ T5690] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 914.880876][ T5690] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 914.881194][ T5690] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 914.886551][ T5690] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 914.888099][ T5690] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 914.892885][ T5360] usb 5-1: device descriptor read/64, error -71 [ 914.987844][T21124] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 115 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 914.995682][ T5690] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 915.021489][ T5360] usb usb5-port1: attempt power cycle [ 915.021813][ T5690] usb 4-1: USB disconnect, device number 14 [ 915.058929][ T7726] udevd[7726]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 915.372668][ T5360] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 915.394305][ T5360] usb 5-1: device descriptor read/8, error -71 [ 915.634117][ T5360] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 915.655034][ T5360] usb 5-1: device descriptor read/8, error -71 [ 915.660019][T30957] trusted_key: encrypted_key: master key parameter '' is invalid [ 915.762834][ T5360] usb usb5-port1: unable to enumerate USB device [ 916.392493][ T5683] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 916.554193][ T5683] usb 6-1: Using ep0 maxpacket: 8 [ 916.562221][ T5683] usb 6-1: unable to get BOS descriptor or descriptor too short [ 916.571411][ T5683] usb 6-1: config 248 has no interfaces? [ 916.581875][ T5683] usb 6-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=4c.13 [ 916.600774][ T5683] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.620080][ T5683] usb 6-1: Product: syz [ 916.630931][ T5683] usb 6-1: SerialNumber: syz [ 916.858860][ T5683] usb 6-1: USB disconnect, device number 15 [ 917.101042][ T9] usb 1-1: USB disconnect, device number 115 [ 917.123215][ T9] usblp0: removed [ 917.217464][T30981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4399'. [ 917.246798][T30981] ipvlan2: entered allmulticast mode [ 917.252138][T30981] syz_tun: entered allmulticast mode [ 917.732369][ T5718] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 917.904695][ T5718] usb 6-1: config 2 has an invalid interface number: 174 but max is 0 [ 917.919443][ T5718] usb 6-1: config 2 has no interface number 0 [ 917.936986][ T5718] usb 6-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 917.974345][ T5718] usb 6-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 918.006161][ T5718] usb 6-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 103 [ 918.034504][ T5718] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 918.044864][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.060580][ T5718] usb 6-1: Product: syz [ 918.072429][ T5718] usb 6-1: Manufacturer: syz [ 918.084520][ T5718] usb 6-1: SerialNumber: syz [ 918.117180][T31002] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 918.136692][T31002] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 918.405544][ T5718] usb 6-1: probing VID:PID(0424:012C) [ 918.417765][ T5718] usb 6-1: vub300 testing BULK IN EndPoint(0) 8E [ 918.425319][ T5718] usb 6-1: vub300 testing BULK IN EndPoint(1) 82 [ 918.433283][ T5718] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 918.458127][ T5718] vub300 6-1:2.174: probe with driver vub300 failed with error -22 [ 918.480068][ T5718] usb 6-1: USB disconnect, device number 16 [ 918.481141][T31050] loop2: detected capacity change from 0 to 7 [ 918.516850][T31050] Dev loop2: unable to read RDB block 7 [ 918.539924][T31050] loop2: unable to read partition table [ 918.558920][T31050] loop2: partition table beyond EOD, truncated [ 918.574665][T31050] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 918.983528][ T5718] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 919.165186][ T5718] usb 4-1: unable to get BOS descriptor or descriptor too short [ 919.182220][ T5718] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 919.200865][ T5718] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 919.221495][ T5718] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 919.231195][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.253375][ T5718] usb 4-1: Product: syz [ 919.264796][T31083] gre0: left promiscuous mode [ 919.281719][ T5718] usb 4-1: Manufacturer: syz [ 919.288750][T31083] bond0: left promiscuous mode [ 919.297176][T31083] bond_slave_0: left promiscuous mode [ 919.308659][ T5718] usb 4-1: SerialNumber: syz [ 919.308891][T31083] bond_slave_1: left promiscuous mode [ 919.342231][T31083] team0: left promiscuous mode [ 919.359761][T31083] team_slave_0: left promiscuous mode [ 919.361760][ T5718] usb 4-1: selecting invalid altsetting 1 [ 919.377681][T31083] team_slave_1: left promiscuous mode [ 919.414139][ T5718] usb 4-1: unit 6 not found! [ 919.537944][T31083] bond1: left promiscuous mode [ 919.558023][T31067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.585440][T31067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.594154][T31083] bond3: left promiscuous mode [ 919.605716][T31083] bridge1: left promiscuous mode [ 920.308296][ T5718] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 920.367537][ T30] audit: type=1800 audit(1779268681.099:5099): pid=31117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4412" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 920.507703][ T5718] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 920.535157][ T5718] usb 4-1: USB disconnect, device number 15 [ 920.580959][ T7726] udevd[7726]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 920.761719][T31144] FAULT_INJECTION: forcing a failure. [ 920.761719][T31144] name failslab, interval 1, probability 0, space 0, times 0 [ 920.774388][T31144] CPU: 0 UID: 0 PID: 31144 Comm: syz.4.4417 Tainted: G L syzkaller #0 PREEMPT(full) [ 920.774413][T31144] Tainted: [L]=SOFTLOCKUP [ 920.774419][T31144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 920.774427][T31144] Call Trace: [ 920.774434][T31144] [ 920.774438][T31144] dump_stack_lvl+0xe8/0x150 [ 920.774455][T31144] should_fail_ex+0x412/0x560 [ 920.774472][T31144] should_failslab+0xa8/0x100 [ 920.774488][T31144] ? skb_clone+0x212/0x3a0 [ 920.774502][T31144] kmem_cache_alloc_noprof+0x87/0x650 [ 920.774514][T31144] ? dev_queue_xmit_nit+0x2d/0xad0 [ 920.774532][T31144] skb_clone+0x212/0x3a0 [ 920.774544][T31144] ? dev_queue_xmit_nit+0x59f/0xad0 [ 920.774558][T31144] dev_queue_xmit_nit+0x29a/0xad0 [ 920.774571][T31144] ? dev_queue_xmit_nit+0x2d/0xad0 [ 920.774588][T31144] dev_hard_start_xmit+0x1c1/0x830 [ 920.774610][T31144] __dev_queue_xmit+0x14d9/0x3950 [ 920.774624][T31144] ? __dev_queue_xmit+0x2b6/0x3950 [ 920.774640][T31144] ? __pfx___dev_queue_xmit+0x10/0x10 [ 920.774652][T31144] ? _copy_from_iter+0x2d3/0x1670 [ 920.774664][T31144] ? rcu_is_watching+0x15/0xb0 [ 920.774676][T31144] ? trace_kmem_cache_alloc+0x29/0xe0 [ 920.774703][T31144] ? __pfx__copy_from_iter+0x10/0x10 [ 920.774729][T31144] ? skb_set_owner_w+0x180/0x3e0 [ 920.774751][T31144] ? pppoe_sendmsg+0x556/0x7c0 [ 920.774769][T31144] pppoe_sendmsg+0x5a7/0x7c0 [ 920.774785][T31144] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 920.774799][T31144] ? aa_sock_msg_perm+0xf1/0x1b0 [ 920.774813][T31144] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 920.774828][T31144] ____sys_sendmsg+0x972/0x9f0 [ 920.774842][T31144] ? __might_fault+0xaf/0x130 [ 920.774857][T31144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 920.774875][T31144] ? import_iovec+0x73/0xa0 [ 920.774890][T31144] ___sys_sendmsg+0x2a5/0x360 [ 920.774903][T31144] ? __lock_acquire+0x6b5/0x2cf0 [ 920.774916][T31144] ? __pfx____sys_sendmsg+0x10/0x10 [ 920.774928][T31144] ? __lock_acquire+0x6b5/0x2cf0 [ 920.774940][T31144] ? kstrtouint+0x6e/0xe0 [ 920.774971][T31144] __sys_sendmmsg+0x27c/0x4e0 [ 920.774988][T31144] ? __pfx___sys_sendmmsg+0x10/0x10 [ 920.775000][T31144] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 920.775023][T31144] ? ksys_write+0x242/0x270 [ 920.775037][T31144] ? __pfx_ksys_write+0x10/0x10 [ 920.775053][T31144] __x64_sys_sendmmsg+0xa0/0xc0 [ 920.775067][T31144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.775078][T31144] do_syscall_64+0x15f/0xf80 [ 920.775091][T31144] ? trace_irq_disable+0x3b/0x140 [ 920.775108][T31144] ? clear_bhb_loop+0x40/0x90 [ 920.775121][T31144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.775130][T31144] RIP: 0033:0x7f9c5e99ce59 [ 920.775140][T31144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.775148][T31144] RSP: 002b:00007f9c5f8b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 920.775159][T31144] RAX: ffffffffffffffda RBX: 00007f9c5ec15fa0 RCX: 00007f9c5e99ce59 [ 920.775166][T31144] RDX: 00000000000003e8 RSI: 0000200000002340 RDI: 0000000000000003 [ 920.775172][T31144] RBP: 00007f9c5f8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 920.775184][T31144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 920.775190][T31144] R13: 00007f9c5ec16038 R14: 00007f9c5ec15fa0 R15: 00007f9c5ed3fa48 [ 920.775205][T31144] [ 921.164838][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 921.304109][T31151] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 921.352940][T31151] team0 (unregistering): Port device team_slave_0 removed [ 921.404941][T31160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4421'. [ 921.417290][T31151] team0 (unregistering): Failed to send options change via netlink (err -105) [ 921.426870][T31151] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 921.440665][T31151] team0 (unregistering): Port device team_slave_1 removed [ 921.549403][T31178] netlink: 39 bytes leftover after parsing attributes in process `syz.6.4422'. [ 921.583748][T31178] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4422'. [ 921.643150][ T5718] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 921.733482][T31192] loop5: detected capacity change from 0 to 7 [ 921.774799][T31192] Dev loop5: unable to read RDB block 7 [ 921.787996][T31192] loop5: unable to read partition table [ 921.803041][T31192] loop5: partition table beyond EOD, truncated [ 921.803958][T31202] netlink: 'syz.4.4424': attribute type 6 has an invalid length. [ 921.841078][T31192] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 921.875564][ T5718] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 921.885921][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.894198][ T5718] usb 6-1: Product: syz [ 921.898927][ T5718] usb 6-1: Manufacturer: syz [ 921.908332][ T5718] usb 6-1: SerialNumber: syz [ 921.916446][ T5718] usb 6-1: config 0 descriptor?? [ 921.924319][ T5718] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 922.002437][ T5683] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 922.072434][ T807] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 922.164150][ T5683] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 922.186058][ T5683] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 922.195494][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 922.214038][ T5683] usb 4-1: Product: syz [ 922.220377][ T5683] usb 4-1: Manufacturer: syz [ 922.226338][ T5683] usb 4-1: SerialNumber: syz [ 922.236575][ T807] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 922.247096][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.272745][ T807] usb 5-1: Product: syz [ 922.279940][ T807] usb 5-1: Manufacturer: syz [ 922.285082][ T807] usb 5-1: SerialNumber: syz [ 922.470477][ T5683] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 922.703101][ T807] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 922.721101][ T807] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 922.797389][ T5718] gspca_stk1135: reg_w 0x5 err -71 [ 922.811807][ T5718] gspca_stk1135: serial bus timeout: status=0x00 [ 922.825717][ T5718] gspca_stk1135: Sensor write failed [ 922.834113][ T5718] gspca_stk1135: serial bus timeout: status=0x00 [ 922.847554][ T5718] gspca_stk1135: Sensor write failed [ 922.856827][ T5718] gspca_stk1135: serial bus timeout: status=0x00 [ 922.863270][ T30] audit: type=1800 audit(1779268683.589:5100): pid=31225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4428" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 922.886269][ T5718] gspca_stk1135: Sensor read failed [ 922.891607][ T5718] gspca_stk1135: serial bus timeout: status=0x00 [ 922.906733][ T5718] gspca_stk1135: Sensor read failed [ 922.915426][ T5718] gspca_stk1135: Detected sensor type unknown (0x0) [ 922.927144][ T5718] gspca_stk1135: serial bus timeout: status=0x00 [ 922.940818][ T5718] gspca_stk1135: Sensor read failed [ 922.950401][ T5718] gspca_stk1135: serial bus timeout: status=0x00 [ 922.960886][ T5718] gspca_stk1135: Sensor read failed [ 922.969691][ T5718] gspca_stk1135: serial bus timeout: status=0x00 [ 922.977848][ T5718] gspca_stk1135: Sensor write failed [ 922.983390][ T5718] gspca_stk1135: serial bus timeout: status=0x00 [ 922.989872][ T5718] gspca_stk1135: Sensor write failed [ 923.000565][ T5718] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 923.021865][ T5718] usb 6-1: USB disconnect, device number 17 [ 923.469923][ T4994] Dev loop5: unable to read RDB block 7 [ 923.486689][ T4994] loop5: unable to read partition table [ 923.501036][ T4994] loop5: partition table beyond EOD, truncated [ 923.579057][ T4994] Dev loop5: unable to read RDB block 7 [ 923.594747][ T4994] loop5: unable to read partition table [ 923.605781][ T4994] loop5: partition table beyond EOD, truncated [ 923.762002][T31249] FAULT_INJECTION: forcing a failure. [ 923.762002][T31249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 923.775800][T31249] CPU: 1 UID: 0 PID: 31249 Comm: syz.0.4431 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.775827][T31249] Tainted: [L]=SOFTLOCKUP [ 923.775833][T31249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 923.775843][T31249] Call Trace: [ 923.775851][T31249] [ 923.775859][T31249] dump_stack_lvl+0xe8/0x150 [ 923.775884][T31249] should_fail_ex+0x412/0x560 [ 923.775916][T31249] _copy_from_user+0x2d/0xb0 [ 923.775941][T31249] ___sys_sendmsg+0x1c6/0x360 [ 923.775965][T31249] ? __lock_acquire+0x6b5/0x2cf0 [ 923.775987][T31249] ? __pfx____sys_sendmsg+0x10/0x10 [ 923.776009][T31249] ? __lock_acquire+0x6b5/0x2cf0 [ 923.776032][T31249] ? kstrtouint+0x6e/0xe0 [ 923.776089][T31249] __sys_sendmmsg+0x27c/0x4e0 [ 923.776119][T31249] ? __pfx___sys_sendmmsg+0x10/0x10 [ 923.776141][T31249] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 923.776181][T31249] ? ksys_write+0x242/0x270 [ 923.776212][T31249] ? __pfx_ksys_write+0x10/0x10 [ 923.776242][T31249] __x64_sys_sendmmsg+0xa0/0xc0 [ 923.776267][T31249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.776285][T31249] do_syscall_64+0x15f/0xf80 [ 923.776311][T31249] ? clear_bhb_loop+0x40/0x90 [ 923.776332][T31249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.776350][T31249] RIP: 0033:0x7fb04e39ce59 [ 923.776367][T31249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.776381][T31249] RSP: 002b:00007fb04f1a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 923.776400][T31249] RAX: ffffffffffffffda RBX: 00007fb04e615fa0 RCX: 00007fb04e39ce59 [ 923.776413][T31249] RDX: 00000000000003e8 RSI: 0000200000002340 RDI: 0000000000000003 [ 923.776424][T31249] RBP: 00007fb04f1a9090 R08: 0000000000000000 R09: 0000000000000000 [ 923.776434][T31249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 923.776444][T31249] R13: 00007fb04e616038 R14: 00007fb04e615fa0 R15: 00007fb04e73fa48 [ 923.776462][T31249] [ 924.042739][ T5718] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 924.202563][ T5718] usb 6-1: Using ep0 maxpacket: 8 [ 924.210332][ T5718] usb 6-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 924.222269][ T5718] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.232177][ T5718] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 924.241338][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.460043][T31242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.473273][T31242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.501809][ T5718] usb 6-1: string descriptor 0 read error: -71 [ 924.509723][ T5718] hub 6-1:32.0: bad descriptor, ignoring hub [ 924.517590][ T5718] hub 6-1:32.0: probe with driver hub failed with error -5 [ 924.604222][ T5718] usb 6-1: USB disconnect, device number 18 [ 924.714643][ T5683] usb 4-1: USB disconnect, device number 16 [ 924.743931][ T5683] usblp0: removed [ 924.792826][ T807] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000044. ret = -EPROTO [ 924.819722][T31290] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 924.842602][ T807] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 924.867918][ T807] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 924.893727][ T807] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 924.904533][ T807] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 924.946615][ T807] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 924.971563][T31298] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4435'. [ 924.983910][ T807] usb 5-1: USB disconnect, device number 5 [ 925.125721][T31310] fuse: Bad value for 'fd' [ 925.563795][T31344] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4442'. [ 925.652883][ T9] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 925.841951][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 925.886416][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 925.912110][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 925.932721][ T9] usb 1-1: Product: syz [ 925.944523][ T9] usb 1-1: Manufacturer: syz [ 925.959322][ T9] usb 1-1: SerialNumber: syz [ 926.217937][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 116 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 926.650629][T31377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.684237][T31377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.706977][T31377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.737113][T31377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.872422][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 927.044384][ T9] usb 4-1: config 6 has an invalid interface number: 250 but max is 0 [ 927.062109][ T9] usb 4-1: config 6 has no interface number 0 [ 927.070079][ T9] usb 4-1: config 6 interface 250 has no altsetting 0 [ 927.080194][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=6288, bcdDevice=27.15 [ 927.090445][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.100051][ T9] usb 4-1: Product: syz [ 927.108080][ T9] usb 4-1: Manufacturer: syz [ 927.118386][ T9] usb 4-1: SerialNumber: syz [ 927.344396][ T9] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6288 [ 927.359954][ T9] gspca_sn9c20x: Write register 1000 failed -71 [ 927.370306][ T9] gspca_sn9c20x: Device initialization failed [ 927.381149][ T9] gspca_sn9c20x 4-1:6.250: probe with driver gspca_sn9c20x failed with error -71 [ 927.404026][ T9] usb 4-1: USB disconnect, device number 17 [ 928.328753][T31446] fuse: Bad value for 'fd' [ 928.413864][ T807] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 928.431630][T31451] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in; [ 928.431630][T31451] program syz.6.4457 not setting count and/or reply_len properly [ 928.478792][T31451] netlink: 'syz.6.4457': attribute type 1 has an invalid length. [ 928.574653][ T807] usb 4-1: device descriptor read/64, error -71 [ 928.643360][ T5718] usb 1-1: USB disconnect, device number 116 [ 928.675754][ T5718] usblp0: removed [ 928.832962][ T807] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 928.975522][ T807] usb 4-1: device descriptor read/64, error -71 [ 928.999207][T31479] IPv6: addrconf: prefix option has invalid lifetime [ 929.083725][ T807] usb usb4-port1: attempt power cycle [ 929.422441][ T807] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 929.443005][ T807] usb 4-1: device descriptor read/8, error -71 [ 929.667560][ T30] audit: type=1326 audit(1779268690.399:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31487 comm="syz.0.4464" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb04e39ce59 code=0x0 [ 929.692821][ T807] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 929.705331][T31489] xt_ecn: cannot match TCP bits for non-tcp packets [ 929.722987][ T807] usb 4-1: device descriptor read/8, error -71 [ 929.832645][ T807] usb usb4-port1: unable to enumerate USB device [ 930.630879][T31504] fuse: Bad value for 'fd' [ 930.912921][ T807] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 931.012829][ T5360] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 931.079833][T31544] input: syz0 as /devices/virtual/input/input111 [ 931.084102][ T807] usb 1-1: config 2 has an invalid interface number: 162 but max is 0 [ 931.109748][ T807] usb 1-1: config 2 has no interface number 0 [ 931.134786][ T807] usb 1-1: config 2 interface 162 has no altsetting 0 [ 931.155501][ T807] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=72.b2 [ 931.175785][ T5360] usb 5-1: Using ep0 maxpacket: 32 [ 931.182440][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.203607][ T5360] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 931.222998][ T807] usb 1-1: Product: syz [ 931.230340][ T5360] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 931.242372][ T807] usb 1-1: Manufacturer: syz [ 931.252346][ T807] usb 1-1: SerialNumber: syz [ 931.275682][ T5360] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 931.312577][ T5360] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 931.357025][ T5360] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 931.372420][ T5360] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.397087][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.405586][ T5360] usb 5-1: Product: syz [ 931.406320][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.415640][ T5360] usb 5-1: Manufacturer: syz [ 931.439600][ T5360] usb 5-1: SerialNumber: syz [ 931.449599][T31551] fuse: Bad value for 'user_id' [ 931.468937][T31551] fuse: Bad value for 'user_id' [ 931.527482][T31506] netlink: 'syz.0.4468': attribute type 12 has an invalid length. [ 931.537354][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 931.559604][ T807] usb 1-1: selecting invalid altsetting 0 [ 931.577766][T31506] netlink: 'syz.0.4468': attribute type 29 has an invalid length. [ 931.598176][ T5360] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input112 [ 931.612449][T31578] trusted_key: encrypted_key: insufficient parameters specified [ 931.629507][T31506] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4468'. [ 931.692719][T31506] netlink: 'syz.0.4468': attribute type 1 has an invalid length. [ 931.722245][T31506] netlink: 'syz.0.4468': attribute type 2 has an invalid length. [ 931.742738][ T5360] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 931.745614][T31506] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4468'. [ 931.780920][ T5360] (id 0x00) [ 931.784393][ T807] usb 1-1: USB disconnect, device number 117 [ 931.922178][ T7726] udevd[7726]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.162/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 931.958249][ T5360] rc_core: IR keymap rc-imon-pad not found [ 931.972975][ T5360] Registered IR keymap rc-empty [ 931.995248][ T5360] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 932.041257][ T5360] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 932.055081][T31609] fuse: Bad value for 'fd' [ 932.093573][ T5360] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 932.117482][ T5360] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input113 [ 932.152615][ T5360] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:6> initialized [ 932.852488][ T5683] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 933.025715][ T5683] usb 1-1: unable to get BOS descriptor or descriptor too short [ 933.034507][ T5683] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 933.044861][ T5683] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 933.054014][ T5683] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 933.065037][ T5683] usb 1-1: config 1 interface 1 has no altsetting 0 [ 933.075584][ T5683] usb 1-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.50 [ 933.084854][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.093160][ T5683] usb 1-1: Product: syz [ 933.097405][ T5683] usb 1-1: Manufacturer: syz [ 933.102020][ T5683] usb 1-1: SerialNumber: syz [ 933.132492][ T5360] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 933.314023][ T5360] usb 4-1: Using ep0 maxpacket: 16 [ 933.328395][ T5360] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 933.339836][ T5683] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 933.351013][ T5683] usb 1-1: 1:1 : unsupported format bits 0xffffec08 [ 933.360799][ T5683] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 933.375020][ T5360] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 933.376057][ T5683] usb 1-1: selecting invalid altsetting 0 [ 933.402725][ T5360] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 933.403501][ T5683] usb 1-1: selecting invalid altsetting 0 [ 933.425987][ T5360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 933.426110][ T5683] usb 1-1: unit 2 not found! [ 933.442479][ T5683] usb 1-1: unit 8: unexpected type 0x0c [ 933.448103][ T5360] usb 4-1: SerialNumber: syz [ 933.506275][ T5360] usb 4-1: 0:2 : does not exist [ 933.516447][ T5683] usb 1-1: USB disconnect, device number 118 [ 933.912483][ T5360] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 933.955237][ T5360] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 933.965619][T31520] imon:send_packet: task interrupted [ 933.973823][T31520] imon:send_packet: packet tx failed (-512) [ 933.984000][ T5360] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 933.997595][T31520] imon:vfd_write: send packet #2 failed [ 934.005603][ T5360] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 934.057895][ T5360] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 934.069624][ T5726] usb 5-1: USB disconnect, device number 6 [ 934.191154][T31714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4489'. [ 934.228137][ T5360] usb 4-1: USB disconnect, device number 22 [ 934.924554][ T807] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 935.076868][T31784] xt_hashlimit: size too large, truncated to 1048576 [ 935.083894][ T807] usb 1-1: device descriptor read/64, error -71 [ 935.090326][T31784] xt_hashlimit: max too large, truncated to 1048576 [ 935.165385][T31786] loop9: detected capacity change from 0 to 4096 [ 935.222860][ T5683] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 935.342961][ T807] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 935.405737][ T5683] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 935.477074][ T5683] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 935.498274][ T807] usb 1-1: device descriptor read/64, error -71 [ 935.499297][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 935.512972][ T5683] usb 5-1: Product: syz [ 935.517177][ T5683] usb 5-1: Manufacturer: syz [ 935.521799][ T5683] usb 5-1: SerialNumber: syz [ 935.643027][ T807] usb usb1-port1: attempt power cycle [ 935.775621][ T5683] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 936.012894][ T807] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 936.075711][ T807] usb 1-1: device descriptor read/8, error -71 [ 936.087550][ T30] audit: type=1326 audit(1779268696.819:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31820 comm="syz.6.4502" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffad979ce59 code=0x0 [ 936.301195][ T5639] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 936.353478][ T807] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 936.396813][ T807] usb 1-1: device descriptor read/8, error -71 [ 936.524051][ T807] usb usb1-port1: unable to enumerate USB device [ 936.958768][T31886] binder: 31884:31886 ioctl c0306201 200000000080 returned -14 [ 936.997307][T31886] binder: 31884:31886 ioctl c0306201 2000000003c0 returned -14 [ 937.015032][T31890] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4515'. [ 937.858845][ T9] usb 5-1: USB disconnect, device number 7 [ 937.876604][ T9] usblp0: removed [ 937.992401][ T5718] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 938.154977][ T5718] usb 4-1: Using ep0 maxpacket: 8 [ 938.170599][ T5718] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 938.179934][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.209137][ T5639] Bluetooth: hci4: unexpected event 0x01 length: 4 > 1 [ 938.210391][ T5718] usb 4-1: Product: syz [ 938.228140][ T5718] usb 4-1: Manufacturer: syz [ 938.234699][ T5718] usb 4-1: SerialNumber: syz [ 938.249151][ T5718] usb 4-1: config 0 descriptor?? [ 938.276999][ T5718] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 938.292765][ T5718] dvb-usb: bulk message failed: -22 (2/0) [ 938.298915][ T5718] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 938.310908][ T5718] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 938.321854][ T5718] usb 4-1: media controller created [ 938.355662][ T5718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 938.400813][ T5718] dvb-usb: bulk message failed: -22 (1/0) [ 938.406964][ T5718] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 938.421129][ T5718] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input114 [ 938.451654][ T5639] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 938.518058][ T5718] dvb-usb: schedule remote query interval to 50 msecs. [ 938.532161][ T5718] dvb-usb: bulk message failed: -22 (2/0) [ 938.556414][ T5718] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 938.585129][ T5711] dvb-usb: bulk message failed: -22 (1/0) [ 938.598439][ T5711] dvb-usb: error while querying for an remote control event. [ 938.621522][ T5718] usb 4-1: USB disconnect, device number 23 [ 938.666629][T31986] IPVS: sed: FWM 3 0x00000003 - no destination available [ 938.732439][ T5683] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 938.746372][ T5718] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 938.886442][ T5683] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 938.904064][ T5683] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 938.932574][ T5683] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 938.962321][ T5683] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 938.982337][ T5683] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 939.003982][ T5683] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 939.022501][ T5683] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 939.042334][ T5683] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 939.054125][ T5683] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 939.065346][ T5683] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 939.077718][ T5683] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 939.085319][ T5683] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 939.096178][ T5683] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 939.111198][ T5683] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 939.138971][ T5683] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 939.185672][ T5683] usb 6-1: string descriptor 0 read error: -22 [ 939.192162][ T5683] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 939.212172][ T5683] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.243900][ T5683] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 939.505530][ T5726] usb 6-1: USB disconnect, device number 19 [ 939.546105][T32034] netlink: 'syz.0.4543': attribute type 25 has an invalid length. [ 939.564934][T32034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4543'. [ 939.596800][T22143] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.596935][T32034] netlink: 'syz.0.4543': attribute type 25 has an invalid length. [ 939.631812][T32034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4543'. [ 939.632075][T22143] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.658899][T22143] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.668047][T22143] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.361612][T32086] Cannot find add_set index 65534 as target [ 940.432705][ T5718] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 940.593100][ T5718] usb 1-1: Using ep0 maxpacket: 8 [ 940.616593][ T5718] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 940.633461][T32101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 940.640342][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.657204][ T5718] usb 1-1: Product: syz [ 940.665623][ T5718] usb 1-1: Manufacturer: syz [ 940.673594][ T5718] usb 1-1: SerialNumber: syz [ 940.692192][ T5718] usb 1-1: config 0 descriptor?? [ 940.716749][ T5718] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 940.730059][ T5718] dvb-usb: bulk message failed: -22 (2/0) [ 940.758189][ T5718] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 940.776558][ T5718] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 940.786278][ T5718] usb 1-1: media controller created [ 940.818423][ T5718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 940.937243][ T5718] dvb-usb: bulk message failed: -22 (1/0) [ 940.983835][ T5718] DVB: Unable to find symbol mt352_attach() [ 940.990068][ T5718] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 941.138419][T32072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.177030][ T5718] rc_core: IR keymap rc-dvico-portable not found [ 941.184166][T32072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.202675][ T5718] Registered IR keymap rc-empty [ 941.212859][ T5718] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 941.250103][ T5718] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input115 [ 941.301807][ T5718] dvb-usb: schedule remote query interval to 100 msecs. [ 941.313830][T32138] usb usb7: usbfs: process 32138 (syz.4.4566) did not claim interface 0 before use [ 941.333022][ T5718] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 941.343318][T32138] usb usb7: selecting invalid altsetting 6 [ 941.364675][ T5718] usb 1-1: USB disconnect, device number 123 [ 941.597579][ T5718] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 941.871813][T32168] syzkaller1: entered promiscuous mode [ 941.892474][T32168] syzkaller1: entered allmulticast mode [ 942.513302][ T5639] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 942.526367][ T5639] Bluetooth: hci2: Injecting HCI hardware error event [ 942.537151][T27487] Bluetooth: hci2: hardware error 0x00 [ 942.693186][T32192] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.700868][T32192] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.933764][T32192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 942.955634][T32192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.169047][T12388] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.184079][T12388] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.209422][T12388] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.233341][T12388] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.414404][T32217] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 944.288984][T32295] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(16) [ 944.295621][T32295] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 944.304699][T32295] vhci_hcd vhci_hcd.0: Device attached [ 944.346807][T32296] vhci_hcd: connection closed [ 944.348510][T12388] vhci_hcd vhci_hcd.0: stop threads [ 944.360593][T12388] vhci_hcd vhci_hcd.0: release socket [ 944.372821][T12388] vhci_hcd vhci_hcd.0: disconnect device [ 944.492901][ T5683] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 944.609823][T27487] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 944.654040][ T5683] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 944.669806][T32315] netlink: 'syz.4.4599': attribute type 1 has an invalid length. [ 944.680364][ T5683] usb 4-1: config 0 interface 0 has no altsetting 0 [ 944.690836][ T5683] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 944.701518][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.710101][ T5683] usb 4-1: Product: syz [ 944.742642][ T5683] usb 4-1: Manufacturer: syz [ 944.747575][ T5683] usb 4-1: SerialNumber: syz [ 944.756401][ T5683] usb 4-1: config 0 descriptor?? [ 944.767040][ T5683] usb 4-1: selecting invalid altsetting 0 [ 944.811563][T32315] 8021q: adding VLAN 0 to HW filter on device bond4 [ 944.987209][T32290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.998695][T32290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.038881][T32290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4595'. [ 945.258277][T32386] loop2: detected capacity change from 0 to 7 [ 945.276477][T32386] Dev loop2: unable to read RDB block 7 [ 945.290727][T32386] loop2: unable to read partition table [ 945.308264][ T9] usb 4-1: USB disconnect, device number 24 [ 945.326705][T32386] loop2: partition table beyond EOD, truncated [ 945.335925][T32386] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 945.512590][ T5683] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 945.654171][ T5683] usb 6-1: device descriptor read/64, error -71 [ 945.892720][ T5683] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 945.910396][T32441] netlink: 'syz.3.4612': attribute type 1 has an invalid length. [ 945.942947][T21124] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 946.037607][ T5683] usb 6-1: device descriptor read/64, error -71 [ 946.052658][ T9] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 946.102394][T21124] usb 5-1: Using ep0 maxpacket: 32 [ 946.110292][T21124] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.125887][T21124] usb 5-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 946.135956][T21124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.144577][T21124] usb 5-1: Product: syz [ 946.149005][T21124] usb 5-1: Manufacturer: syz [ 946.154455][ T5683] usb usb6-port1: attempt power cycle [ 946.161701][T21124] usb 5-1: SerialNumber: syz [ 946.170610][T21124] usb 5-1: config 0 descriptor?? [ 946.214071][ T9] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 946.223865][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.237747][ T9] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 946.248381][ T9] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 946.258513][ T9] usb 1-1: Manufacturer: syz [ 946.269866][ T9] usb 1-1: config 0 descriptor?? [ 946.284946][ T5360] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 946.342587][ T9] rc_core: IR keymap rc-hauppauge not found [ 946.348758][ T9] Registered IR keymap rc-empty [ 946.358575][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 946.378954][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input116 [ 946.392205][T21124] usb 5-1: USB disconnect, device number 8 [ 946.420462][ T9] ------------[ cut here ]------------ [ 946.426416][ T9] usb 1-1: BOGUS control dir, pipe 80007c80 doesn't match bRequestType 20 [ 946.435120][ T9] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#0: kworker/0:0/9 [ 946.445259][ T9] Modules linked in: [ 946.450553][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 946.461452][ T9] Tainted: [L]=SOFTLOCKUP [ 946.462364][ T5360] usb 4-1: Using ep0 maxpacket: 16 [ 946.465811][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 946.481015][ T9] Workqueue: usb_hub_wq hub_event [ 946.486263][ T9] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 946.492028][ T9] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 946.511688][ T9] RSP: 0018:ffffc900000e6ce8 EFLAGS: 00010246 [ 946.518498][ T9] RAX: 0000000000000000 RBX: ffff88802998f600 RCX: 0000000080007c80 [ 946.527005][ T9] RDX: ffff88801feddce0 RSI: ffffffff8c809880 RDI: ffffffff903e3630 [ 946.535304][ T9] RBP: 1ffff1100674634a R08: 0000000000000020 R09: 1ffff9200001cd6c [ 946.543525][ T9] R10: dffffc0000000000 R11: fffff5200001cd6d R12: ffff88803405f100 [ 946.551482][ T9] R13: ffff888033a31a50 R14: 0000000080007c80 R15: ffff88801feddce0 [ 946.559754][ T9] FS: 0000000000000000(0000) GS:ffff888125289000(0000) knlGS:0000000000000000 [ 946.568967][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 946.572055][ T5360] usb 4-1: too many configurations: 75, using maximum allowed: 8 [ 946.575928][ T9] CR2: 0000556b207de168 CR3: 0000000033f5a000 CR4: 00000000003526f0 [ 946.585824][ T5360] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 946.592783][ T9] Call Trace: [ 946.604687][ T9] [ 946.608028][ T9] ? swiotlb_dev_init+0xd/0x50 [ 946.614122][ T9] igorplugusb_probe+0x812/0xc70 [ 946.614767][ T5360] usb 4-1: can't read configurations, error -61 [ 946.619430][ T9] usb_probe_interface+0x659/0xc70 [ 946.630818][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 946.636762][ T9] really_probe+0x267/0xaf0 [ 946.641469][ T9] __driver_probe_device+0x1ef/0x380 [ 946.646978][ T9] driver_probe_device+0x4f/0x240 [ 946.651996][ T9] __device_attach_driver+0x279/0x430 [ 946.657587][ T9] bus_for_each_drv+0x258/0x2f0 [ 946.662819][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 946.668745][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 946.674145][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 946.679337][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 946.685156][ T9] __device_attach+0x2c5/0x450 [ 946.690086][ T9] ? __pfx___device_attach+0x10/0x10 [ 946.695508][ T9] ? _raw_spin_unlock+0x28/0x50 [ 946.700362][ T9] device_initial_probe+0xa1/0xd0 [ 946.705404][ T9] bus_probe_device+0x12a/0x220 [ 946.710241][ T9] device_add+0x7e9/0xbb0 [ 946.714581][ T9] usb_set_configuration+0x1a87/0x2110 [ 946.720043][ T9] usb_generic_driver_probe+0x8d/0x150 [ 946.725524][ T9] usb_probe_device+0x1c4/0x3b0 [ 946.730389][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 946.735777][ T9] really_probe+0x267/0xaf0 [ 946.740288][ T9] __driver_probe_device+0x1ef/0x380 [ 946.745597][ T9] driver_probe_device+0x4f/0x240 [ 946.750613][ T9] __device_attach_driver+0x279/0x430 [ 946.758530][ T9] bus_for_each_drv+0x258/0x2f0 [ 946.763546][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 946.769431][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 946.774814][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 946.780001][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 946.785866][ T9] __device_attach+0x2c5/0x450 [ 946.790642][ T9] ? __pfx___device_attach+0x10/0x10 [ 946.796145][ T9] ? _raw_spin_unlock+0x28/0x50 [ 946.800993][ T9] device_initial_probe+0xa1/0xd0 [ 946.806195][ T9] bus_probe_device+0x12a/0x220 [ 946.811057][ T9] device_add+0x7e9/0xbb0 [ 946.815429][ T9] usb_new_device+0xa08/0x16f0 [ 946.820207][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 946.825447][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 946.830659][ T9] hub_event+0x2a1c/0x4f30 [ 946.835360][ T9] ? do_raw_spin_unlock+0xf5/0x210 [ 946.840506][ T9] ? __pfx_hub_event+0x10/0x10 [ 946.845339][ T9] ? process_scheduled_works+0xa70/0x1860 [ 946.851086][ T9] ? process_scheduled_works+0xa70/0x1860 [ 946.856864][ T9] ? process_scheduled_works+0xa70/0x1860 [ 946.862632][ T9] process_scheduled_works+0xb5d/0x1860 [ 946.868227][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 946.874260][ T9] ? assign_work+0x3d5/0x5e0 [ 946.878839][ T9] worker_thread+0xa53/0xfc0 [ 946.883474][ T9] kthread+0x389/0x470 [ 946.887553][ T9] ? __pfx_worker_thread+0x10/0x10 [ 946.892685][ T9] ? __pfx_kthread+0x10/0x10 [ 946.897450][ T9] ret_from_fork+0x514/0xb70 [ 946.902031][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 946.907271][ T9] ? __switch_to+0xc79/0x1410 [ 946.911976][ T9] ? __pfx_kthread+0x10/0x10 [ 946.916665][ T9] ret_from_fork_asm+0x1a/0x30 [ 946.921465][ T9] [ 946.924504][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 946.931768][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 946.942419][ T9] Tainted: [L]=SOFTLOCKUP [ 946.946725][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 946.956770][ T9] Workqueue: usb_hub_wq hub_event [ 946.961783][ T9] Call Trace: [ 946.965045][ T9] [ 946.967962][ T9] vpanic+0x56c/0xa60 [ 946.971930][ T9] ? __pfx__printk+0x10/0x10 [ 946.976509][ T9] ? __pfx_vpanic+0x10/0x10 [ 946.980992][ T9] ? is_bpf_text_address+0x292/0x2b0 [ 946.986256][ T9] ? is_bpf_text_address+0x26/0x2b0 [ 946.991442][ T9] panic+0xc5/0xd0 [ 946.995144][ T9] ? __pfx_panic+0x10/0x10 [ 946.999544][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 947.004469][ T9] __warn+0x315/0x4c0 [ 947.008429][ T9] ? usb_submit_urb+0x1053/0x18b0 [ 947.013433][ T9] ? usb_submit_urb+0x1053/0x18b0 [ 947.018434][ T9] __report_bug+0x29a/0x540 [ 947.022922][ T9] ? usb_submit_urb+0x1053/0x18b0 [ 947.027927][ T9] ? __pfx___report_bug+0x10/0x10 [ 947.032943][ T9] ? usb_submit_urb+0x111a/0x18b0 [ 947.037950][ T9] ? usb_submit_urb+0x1115/0x18b0 [ 947.042958][ T9] report_bug_entry+0x19a/0x290 [ 947.047796][ T9] ? usb_submit_urb+0x1115/0x18b0 [ 947.052795][ T9] ? usb_submit_urb+0x111a/0x18b0 [ 947.057794][ T9] handle_bug+0xce/0x200 [ 947.062014][ T9] exc_invalid_op+0x1a/0x50 [ 947.066494][ T9] asm_exc_invalid_op+0x1a/0x20 [ 947.071320][ T9] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 947.076927][ T9] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 947.096510][ T9] RSP: 0018:ffffc900000e6ce8 EFLAGS: 00010246 [ 947.102559][ T9] RAX: 0000000000000000 RBX: ffff88802998f600 RCX: 0000000080007c80 [ 947.110508][ T9] RDX: ffff88801feddce0 RSI: ffffffff8c809880 RDI: ffffffff903e3630 [ 947.118457][ T9] RBP: 1ffff1100674634a R08: 0000000000000020 R09: 1ffff9200001cd6c [ 947.126406][ T9] R10: dffffc0000000000 R11: fffff5200001cd6d R12: ffff88803405f100 [ 947.134358][ T9] R13: ffff888033a31a50 R14: 0000000080007c80 R15: ffff88801feddce0 [ 947.142326][ T9] ? usb_submit_urb+0x10a4/0x18b0 [ 947.147330][ T9] ? swiotlb_dev_init+0xd/0x50 [ 947.152078][ T9] igorplugusb_probe+0x812/0xc70 [ 947.156997][ T9] usb_probe_interface+0x659/0xc70 [ 947.162094][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 947.167705][ T9] really_probe+0x267/0xaf0 [ 947.172198][ T9] __driver_probe_device+0x1ef/0x380 [ 947.177463][ T9] driver_probe_device+0x4f/0x240 [ 947.182478][ T9] __device_attach_driver+0x279/0x430 [ 947.187859][ T9] bus_for_each_drv+0x258/0x2f0 [ 947.192690][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 947.198562][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 947.203911][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 947.209092][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 947.214879][ T9] __device_attach+0x2c5/0x450 [ 947.219625][ T9] ? __pfx___device_attach+0x10/0x10 [ 947.224891][ T9] ? _raw_spin_unlock+0x28/0x50 [ 947.229724][ T9] device_initial_probe+0xa1/0xd0 [ 947.234731][ T9] bus_probe_device+0x12a/0x220 [ 947.239563][ T9] device_add+0x7e9/0xbb0 [ 947.243875][ T9] usb_set_configuration+0x1a87/0x2110 [ 947.249327][ T9] usb_generic_driver_probe+0x8d/0x150 [ 947.254768][ T9] usb_probe_device+0x1c4/0x3b0 [ 947.259601][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 947.264951][ T9] really_probe+0x267/0xaf0 [ 947.269437][ T9] __driver_probe_device+0x1ef/0x380 [ 947.274701][ T9] driver_probe_device+0x4f/0x240 [ 947.279707][ T9] __device_attach_driver+0x279/0x430 [ 947.285062][ T9] bus_for_each_drv+0x258/0x2f0 [ 947.289894][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 947.295769][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 947.301115][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 947.306297][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 947.312088][ T9] __device_attach+0x2c5/0x450 [ 947.316836][ T9] ? __pfx___device_attach+0x10/0x10 [ 947.322104][ T9] ? _raw_spin_unlock+0x28/0x50 [ 947.326937][ T9] device_initial_probe+0xa1/0xd0 [ 947.331948][ T9] bus_probe_device+0x12a/0x220 [ 947.336779][ T9] device_add+0x7e9/0xbb0 [ 947.341093][ T9] usb_new_device+0xa08/0x16f0 [ 947.345842][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 947.351020][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 947.356201][ T9] hub_event+0x2a1c/0x4f30 [ 947.360598][ T9] ? do_raw_spin_unlock+0xf5/0x210 [ 947.365720][ T9] ? __pfx_hub_event+0x10/0x10 [ 947.370462][ T9] ? process_scheduled_works+0xa70/0x1860 [ 947.376166][ T9] ? process_scheduled_works+0xa70/0x1860 [ 947.381859][ T9] ? process_scheduled_works+0xa70/0x1860 [ 947.387555][ T9] process_scheduled_works+0xb5d/0x1860 [ 947.393098][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 947.399058][ T9] ? assign_work+0x3d5/0x5e0 [ 947.403628][ T9] worker_thread+0xa53/0xfc0 [ 947.408219][ T9] kthread+0x389/0x470 [ 947.412279][ T9] ? __pfx_worker_thread+0x10/0x10 [ 947.417383][ T9] ? __pfx_kthread+0x10/0x10 [ 947.421952][ T9] ret_from_fork+0x514/0xb70 [ 947.426523][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 947.431612][ T9] ? __switch_to+0xc79/0x1410 [ 947.436278][ T9] ? __pfx_kthread+0x10/0x10 [ 947.440852][ T9] ret_from_fork_asm+0x1a/0x30 [ 947.445603][ T9] [ 947.449018][ T9] Kernel Offset: disabled [ 947.453327][ T9] Rebooting in 86400 seconds..