last executing test programs: 9.466382938s ago: executing program 4 (id=1355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 9.334603737s ago: executing program 4 (id=1356): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x80000dc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x7, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x9, 0x2aa2c1) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000000d, 0x8001, 0x299c0, 0x7, 0x800, 0xfc5, 0xfffffffe, 0x5}, 0x0) syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0x0, @loopback}}}, 0x108) preadv(r4, &(0x7f00000001c0), 0x0, 0x5b, 0x100) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) 8.173104628s ago: executing program 2 (id=1366): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f00000002c0)=@hat={'permhat ', 0x3}, 0x1b) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={'ip6tnl0\x00', {0x2, 0x4e20, @private=0xa010100}}) socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x864, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "50237174b24efde7c8a4211d2656ed5126c3a76401998702", "5b56b1d62096d70077410d545942e35f41fc2f88abdab2c13f59e8a5b008c7b3"}}}}}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000340), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x45, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], "223427d5c9a46b9fa14172170a0135"}}}}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r5, 0x64, 0xfffffffffffffffd}, 0x33) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x100000000, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r7, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x400}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xfffffffd}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040044}, 0x800) unshare(0x2c020400) 7.960871537s ago: executing program 2 (id=1368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0xc3, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000080000030000000140004006e69637666300000000000000000000008000500060000000c001780040007"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40048a4) 7.397179036s ago: executing program 2 (id=1371): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000d40)={'wlan1\x00', 0x0}) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000001140)={r2, &(0x7f0000001040)='-{[\'{{\x00', 0x200000, &(0x7f0000001080)={@align=0x6, {0xc, 0x0, 0x1, 0x2}}, 0x7f, &(0x7f00000010c0)={@_ha_fsid}, &(0x7f0000001100)=0x40}) getsockopt$IPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x43, &(0x7f0000001180)={'ah\x00'}, &(0x7f00000011c0)=0x1e) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010047bd70008a5cbe7668878600", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4008006) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x7, 0x0, 0x2009, 0x0, 0xfffffe0000000001, 0xffffffff, 0xfffffffe}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7.011266001s ago: executing program 2 (id=1375): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000000109040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, 'v#!f'}]}}, 0x0}, 0x0) 6.857498179s ago: executing program 3 (id=1377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x40001) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000003d000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4004840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000210a012990000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 6.406660293s ago: executing program 3 (id=1378): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r4 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000755000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4de, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541}) r7 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000180)=ANY=[], 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$kcm(0x29, 0x7, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 5.761262031s ago: executing program 4 (id=1380): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x34565348, 0x7, 0x5, [{0x6, 0xd381}, {0xdc5, 0x7}, {0x0, 0x5}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x3, 0x6}, {0x1, 0x5}, {0xffffffff, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x5}}) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) syz_usb_control_io$printer(r3, &(0x7f0000000740)={0x14, &(0x7f00000006c0)={0x40, 0x11, 0x2b, {0x2b, 0x4, "4899276b03aa4965d3fc53a9bc1c0eea1258ea032ce5bef2c9ed80d6b7e267b9cdb52d32f79bc9f350"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, &(0x7f00000009c0)={0x34, &(0x7f0000001680)=ANY=[@ANYBLOB="000d9b00000052ae734f8c86d8edf706ce338e4db467d06bd02a059a19504708999d9e1c9f7f8ee223ded593681ef9470a1db1f947048507315d038f10016837eccd3c9c66710547d4e5990b67cba44dd5780b3f1938f57522e21336ffc57b44d53e482081997b22477d4d4250e4fffc41701541c6e51c9bfe762e08216e7e1ecf3e2c84c86f72f1bec7eb7ce36084106daef74d952ff7a93208eb715c54cf7e67"], &(0x7f0000000800)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000880)={0x20, 0x0, 0xa1, {0x9f, "2bc61000dbe05652ded4f1d82a12ceefaa6aecca82068fd3144ff8d00aacd876cb6a35ca9fdf21ae8fa8c1ba7044b89f3d73d20070ffd7917ab7fba2e100b3ab94aaa23ce9d0cb9ba8023301279f933fbc53eccedc7021bfbf2110bfb2bbd30b96fd459b1fec23e69d23127d77f72e24492205924272dfaea2776d2a1b50b5c496516e14a2b05c21d28947d5dbd23e4d0d472e78db5b60207ae0cccd991f21"}}, &(0x7f0000000940)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000980)={0x20, 0x0, 0x1, 0x10}}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000005c0)={0x1, r1}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) getresgid(0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r6) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x18, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xfffffffe000000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) ptrace(0x10, r4) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000b40)={0x2c, &(0x7f0000000a00)=ANY=[@ANYBLOB="402333000800333076187350ca8fb1c52be807d414f1ed747427c1a489d8923a6304fee8c63cc3db1eadd289536fff67000000000000000000"], &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000000a80)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x21, 0x0, 0xf, 0xff, "95da0c48", "b79ee613"}}, &(0x7f0000000b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x18, 0x8, 0x7, 0x9, 0x5, 0x5}}}, &(0x7f0000001180)={0x84, &(0x7f0000000d40)={0x20, 0x0, 0xbc, "0646dbda2d208bf0d5c143720623a5a566bf9f8196a21c8c1009da21a7bef144e25c70d4c13d9f183fef550c5bc09a3a5410274688f72fdad8582ada1f1504bc8c2b8b740ba33b72276329bee4bdb1aef538e7ee6266973c9fe3c379f3389dc96ac872c2d1670e06f1e7235ba444ad28c036215b842269b96ef050700d11697866def2dda39f562bb74f18c3849a951ae4b93435e26d1061e80e0cf0f6384caa0464406a34039e0e2788186ccf539766c87638fd1a92ec0d9e84c760"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000e80)={0x20, 0x0, 0x8, {0x20, 0x10, [0xfff0]}}, &(0x7f0000000ec0)={0x40, 0x7, 0x2, 0xff6d}, &(0x7f0000000f00)={0x40, 0x9, 0x1}, &(0x7f0000000f40)={0x40, 0xb, 0x2, "9a49"}, &(0x7f0000000f80)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000fc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001000)={0x40, 0x17, 0x6, @random="a8354b7010c3"}, &(0x7f0000001040)={0x40, 0x19, 0x2, "56db"}, &(0x7f0000001080)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000010c0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001100)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001140)={0x40, 0x21, 0x1, 0x5}}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000380)={0x14, &(0x7f00000002c0)={0x60, 0xa, 0x60, {0x60, 0x30, "29eb4bdec39e0d547cae137aa7edc437d09f497340f09465903495a009b5f083218445e1dbcb8bc59b0a55ae89bac83ee00522f775ed23fbfbc11d759139b1d6625e17feb25a3bbec051c5bef05ef3a3eb0b9867bf31e0e6876b9acf49f9"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f00000003c0)={0x40, 0x11, 0x36, "e3a2b834c53239f37aafe3fe6d4162b859b6fb4b09bc11e2c6f615340457a233730b1d919b9f536e4734ac1a74e35a9429b73278290a"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xdf}}) 4.897889206s ago: executing program 2 (id=1384): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x0, 0x208001, 0x0, 0x5000000000, 0xfffffffffffffffa, 0x8000008000000081, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) personality(0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r4, 0x4b4d, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'}) sendmsg$nl_route(r5, 0x0, 0x20000001) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x3c8, 0xffffffff, 0x188, 0xc8, 0xc8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'bridge0\x00', 'wg1\x00'}, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x168, 0x1a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xde, 0x0, 'syz1\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 4.68464571s ago: executing program 3 (id=1385): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000010e439d0"], 0x20}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000000)={'bond0\x00', @ifru_addrs=@in={0x2, 0xe20, @broadcast}}) 4.383016036s ago: executing program 3 (id=1388): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd, 0x800000, &(0x7f0000000080)}) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010106000009040000ff02020000052406800005240002000d240f010000000000000000000424020009058103200000000a09058202200000000009050302", @ANYRESDEC], 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)={0x1, 0x2, 0xa, 0xdc78, 0xf}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$kcm(0x22, 0x2, 0x21) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) r3 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0xde5f, 0x10, 0x2, 0x280, 0x0, r1}, &(0x7f0000002bc0)=0x0, &(0x7f0000002900)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x44054}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0022220000009328337167b31ce93ee977000000007bb1120b3fb3b9585dde850d8518b3"], 0x0}, 0x0) r9 = dup(r7) write$UHID_INPUT(r9, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r9, 0xc0884123, &(0x7f0000000240)={0x5, "832ffce4ac32c3bac927789ef3246169b7bc0c8a5a5caf865bc62044a645f98360c64fbf85de4a7879d0bc6742ebfb29bf4b6a1147a0e33b264450886842ecb1", {0x7, 0x9}}) r10 = fanotify_init(0x1, 0x0) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400202, 0x102) fanotify_mark(r10, 0x71, 0x40000009, r11, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x4) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)="4cc373914b2300d9bf0bf0118e1f826aa677984b79568a174cf71a6b51ea78c5c468710012ba55a04f9598f6386804a573ac01aee6735e7538bbf59b4dc4fce30590c6a3ca2cdf0f9878032c3fc7580d02c898ce6f302cfccd8c0f10760938adc88f9a9f50c2175234d122d0a51861afd877d59635affa0fce52b84f8fd3a0b556f84784a3908bd785ec8e0e147d7a9e961a157de58c2d8158ca3888", 0x9c}, {&(0x7f0000000100)="af", 0x1}], 0x2, 0x9) 3.432189223s ago: executing program 2 (id=1391): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904"], 0x0) r5 = creat(0x0, 0xecf86c37d53049cc) close(r5) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r6 = add_key(0x0, &(0x7f0000000200), &(0x7f00000002c0)="c4c5b73cde1888d2032acb86cce96fc0f6860bcf0873760207ec1df96051fc97ea70c193a71c79b048219cce5e4cb483c9246ee5d7619934c79542642cbdf63b80e9f731cd881baf0011ab434de4e89e45dd5c11ef68e8d729d582be3a0460678f15da23b907aee41a693493776d", 0x6e, 0x0) keyctl$read(0xb, r6, 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)=""/2, &(0x7f00000000c0)=0x2) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknod$loop(0x0, 0x10, 0x1) 3.037289825s ago: executing program 1 (id=1392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200"], 0x88}}, 0x0) 2.944728969s ago: executing program 1 (id=1393): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x70, &(0x7f0000001b40)={&(0x7f0000000040)={0x24, r0, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) 2.856423608s ago: executing program 1 (id=1394): socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000440)="90e7bc", 0x3}, {0x0}, {&(0x7f00000002c0)="d6a5a87479c1f4b466100d1c655210006555e3e974fdb971b60fe5960bcd802fe3f7da93acf4e6414158438095dc8ca02f5134d635bfc8e5c5704af7e46dd4506719ff2fc92cc098786865efc9ab3fd66ceefbe88d4b86b00e4ea2a826593de679ac3994dca676f0c028a6038ff9dd69292b25dbfcfb4e8d447dacb65f81c84f7227e36398ed90ff16107fe10d8243355406f4a2da2aaee7699c89ff633bda5faaadadd7436f964ad0f591b686200d81e3462f65d23bfe9c601678741edf68b6f5f6b0e619c3ead176aea11e716374356b50fe3cc19839bc8ce18564c04e48adb847ae3df86a0fa09271cf05ae6076a91bf0", 0xf2}, {&(0x7f00000003c0)="4af011a9248e03bb2373087ae4012f0f8fb522a49b87a3ec2176e1ac", 0x1c}, {0x0}], 0x5) 2.768448139s ago: executing program 4 (id=1395): r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x21a, 0x40000032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0xffffffffffffff77, 0x10008095, 0x0, 0x0) 1.452925156s ago: executing program 4 (id=1396): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab4", 0x15}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafa", 0x91}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)="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", 0x110}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c5", 0xb3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a80)="e6", 0x1}], 0x1}}], 0x4, 0x2090) sendto(r0, &(0x7f00000002c0)="204c55ddf0c8311af320f7f8f083e0ddeb4d40961ddfae27e2435368a47c", 0x1e, 0x8000, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.34604704s ago: executing program 4 (id=1397): syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) syz_open_dev$dri(&(0x7f0000000100), 0x100000000, 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x7fa, &(0x7f0000000040)={0x0, 0xc8de, 0xfc00, 0x800000a, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x28}}, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) close(r3) 1.222714601s ago: executing program 3 (id=1398): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x34565348, 0x7, 0x5, [{0x6, 0xd381}, {0xdc5, 0x7}, {0x0, 0x5}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x3, 0x6}, {0x1, 0x5}, {0xffffffff, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x5}}) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) syz_usb_control_io$printer(r3, &(0x7f0000000740)={0x14, &(0x7f00000006c0)={0x40, 0x11, 0x2b, {0x2b, 0x4, "4899276b03aa4965d3fc53a9bc1c0eea1258ea032ce5bef2c9ed80d6b7e267b9cdb52d32f79bc9f350"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, &(0x7f00000009c0)={0x34, &(0x7f0000001680)=ANY=[@ANYBLOB="000d9b00000052ae734f8c86d8edf706ce338e4db467d06bd02a059a19504708999d9e1c9f7f8ee223ded593681ef9470a1db1f947048507315d038f10016837eccd3c9c66710547d4e5990b67cba44dd5780b3f1938f57522e21336ffc57b44d53e482081997b22477d4d4250e4fffc41701541c6e51c9bfe762e08216e7e1ecf3e2c84c86f72f1bec7eb7ce36084106daef74d952ff7a93208eb715c54cf7e67"], &(0x7f0000000800)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000880)={0x20, 0x0, 0xa1, {0x9f, "2bc61000dbe05652ded4f1d82a12ceefaa6aecca82068fd3144ff8d00aacd876cb6a35ca9fdf21ae8fa8c1ba7044b89f3d73d20070ffd7917ab7fba2e100b3ab94aaa23ce9d0cb9ba8023301279f933fbc53eccedc7021bfbf2110bfb2bbd30b96fd459b1fec23e69d23127d77f72e24492205924272dfaea2776d2a1b50b5c496516e14a2b05c21d28947d5dbd23e4d0d472e78db5b60207ae0cccd991f21"}}, &(0x7f0000000940)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000980)={0x20, 0x0, 0x1, 0x10}}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000005c0)={0x1, r1}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) getresgid(0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r6) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x18, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xfffffffe000000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) ptrace(0x10, r4) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000b40)={0x2c, &(0x7f0000000a00)=ANY=[@ANYBLOB="402333000800333076187350ca8fb1c52be807d414f1ed747427c1a489d8923a6304fee8c63cc3db1eadd289536fff67000000000000000000"], &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000000a80)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x21, 0x0, 0xf, 0xff, "95da0c48", "b79ee613"}}, &(0x7f0000000b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x18, 0x8, 0x7, 0x9, 0x5, 0x5}}}, &(0x7f0000001180)={0x84, &(0x7f0000000d40)={0x20, 0x0, 0xbc, "0646dbda2d208bf0d5c143720623a5a566bf9f8196a21c8c1009da21a7bef144e25c70d4c13d9f183fef550c5bc09a3a5410274688f72fdad8582ada1f1504bc8c2b8b740ba33b72276329bee4bdb1aef538e7ee6266973c9fe3c379f3389dc96ac872c2d1670e06f1e7235ba444ad28c036215b842269b96ef050700d11697866def2dda39f562bb74f18c3849a951ae4b93435e26d1061e80e0cf0f6384caa0464406a34039e0e2788186ccf539766c87638fd1a92ec0d9e84c760"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000e80)={0x20, 0x0, 0x8, {0x20, 0x10, [0xfff0]}}, &(0x7f0000000ec0)={0x40, 0x7, 0x2, 0xff6d}, &(0x7f0000000f00)={0x40, 0x9, 0x1}, &(0x7f0000000f40)={0x40, 0xb, 0x2, "9a49"}, &(0x7f0000000f80)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000fc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001000)={0x40, 0x17, 0x6, @random="a8354b7010c3"}, &(0x7f0000001040)={0x40, 0x19, 0x2, "56db"}, &(0x7f0000001080)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000010c0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001100)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001140)={0x40, 0x21, 0x1, 0x5}}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000380)={0x14, &(0x7f00000002c0)={0x60, 0xa, 0x60, {0x60, 0x30, "29eb4bdec39e0d547cae137aa7edc437d09f497340f09465903495a009b5f083218445e1dbcb8bc59b0a55ae89bac83ee00522f775ed23fbfbc11d759139b1d6625e17feb25a3bbec051c5bef05ef3a3eb0b9867bf31e0e6876b9acf49f9"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f00000003c0)={0x40, 0x11, 0x36, "e3a2b834c53239f37aafe3fe6d4162b859b6fb4b09bc11e2c6f615340457a233730b1d919b9f536e4734ac1a74e35a9429b73278290a"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xdf}}) 846.27722ms ago: executing program 1 (id=1399): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@gettaction={0x3c, 0x32, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x3c}}, 0x24040084) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{0xffffffffffffffff, &(0x7f0000000300)='skcipher\x00', 0x0, &(0x7f0000000340)={@_ha_fsid={[0x8, 0x7fffffff]}, {0x2, 0x8, 0xd, 0x6}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x7, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740)="01978c1c2cc4b9004d8c4deb4fcffe21aead3de21ade811d2298738aebec76650ec01a668da31d90352fe6a28d60887f03f6cc990debd7581deb98e1ee8d1ebd9fb1664d704ccb614f3a729491d05ec6e2d470e01b64bea7660359aa3b7bcea3be8eb0ba2ee737a7", 0x68, 0x10}, {0x3, 0xe, &(0x7f0000000840)='connmark\x00', &(0x7f0000000880)="3ac464101d90ab5cddcb8c9dc5e1dc21b6565b646537e5a114870a9c8f754c80752823f9ca14accc54f101f0a4c409ed41a469ff8a786510b49d05bd2ed9af612a362e04e137fd89750a55303f30c9505122d3673e4baf03ca8eb6", 0x5b, 0x16}, {0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455e11cd6a694e0fd7d70aa7c9972293343fb", 0x89, 0x20}, {0x1, 0xf000000, &(0x7f0000000a80)=',&)\x00', &(0x7f0000000ac0)="88886b5361134fdedb16b5fed00e7f8d33b43d80a0ef0475884de5ba63f03122236bf35b7873bccbdb42a540fc65df92ab6d7d4c6a6d866aee54763076f1b9bd91477188b15db518401f7b83a01b8e", 0x4f, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80)="04259e439e7a36b5d608631e376f97100b26723336d45c44fd927ae6e950a716363751b014753aad831b9e71ff402ce54d6eab607518bc7e57283d6fa33ed0acc262d06ce5e71a6a5b643aeaf409cee14b", 0x51, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52bca254949b8d5a3813a667bddff8ed771d00fac02a47ea360b4fb9c4f11766880413321bcf2a2e2418a5b5557fd49a10122132756a56f1ce0c5a3f18606e4020d7a32998da87d1d07a07a54054e1f6506fb948b48128d9b35820573bc4492c1e666856d01a112ee09b7d2c04a5370d3b13a71a711337ceb96fb73788a3430d", 0xc9, 0xa}]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000f40), 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 629.256126ms ago: executing program 1 (id=1400): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x2, &(0x7f0000034780)=""/102391, &(0x7f0000000180)=0x18ff7) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x5) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x8, 0x10}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xf04, 0x1, 0xff00}, {0x200, 0x8c5a, 0xcc3f, 0x1, 0x2, 0x2, 0x25d2db1085198a40}}}]}]}]}}]}, 0x5c}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="95", 0x1}], 0x1}, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) r10 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f0000000000)=0x1000) ioctl$SNDCTL_DSP_SETFRAGMENT(r10, 0xc004500a, &(0x7f0000000540)=0x4) read$eventfd(r10, &(0x7f0000000100), 0x8) 490.736326ms ago: executing program 0 (id=1401): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r0, &(0x7f0000000300)='skcipher\x00', 0x0, &(0x7f0000000340)={@_ha_fsid={[0x8, 0x7fffffff]}, {0x2, 0x8, 0xd, 0x6}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x7, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740)="01978c1c2cc4b9004d8c4deb4fcffe21aead3de21ade811d2298738aebec76650ec01a668da31d90352fe6a28d60887f03f6cc990debd7581deb98e1ee8d1ebd9fb1664d704ccb614f3a729491d05ec6e2d470e01b64bea7660359aa3b7bcea3be8eb0ba2ee737a7", 0x68, 0x10}, {0x3, 0xe, &(0x7f0000000840)='connmark\x00', &(0x7f0000000880)="3ac464101d90ab5cddcb8c9dc5e1dc21b6565b646537e5a114870a9c8f754c80752823f9ca14accc54f101f0a4c409ed41a469ff8a786510b49d05bd2ed9af612a362e04e137fd89750a55303f30c9505122d3673e4baf03ca8eb6", 0x5b, 0x16}, {0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455e11cd6a694e0fd7d70aa7c9972293343fb", 0x89, 0x20}, {0x1, 0xf000000, &(0x7f0000000a80)=',&)\x00', &(0x7f0000000ac0)="88886b5361134fdedb16b5fed00e7f8d33b43d80a0ef0475884de5ba63f03122236bf35b7873bccbdb42a540fc65df92ab6d7d4c6a6d866aee54763076f1b9bd91477188b15db518401f7b83a01b8e9e725c9e03e42dbd75278c15a79b544999bb747b4420a855f764", 0x69, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80)="04259e439e7a36b5d608631e376f97100b26723336d45c44fd927ae6e950a716363751b014753aad831b9e71ff402ce54d6eab607518bc7e57283d6fa33ed0acc262d06ce5e71a6a5b643aeaf409cee14b", 0x51, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52bca254949b8d5a3813a667bddff8ed771d00fac02a47ea360b4fb9c4f11766880413321bcf2a2e2418a5b5557fd49a10122132756a56f1ce0c5a3f18606e4020d7a32998da87d1d07a07a54054e1f6506fb948b48128d9b35820573bc4492c1e666856d01a112ee09b7d2c04a5370d3b13a71a711337ceb96fb73788a3430dff796c", 0xcc, 0xa}]}) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 451.65514ms ago: executing program 1 (id=1402): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0x2090) sendto(r0, &(0x7f00000002c0)="204c55ddf0c8311af320f7f8f083e0ddeb4d40961ddfae27e2435368a47c", 0x1e, 0x8000, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 334.976547ms ago: executing program 0 (id=1403): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@gettaction={0x3c, 0x32, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x3c}}, 0x24040084) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r0, &(0x7f0000000300)='skcipher\x00', 0x0, &(0x7f0000000340)={@_ha_fsid={[0x8, 0x7fffffff]}, {0x2, 0x8, 0xd, 0x6}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000600)=0x7}, 0x7, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740), 0x0, 0x10}, {0x3, 0xe, &(0x7f0000000840)='connmark\x00', &(0x7f0000000880)="3ac464101d90ab5cddcb8c9dc5e1dc21b6565b646537e5a114870a9c8f754c80752823f9ca14accc54f101f0a4c409ed41a469ff8a786510b49d05bd2ed9af612a362e04e137fd89750a55303f30c9505122d3673e4baf03ca8eb6", 0x5b, 0x16}, {0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455e11cd6a694e0fd7d70aa7c9972293343fb8f", 0x8a, 0x20}, {0x1, 0xf000000, &(0x7f0000000a80)=',&)\x00', &(0x7f0000000ac0)="88886b5361134fdedb16b5fed00e7f8d33b43d80a0ef0475884de5ba63f03122236bf35b7873bccbdb42a540fc65df92ab6d7d4c6a6d866aee54763076f1b9bd91477188b15db518401f7b83a01b8e9e725c9e03e42dbd75278c15a79b544999bb747b4420a855f764", 0x69, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80)="04259e439e7a36b5d608631e376f97100b26723336d45c44fd927ae6e950a716363751b014753aad831b9e71ff402ce54d6eab607518bc7e57283d6fa33ed0acc262d06ce5e71a6a5b643aeaf409cee14b", 0x51, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52bca254949b8d5a3813a667bddff8ed771d00fac02a47ea360b4fb9c4f11766880413321bcf2a2e2418a5b5557fd49a10122132756a56f1ce0c5a3f18606e4020d7a32998da87d1d07a07a54054e1f6506fb948b48128d9b35820573bc4492c1e666856d01a112ee09b7d2c04a5370d3b13a71a711337ceb96fb73788a3430dff796c2a9bc25120a9c14d002d734d1d25a1", 0xdb, 0xa}]}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r3, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 300.102225ms ago: executing program 0 (id=1404): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@gettaction={0x3c, 0x32, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x3c}}, 0x24040084) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r0, 0x0, 0x0, &(0x7f0000000340)={@_ha_fsid={[0x8, 0x7fffffff]}, {0x2, 0x8, 0xd, 0x6}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000600)=0x7}, 0x7, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740), 0x0, 0x10}, {0x3, 0xe, &(0x7f0000000840)='connmark\x00', &(0x7f0000000880)="3ac464101d90ab5cddcb8c9dc5e1dc21b6565b646537e5a114870a9c8f754c80752823f9ca14accc54f101f0a4c409ed41a469ff8a786510b49d05bd2ed9af612a362e04e137fd89750a55303f30c9505122d3673e4baf03ca8eb6", 0x5b, 0x16}, {0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455e11cd6a694e0fd7d70aa7c9972293343fb8f", 0x8a, 0x20}, {0x1, 0xf000000, &(0x7f0000000a80)=',&)\x00', &(0x7f0000000ac0)="88886b5361134fdedb16b5fed00e7f8d33b43d80a0ef0475884de5ba63f03122236bf35b7873bccbdb42a540fc65df92ab6d7d4c6a6d866aee54763076f1b9bd91477188b15db518401f7b83a01b8e9e725c9e03e42dbd75278c15a79b544999bb747b4420a855f764", 0x69, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80)="04259e439e7a36b5d608631e376f97100b26723336d45c44fd927ae6e950a716363751b014753aad831b9e71ff402ce54d6eab607518bc7e57283d6fa33ed0acc262d06ce5e71a6a5b643aeaf409cee14b", 0x51, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52bca254949b8d5a3813a667bddff8ed771d00fac02a47ea360b4fb9c4f11766880413321bcf2a2e2418a5b5557fd49a10122132756a56f1ce0c5a3f18606e4020d7a32998da87d1d07a07a54054e1f6506fb948b48128d9b35820573bc4492c1e666856d01a112ee09b7d2c04a5370d3b13a71a711337ceb96fb73788a3430dff796c2a9bc25120a9c14d002d734d1d25a1", 0xdb, 0xa}]}) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x481d5) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 261.065511ms ago: executing program 0 (id=1405): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4884}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x4000404) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 203.173685ms ago: executing program 3 (id=1406): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x18, 0x2, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x2000c804) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) creat(0x0, 0x5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4040) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x60842, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_GET_LAPIC(r8, 0x8400ae8e, 0x0) close_range(0xffffffffffffffff, r8, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/hibernate_compression_threads', 0x1, 0x68) write$UHID_INPUT2(r9, &(0x7f0000000bc0)=ANY=[@ANYBLOB="3000edffffff"], 0x6) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='f', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 191.950974ms ago: executing program 0 (id=1407): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab4", 0x15}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafa", 0x91}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)="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", 0x110}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c5", 0xb3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a80)="e6", 0x1}], 0x1}}], 0x4, 0x2090) sendto(r0, &(0x7f00000002c0)="204c55ddf0c8311af320f7f8f083e0ddeb4d40961ddfae27e2435368a47c", 0x1e, 0x8000, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 0 (id=1408): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x6, 0xfffffffffffffffd, 0x8, 0xffffffff}, 0x0) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) fsopen(&(0x7f0000000040)='fuse\x00', 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x40000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) close(r4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r6}, 0x8) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000005000000000000c25c00000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)=ANY=[@ANYBLOB="140000002600010026bdf00000dcdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x20048000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) socket$netlink(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 73/0xa90 [ 311.476068][ T9157] ? __pfx_nl80211_set_interface+0x10/0x10 [ 311.476095][ T9157] ? nl80211_pre_doit+0x4fb/0x930 [ 311.476123][ T9157] genl_family_rcv_msg_doit+0x22a/0x330 [ 311.476152][ T9157] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 311.476188][ T9157] ? bpf_lsm_capable+0x9/0x20 [ 311.476211][ T9157] ? security_capable+0x7e/0x2c0 [ 311.476242][ T9157] genl_rcv_msg+0x61c/0x7a0 [ 311.476270][ T9157] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.476290][ T9157] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 311.476310][ T9157] ? __pfx_nl80211_set_interface+0x10/0x10 [ 311.476331][ T9157] ? __pfx_nl80211_post_doit+0x10/0x10 [ 311.476352][ T9157] ? __lock_acquire+0x6b5/0x2cf0 [ 311.476388][ T9157] netlink_rcv_skb+0x232/0x4b0 [ 311.476416][ T9157] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.476439][ T9157] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.476483][ T9157] ? down_read+0x272/0x2e0 [ 311.476504][ T9157] ? genl_rcv+0xd/0x40 [ 311.476526][ T9157] genl_rcv+0x28/0x40 [ 311.476544][ T9157] netlink_unicast+0x80f/0x9b0 [ 311.476584][ T9157] ? __pfx_netlink_unicast+0x10/0x10 [ 311.476610][ T9157] ? netlink_sendmsg+0x650/0xb40 [ 311.476625][ T9157] ? skb_put+0x11b/0x210 [ 311.476648][ T9157] netlink_sendmsg+0x813/0xb40 [ 311.476675][ T9157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.476695][ T9157] ? aa_sock_msg_perm+0xf1/0x1b0 [ 311.476723][ T9157] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 311.476747][ T9157] ____sys_sendmsg+0x972/0x9f0 [ 311.476777][ T9157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.476808][ T9157] ? import_iovec+0x73/0xa0 [ 311.476831][ T9157] ___sys_sendmsg+0x2a5/0x360 [ 311.476858][ T9157] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.476916][ T9157] ? __fget_files+0x2a/0x420 [ 311.476941][ T9157] ? __fget_files+0x3a0/0x420 [ 311.476977][ T9157] __x64_sys_sendmsg+0x1bd/0x2a0 [ 311.477002][ T9157] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.477033][ T9157] ? __pfx_ksys_write+0x10/0x10 [ 311.477065][ T9157] do_syscall_64+0x14d/0xf80 [ 311.477085][ T9157] ? trace_irq_disable+0x3b/0x150 [ 311.477109][ T9157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.477127][ T9157] ? clear_bhb_loop+0x40/0x90 [ 311.477149][ T9157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.477166][ T9157] RIP: 0033:0x7f6222b9c799 [ 311.477185][ T9157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.477200][ T9157] RSP: 002b:00007f6223b14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.477220][ T9157] RAX: ffffffffffffffda RBX: 00007f6222e15fa0 RCX: 00007f6222b9c799 [ 311.477233][ T9157] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 311.477244][ T9157] RBP: 00007f6223b14090 R08: 0000000000000000 R09: 0000000000000000 [ 311.477255][ T9157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.477266][ T9157] R13: 00007f6222e16038 R14: 00007f6222e15fa0 R15: 00007f6222f3fa48 [ 311.477296][ T9157] [ 311.477384][ T9157] debugfs: out of free dentries, can not create directory 'netdev:wlan0' [ 311.584317][ T797] usb usb5-port1: unable to enumerate USB device [ 312.072737][ T9161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.955'. [ 312.222702][ T9161] bond2 (unregistering): Released all slaves [ 312.554034][ T797] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 312.692498][ T9174] netdevsim netdevsim3: Direct firmware load for / [ 312.692498][ T9174] failed with error -2 [ 312.730320][ T9174] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 312.730320][ T9174] [ 312.809886][ T797] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 312.821169][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.853064][ T797] usb 5-1: Product: syz [ 312.860430][ T797] usb 5-1: Manufacturer: syz [ 312.881151][ T797] usb 5-1: SerialNumber: syz [ 312.908907][ T797] usb 5-1: config 0 descriptor?? [ 315.781826][ T9213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.818829][ T9213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.122750][ T5941] usb 5-1: USB disconnect, device number 66 [ 316.155433][ T5917] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 316.295264][ T5917] usb 3-1: device descriptor read/64, error -71 [ 316.905437][ T5917] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 316.950686][ T9226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.968346][ T9226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.044669][ T5917] usb 3-1: device descriptor read/64, error -71 [ 317.068943][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.075813][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.166370][ T5917] usb usb3-port1: attempt power cycle [ 317.620201][ T9240] netdevsim netdevsim4: Direct firmware load for / [ 317.620201][ T9240] failed with error -2 [ 317.632550][ T5917] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 317.641155][ T9240] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 317.641155][ T9240] [ 317.789808][ T5917] usb 3-1: device descriptor read/8, error -71 [ 318.080507][ T5917] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 318.115236][ T9245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.124753][ T9245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.407797][ T5917] usb 3-1: device descriptor read/8, error -71 [ 318.535589][ T5917] usb usb3-port1: unable to enumerate USB device [ 319.098835][ T9255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.154049][ T5941] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 319.177256][ T9255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.314334][ T5941] usb 1-1: Using ep0 maxpacket: 16 [ 319.371757][ T5941] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.382480][ T5916] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 319.390888][ T5941] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 319.494828][ T797] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 319.516280][ T5941] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 319.639988][ T5916] usb 3-1: unable to get BOS descriptor or descriptor too short [ 319.651552][ T5916] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 319.661585][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.670340][ T5916] usb 3-1: Product: syz [ 319.679729][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.690007][ T5916] usb 3-1: Manufacturer: syz [ 319.695616][ T5916] usb 3-1: SerialNumber: syz [ 319.702999][ T5941] usb 1-1: Product: syz [ 319.709934][ T797] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.726707][ T797] usb 5-1: config 0 interface 0 has no altsetting 0 [ 319.736863][ T5941] usb 1-1: Manufacturer: syz [ 319.749688][ T5941] usb 1-1: SerialNumber: syz [ 319.757109][ T797] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 319.782204][ T5941] usb 1-1: config 0 descriptor?? [ 319.789889][ T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.829552][ T797] usb 5-1: config 0 descriptor?? [ 319.862034][ T797] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 319.951269][ T9253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.985926][ T9253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.398825][ T9263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.983'. [ 320.410951][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 320.422247][ T9263] bridge_slave_1: left allmulticast mode [ 320.428923][ T9263] bridge_slave_1: left promiscuous mode [ 320.435510][ T9263] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.446528][ T9263] bridge_slave_0: left allmulticast mode [ 320.452380][ T9263] bridge_slave_0: left promiscuous mode [ 320.458899][ T9263] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.082220][ T9253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.092719][ T9253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.329903][ T5897] usb 3-1: USB disconnect, device number 53 [ 321.929051][ T5916] usb 1-1: USB disconnect, device number 65 [ 322.117040][ T9277] xt_recent: Unsupported userspace flags (000000de) [ 322.183199][ T9279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.197758][ T9279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.227252][ T5941] usb 5-1: USB disconnect, device number 67 [ 322.324392][ T5916] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 322.559061][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 322.565327][ T29] audit: type=1326 audit(1774321734.772:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca7d9c799 code=0x7ffc0000 [ 322.567287][ T5916] usb 1-1: unable to get BOS descriptor or descriptor too short [ 322.628133][ T5916] usb 1-1: config 4 interface 0 has no altsetting 0 [ 322.641281][ T29] audit: type=1326 audit(1774321734.772:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6ca7d9c799 code=0x7ffc0000 [ 322.642892][ T5916] usb 1-1: string descriptor 0 read error: -22 [ 322.672599][ T5916] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 322.696110][ T5916] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 322.767111][ T29] audit: type=1326 audit(1774321734.772:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca7d9c799 code=0x7ffc0000 [ 322.853842][ T5941] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 322.872352][ T5916] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 322.885196][ T5916] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 322.925646][ T29] audit: type=1326 audit(1774321734.772:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca7d9c799 code=0x7ffc0000 [ 322.943611][ T5916] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 322.962744][ T5916] usb 1-1: media controller created [ 323.005506][ T29] audit: type=1326 audit(1774321734.772:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ca7d9c799 code=0x7ffc0000 [ 323.062471][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 323.149609][ T5916] zl10353_read_register: readreg error (reg=127, ret==0) [ 323.279289][ T29] audit: type=1326 audit(1774321734.782:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca7d9c799 code=0x7ffc0000 [ 323.375487][ T5941] usb 5-1: config 0 has an invalid interface number: 65 but max is 3 [ 323.392433][ T5916] usb 1-1: USB disconnect, device number 66 [ 323.399456][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.442142][ T5941] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 323.475451][ T29] audit: type=1326 audit(1774321734.782:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f6ca7d9c799 code=0x7ffc0000 [ 323.497601][ T5941] usb 5-1: config 0 has no interface number 0 [ 323.513137][ T5941] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=91.34 [ 323.525936][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.538432][ T5941] usb 5-1: Product: syz [ 323.542616][ T5941] usb 5-1: Manufacturer: syz [ 323.552214][ T5941] usb 5-1: SerialNumber: syz [ 323.562786][ T5941] usb 5-1: config 0 descriptor?? [ 323.588154][ T29] audit: type=1326 audit(1774321734.792:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca7d9c799 code=0x7ffc0000 [ 323.752262][ T29] audit: type=1326 audit(1774321734.792:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca7d9c799 code=0x7ffc0000 [ 323.791846][ T29] audit: type=1326 audit(1774321734.792:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.4.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f6ca7d9c799 code=0x7ffc0000 [ 323.823863][ T5828] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 324.074953][ T5828] usb 2-1: Using ep0 maxpacket: 16 [ 324.082962][ T5828] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 324.152315][ T5828] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 324.305462][ T5828] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 324.347581][ T5828] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 254 [ 324.437794][ T5828] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.466467][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 324.532973][ T5828] usb 2-1: SerialNumber: syz [ 324.848535][ T9288] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 324.880472][ T9305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.989788][ T9305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.077879][ T5828] usb 2-1: USB disconnect, device number 70 [ 325.283914][ T5916] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 325.467023][ T5916] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 325.479363][ T5916] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.490066][ T5916] usb 1-1: config 0 interface 0 has no altsetting 0 [ 325.497499][ T5916] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 325.507626][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.518479][ T5916] usb 1-1: config 0 descriptor?? [ 325.681700][ T5941] flexcop_usb: set interface failed. [ 325.692044][ T5941] b2c2_flexcop_usb 5-1:0.65: probe with driver b2c2_flexcop_usb failed with error -22 [ 325.695624][ T5836] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 325.740835][ T5941] usb 5-1: USB disconnect, device number 68 [ 325.832227][ T9318] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1003'. [ 325.905354][ T5897] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 325.913074][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 325.922822][ T5836] usb 3-1: config 1 has an invalid interface number: 228 but max is 0 [ 325.939745][ T5836] usb 3-1: config 1 has no interface number 0 [ 325.950398][ T5916] usbhid 1-1:0.0: can't add hid device: -71 [ 325.950776][ T5836] usb 3-1: config 1 interface 228 has no altsetting 0 [ 325.972798][ T5916] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 326.009494][ T5916] usb 1-1: USB disconnect, device number 67 [ 326.019883][ T5836] usb 3-1: New USB device found, idVendor=0a5c, idProduct=396e, bcdDevice=21.b9 [ 326.039851][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.050977][ T5836] usb 3-1: Product: syz [ 326.056296][ T5836] usb 3-1: Manufacturer: syz [ 326.061139][ T5836] usb 3-1: SerialNumber: syz [ 326.075227][ T5897] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 326.085305][ T5897] usb 2-1: config 0 has no interface number 0 [ 326.091395][ T5897] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 326.106587][ T5897] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 326.132323][ T5897] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 326.146238][ T5897] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 326.160233][ T5897] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 326.171649][ T5897] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 326.187051][ T5897] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 326.198510][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.216454][ T5897] usb 2-1: config 0 descriptor?? [ 326.222435][ T9314] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 326.240485][ T5897] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 326.253876][ T5941] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 326.318529][ T9328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.328347][ T9328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.425801][ T5941] usb 5-1: unable to get BOS descriptor or descriptor too short [ 326.434945][ T5941] usb 5-1: not running at top speed; connect to a high speed hub [ 326.446402][ T5941] usb 5-1: config 3 has an invalid interface number: 12 but max is 0 [ 326.459421][ T9314] ldusb 2-1:0.55: Couldn't submit interrupt_in_urb -90 [ 326.463489][ T5941] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 326.470305][ T5897] usb 2-1: USB disconnect, device number 71 [ 326.492117][ T5941] usb 5-1: config 3 has no interface number 0 [ 326.492997][ T5897] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 326.522019][ T5941] usb 5-1: config 3 interface 12 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 326.552650][ T5941] usb 5-1: config 3 interface 12 has no altsetting 0 [ 326.570684][ T5941] usb 5-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice=8e.39 [ 326.582128][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.593264][ T5941] usb 5-1: Product: syz [ 326.597461][ T5941] usb 5-1: Manufacturer: syz [ 326.602165][ T5941] usb 5-1: SerialNumber: syz [ 326.838957][ T9336] macsec1: entered allmulticast mode [ 326.846269][ T9336] veth1_macvtap: entered allmulticast mode [ 326.852679][ T5941] hub 5-1:3.12: bad descriptor, ignoring hub [ 326.869361][ T9336] veth1_macvtap: left allmulticast mode [ 326.869448][ T5941] hub 5-1:3.12: probe with driver hub failed with error -5 [ 326.912178][ T5941] usb 5-1: USB disconnect, device number 69 [ 328.057185][ T797] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 328.171613][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1021'. [ 328.201467][ T9363] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1021'. [ 328.238468][ T797] usb 5-1: not running at top speed; connect to a high speed hub [ 328.276066][ T797] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 328.306107][ T797] usb 5-1: config 1 interface 0 has no altsetting 0 [ 328.337006][ T797] usb 5-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 328.371088][ T5916] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 328.407614][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.409266][ T5836] usb 3-1: USB disconnect, device number 54 [ 328.452470][ T797] usb 5-1: Product: syz [ 328.479375][ T797] usb 5-1: Manufacturer: syz [ 328.510444][ T797] usb 5-1: SerialNumber: syz [ 328.535969][ T9349] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 328.584264][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 328.595056][ T5916] usb 1-1: config 0 interface 0 has no altsetting 0 [ 328.601966][ T5916] usb 1-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 328.617697][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.656801][ T5916] usb 1-1: config 0 descriptor?? [ 328.675442][ T5916] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 328.697379][ T5916] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 328.718820][ T5916] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 328.743286][ T5916] usb 1-1: media controller created [ 328.794873][ T5836] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 328.809890][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 329.140117][ T9361] netlink: 'syz.0.1020': attribute type 10 has an invalid length. [ 329.172785][ T9361] team0: Device vxcan1 is of different type [ 329.237693][ T9361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.277929][ T9361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.312080][ T797] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input42 [ 329.321665][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 329.437083][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.460744][ T5178] bcm5974 5-1:1.0: could not read from device [ 329.467418][ T5916] set interface failed [ 329.467941][ T5916] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 329.468015][ T5916] error writing reg: 0xff, val: 0x00 [ 329.482507][ T5836] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 329.489711][ T797] usb 5-1: USB disconnect, device number 70 [ 329.527568][ T5836] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 329.552567][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.577891][ T9367] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1022'. [ 329.595782][ T5836] usb 3-1: Product: syz [ 329.605013][ T5836] usb 3-1: Manufacturer: syz [ 329.616658][ T5836] usb 3-1: SerialNumber: syz [ 329.619988][ T5916] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 329.627867][ T5836] usb 3-1: config 0 descriptor?? [ 329.724279][ T5916] usb 1-1: USB disconnect, device number 68 [ 330.295302][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 330.295322][ T29] audit: type=1800 audit(1774321742.492:438): pid=9386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1026" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=28123 res=0 errno=0 [ 330.359892][ T9388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1026'. [ 330.392232][ T9387] FAULT_INJECTION: forcing a failure. [ 330.392232][ T9387] name failslab, interval 1, probability 0, space 0, times 0 [ 330.539175][ T9387] CPU: 0 UID: 0 PID: 9387 Comm: syz.1.1028 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.539202][ T9387] Tainted: [L]=SOFTLOCKUP [ 330.539205][ T9387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 330.539213][ T9387] Call Trace: [ 330.539218][ T9387] [ 330.539224][ T9387] dump_stack_lvl+0xe8/0x150 [ 330.539252][ T9387] should_fail_ex+0x412/0x560 [ 330.539281][ T9387] should_failslab+0xa8/0x100 [ 330.539309][ T9387] __kmalloc_cache_noprof+0x88/0x660 [ 330.539333][ T9387] ? u32_init+0x19e/0x6d0 [ 330.539358][ T9387] u32_init+0x19e/0x6d0 [ 330.539373][ T9387] ? __raw_spin_lock_init+0x45/0x100 [ 330.539385][ T9387] tcf_proto_create+0x248/0x330 [ 330.539399][ T9387] tc_new_tfilter+0x12ff/0x1780 [ 330.539422][ T9387] ? __pfx_tc_new_tfilter+0x10/0x10 [ 330.539432][ T9387] ? is_bpf_text_address+0x26/0x2b0 [ 330.539458][ T9387] ? __pfx_tc_new_tfilter+0x10/0x10 [ 330.539468][ T9387] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 330.539487][ T9387] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 330.539500][ T9387] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 330.539516][ T9387] ? __lock_acquire+0x6b5/0x2cf0 [ 330.539534][ T9387] netlink_rcv_skb+0x232/0x4b0 [ 330.539549][ T9387] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 330.539564][ T9387] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.539583][ T9387] ? netlink_deliver_tap+0x2e/0x1b0 [ 330.539601][ T9387] netlink_unicast+0x80f/0x9b0 [ 330.539618][ T9387] ? __pfx_netlink_unicast+0x10/0x10 [ 330.539631][ T9387] ? netlink_sendmsg+0x650/0xb40 [ 330.539639][ T9387] ? skb_put+0x11b/0x210 [ 330.539652][ T9387] netlink_sendmsg+0x813/0xb40 [ 330.539665][ T9387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.539676][ T9387] ? aa_sock_msg_perm+0xf1/0x1b0 [ 330.539691][ T9387] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 330.539706][ T9387] ____sys_sendmsg+0x972/0x9f0 [ 330.539723][ T9387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.539739][ T9387] ? import_iovec+0x73/0xa0 [ 330.539752][ T9387] ___sys_sendmsg+0x2a5/0x360 [ 330.539765][ T9387] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.539793][ T9387] ? __fget_files+0x2a/0x420 [ 330.539807][ T9387] ? __fget_files+0x3a0/0x420 [ 330.539825][ T9387] __x64_sys_sendmsg+0x1bd/0x2a0 [ 330.539844][ T9387] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 330.539860][ T9387] ? __pfx_ksys_write+0x10/0x10 [ 330.539876][ T9387] do_syscall_64+0x14d/0xf80 [ 330.539888][ T9387] ? trace_irq_disable+0x3b/0x150 [ 330.539902][ T9387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.539912][ T9387] ? clear_bhb_loop+0x40/0x90 [ 330.539924][ T9387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.539934][ T9387] RIP: 0033:0x7f369a19c799 [ 330.539944][ T9387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.539953][ T9387] RSP: 002b:00007f369b07a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.539965][ T9387] RAX: ffffffffffffffda RBX: 00007f369a415fa0 RCX: 00007f369a19c799 [ 330.539972][ T9387] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 000000000000000a [ 330.539978][ T9387] RBP: 00007f369b07a090 R08: 0000000000000000 R09: 0000000000000000 [ 330.539985][ T9387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.539991][ T9387] R13: 00007f369a416038 R14: 00007f369a415fa0 R15: 00007f369a53fa48 [ 330.540006][ T9387] [ 331.318878][ T9402] FAULT_INJECTION: forcing a failure. [ 331.318878][ T9402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.491871][ T9402] CPU: 1 UID: 0 PID: 9402 Comm: syz.1.1034 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.491896][ T9402] Tainted: [L]=SOFTLOCKUP [ 331.491900][ T9402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 331.491906][ T9402] Call Trace: [ 331.491911][ T9402] [ 331.491916][ T9402] dump_stack_lvl+0xe8/0x150 [ 331.491935][ T9402] should_fail_ex+0x412/0x560 [ 331.491952][ T9402] _copy_to_user+0x31/0xb0 [ 331.491968][ T9402] simple_read_from_buffer+0xe1/0x170 [ 331.491985][ T9402] proc_fail_nth_read+0x1bb/0x230 [ 331.492002][ T9402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.492020][ T9402] ? rw_verify_area+0x2a6/0x4d0 [ 331.492030][ T9402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.492044][ T9402] vfs_read+0x20c/0xa70 [ 331.492054][ T9402] ? fdget_pos+0x246/0x320 [ 331.492065][ T9402] ? __pfx___mutex_lock+0x10/0x10 [ 331.492077][ T9402] ? __pfx_vfs_read+0x10/0x10 [ 331.492088][ T9402] ? __fget_files+0x2a/0x420 [ 331.492104][ T9402] ? __fget_files+0x3a0/0x420 [ 331.492117][ T9402] ? __fget_files+0x2a/0x420 [ 331.492135][ T9402] ksys_read+0x150/0x270 [ 331.492146][ T9402] ? __pfx_ksys_read+0x10/0x10 [ 331.492162][ T9402] do_syscall_64+0x14d/0xf80 [ 331.492172][ T9402] ? trace_irq_disable+0x3b/0x150 [ 331.492186][ T9402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.492197][ T9402] ? clear_bhb_loop+0x40/0x90 [ 331.492209][ T9402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.492218][ T9402] RIP: 0033:0x7f369a15cfce [ 331.492228][ T9402] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 331.492237][ T9402] RSP: 002b:00007f369b079fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 331.492248][ T9402] RAX: ffffffffffffffda RBX: 00007f369b07a6c0 RCX: 00007f369a15cfce [ 331.492256][ T9402] RDX: 000000000000000f RSI: 00007f369b07a0a0 RDI: 0000000000000004 [ 331.492262][ T9402] RBP: 00007f369b07a090 R08: 0000000000000000 R09: 0000000000000000 [ 331.492267][ T9402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.492273][ T9402] R13: 00007f369a416038 R14: 00007f369a415fa0 R15: 00007f369a53fa48 [ 331.492288][ T9402] [ 331.722108][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1033'. [ 331.731674][ T9404] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1033'. [ 332.036896][ T5916] usb 3-1: USB disconnect, device number 55 [ 332.126364][ T51] Bluetooth: hci4: Unable to find connection for big 0x00 [ 332.412669][ T9423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.655756][ T5916] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 332.816127][ T5916] usb 3-1: unable to get BOS descriptor or descriptor too short [ 332.841740][ T5916] usb 3-1: not running at top speed; connect to a high speed hub [ 332.855940][ T5916] usb 3-1: config 4 has an invalid interface number: 236 but max is 0 [ 332.865940][ T5916] usb 3-1: config 4 has no interface number 0 [ 332.872107][ T5916] usb 3-1: config 4 interface 236 has no altsetting 0 [ 332.897460][ T5916] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 332.914015][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.951102][ T5916] usb 3-1: Product: syz [ 332.968850][ T5916] usb 3-1: Manufacturer: syz [ 332.981890][ T5916] usb 3-1: SerialNumber: syz [ 333.039490][ T9435] lo: Caught tx_queue_len zero misconfig [ 333.142811][ T9438] program syz.3.1045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 333.242334][ T5897] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 333.404911][ T5897] usb 5-1: device descriptor read/64, error -71 [ 333.413905][ T47] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 333.648477][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 333.655460][ T5897] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 333.666184][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.681098][ T47] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 333.691978][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.718879][ T47] usb 2-1: Product: syz [ 333.726782][ T47] usb 2-1: Manufacturer: syz [ 333.734086][ T47] usb 2-1: SerialNumber: syz [ 333.758401][ T47] usb 2-1: config 0 descriptor?? [ 333.795472][ T5897] usb 5-1: device descriptor read/64, error -71 [ 333.817250][ T5916] ums-jumpshot 3-1:4.236: USB Mass Storage device detected [ 333.849268][ T5916] ums-jumpshot 3-1:4.236: Quirks match for vid 05dc pid 0001: 2 [ 333.889720][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 333.934815][ T5916] usb 3-1: USB disconnect, device number 56 [ 333.934852][ T5897] usb usb5-port1: attempt power cycle [ 333.964800][ T9446] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1047'. [ 334.366456][ T5897] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 334.406681][ T5897] usb 5-1: device descriptor read/8, error -71 [ 334.864407][ T5897] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 334.907385][ T5897] usb 5-1: device descriptor read/8, error -71 [ 335.116096][ T5897] usb usb5-port1: unable to enumerate USB device [ 336.037292][ T9469] lo: Caught tx_queue_len zero misconfig [ 336.104242][ T5916] usb 2-1: USB disconnect, device number 72 [ 336.200578][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'. [ 336.214492][ T9471] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1058'. [ 336.248061][ T2151] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 336.439240][ T2151] usb 5-1: Using ep0 maxpacket: 16 [ 336.466128][ T9484] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 336.501771][ T2151] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.515990][ T2151] usb 5-1: config 0 has no interfaces? [ 336.521513][ T2151] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 336.535937][ T2151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.702372][ T2151] usb 5-1: config 0 descriptor?? [ 336.924999][ T5897] usb 5-1: USB disconnect, device number 75 [ 337.307806][ T2151] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 337.589758][ T2151] usb 1-1: device descriptor read/64, error -71 [ 337.667701][ T9499] bond0: (slave bond_slave_1): Releasing backup interface [ 337.861424][ T9506] bond0: (slave bond_slave_1): Releasing backup interface [ 337.875582][ T2151] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 337.890486][ T9506] FAULT_INJECTION: forcing a failure. [ 337.890486][ T9506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.961609][ T9506] CPU: 0 UID: 0 PID: 9506 Comm: syz.4.1068 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.961639][ T9506] Tainted: [L]=SOFTLOCKUP [ 337.961645][ T9506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 337.961654][ T9506] Call Trace: [ 337.961661][ T9506] [ 337.961668][ T9506] dump_stack_lvl+0xe8/0x150 [ 337.961698][ T9506] should_fail_ex+0x412/0x560 [ 337.961726][ T9506] _copy_from_user+0x2d/0xb0 [ 337.961747][ T9506] ___sys_sendmsg+0x1c6/0x360 [ 337.961769][ T9506] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.961817][ T9506] ? __fget_files+0x2a/0x420 [ 337.961841][ T9506] ? __fget_files+0x3a0/0x420 [ 337.961871][ T9506] __x64_sys_sendmsg+0x1bd/0x2a0 [ 337.961893][ T9506] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 337.961919][ T9506] ? __pfx_ksys_write+0x10/0x10 [ 337.961950][ T9506] do_syscall_64+0x14d/0xf80 [ 337.961978][ T9506] ? trace_irq_disable+0x3b/0x150 [ 337.962003][ T9506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.962022][ T9506] ? clear_bhb_loop+0x40/0x90 [ 337.962043][ T9506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.962061][ T9506] RIP: 0033:0x7f6ca7d9c799 [ 337.962078][ T9506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.962092][ T9506] RSP: 002b:00007f6ca8c44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.962109][ T9506] RAX: ffffffffffffffda RBX: 00007f6ca8016180 RCX: 00007f6ca7d9c799 [ 337.962122][ T9506] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 337.962132][ T9506] RBP: 00007f6ca8c44090 R08: 0000000000000000 R09: 0000000000000000 [ 337.962142][ T9506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.962153][ T9506] R13: 00007f6ca8016218 R14: 00007f6ca8016180 R15: 00007f6ca813fa48 [ 337.962176][ T9506] [ 338.424392][ T2151] usb 1-1: device descriptor read/64, error -71 [ 338.536405][ T2151] usb usb1-port1: attempt power cycle [ 338.894610][ T2151] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 338.928139][ T2151] usb 1-1: device descriptor read/8, error -71 [ 338.999067][ T9517] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 339.305442][ T2151] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 339.339734][ T2151] usb 1-1: device descriptor read/8, error -71 [ 339.456856][ T2151] usb usb1-port1: unable to enumerate USB device [ 339.504380][ T47] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 339.769280][ T47] usb 3-1: not running at top speed; connect to a high speed hub [ 339.779586][ T47] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 339.820288][ T47] usb 3-1: config 1 interface 0 has no altsetting 0 [ 339.848500][ T47] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 339.867767][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.882149][ T47] usb 3-1: Product: syz [ 339.891979][ T47] usb 3-1: Manufacturer: syz [ 339.903579][ T47] usb 3-1: SerialNumber: syz [ 340.205240][ T9527] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 340.435456][ T2151] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 340.473048][ T47] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input46 [ 340.556951][ T5178] bcm5974 3-1:1.0: could not read from device [ 340.569747][ T5178] bcm5974 3-1:1.0: could not read from device [ 340.600361][ T5178] bcm5974 3-1:1.0: could not read from device [ 340.610709][ T47] usb 3-1: USB disconnect, device number 57 [ 340.635607][ T2151] usb 1-1: Using ep0 maxpacket: 16 [ 340.641192][ T5178] bcm5974 3-1:1.0: could not read from device [ 340.655436][ T2151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.699429][ T2151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.726666][ T9545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.736273][ T2151] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 340.740731][ T9545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.783125][ T2151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.810401][ T2151] usb 1-1: config 0 descriptor?? [ 341.418189][ T2151] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 341.456580][ T2151] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 341.466065][ T2151] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 341.492916][ T2151] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 341.520353][ T2151] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 341.532933][ T2151] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 341.541715][ T2151] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 341.552554][ T2151] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 341.563056][ T2151] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 341.585048][ T2151] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 341.601613][ T2151] logitech 0003:046D:C50C.0011: hidraw0: USB HID v0.81 Device [HID 046d:c50c] on usb-dummy_hcd.0-1/input0 [ 341.723840][ T47] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 341.803057][ T9561] ALSA: seq fatal error: cannot create timer (-19) [ 341.816991][ T2151] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 341.870600][ T5917] usb 1-1: USB disconnect, device number 73 [ 341.895389][ T47] usb 3-1: device descriptor read/64, error -71 [ 341.975727][ T29] audit: type=1326 audit(1774321754.222:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.3.1084" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f902899c799 code=0x0 [ 342.000417][ T2151] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 342.012559][ T2151] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.025713][ T2151] usb 5-1: config 0 interface 0 has no altsetting 0 [ 342.032412][ T2151] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 342.042539][ T2151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.056694][ T2151] usb 5-1: config 0 descriptor?? [ 342.084727][ T5836] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 342.133873][ T47] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 342.234885][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 342.241554][ T5836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.254889][ T5836] usb 2-1: config 0 has no interfaces? [ 342.262595][ T5836] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 342.274232][ T47] usb 3-1: device descriptor read/64, error -71 [ 342.281760][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.291909][ T5836] usb 2-1: Product: syz [ 342.300893][ T5836] usb 2-1: Manufacturer: syz [ 342.318537][ T5836] usb 2-1: SerialNumber: syz [ 342.329352][ T5836] usb 2-1: config 0 descriptor?? [ 342.394221][ T47] usb usb3-port1: attempt power cycle [ 342.464473][ T9569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.484732][ T9569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.502131][ T2151] usbhid 5-1:0.0: can't add hid device: -71 [ 342.515272][ T2151] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 342.530434][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1090'. [ 342.548118][ T2151] usb 5-1: USB disconnect, device number 76 [ 342.588057][ T9572] team0: Port device team_slave_0 removed [ 342.743866][ T47] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 342.764449][ T47] usb 3-1: device descriptor read/8, error -71 [ 342.764676][ T5836] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 342.924640][ T5836] usb 1-1: Using ep0 maxpacket: 32 [ 342.931573][ T5836] usb 1-1: unable to get BOS descriptor or descriptor too short [ 342.941554][ T5836] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.953045][ T5836] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 342.965046][ T5836] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 342.978874][ T5836] usb 1-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 342.988960][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.998190][ T5836] usb 1-1: Product: syz [ 343.002380][ T5836] usb 1-1: Manufacturer: syz [ 343.008398][ T5836] usb 1-1: SerialNumber: syz [ 343.014101][ T47] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 343.054873][ T47] usb 3-1: device descriptor read/8, error -71 [ 343.148625][ T51] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 343.174852][ T47] usb usb3-port1: unable to enumerate USB device [ 343.239994][ T5836] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 343.262207][ T5836] usb 1-1: USB disconnect, device number 74 [ 343.304680][ T2151] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 343.454462][ T2151] usb 5-1: Using ep0 maxpacket: 8 [ 343.461293][ T2151] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.490352][ T2151] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 343.499032][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1093'. [ 343.505664][ T2151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 343.522138][ T9582] ip6tnl1: entered allmulticast mode [ 343.531991][ T2151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 343.547395][ T2151] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 343.558973][ T2151] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 343.569530][ T2151] usb 5-1: Product: syz [ 343.575882][ T2151] usb 5-1: Manufacturer: syz [ 343.580488][ T2151] usb 5-1: SerialNumber: syz [ 343.589537][ T2151] usb 5-1: config 0 descriptor?? [ 343.666375][ T2151] rc_core: IR keymap rc-imon-rsc not found [ 343.672358][ T2151] Registered IR keymap rc-empty [ 343.682163][ T2151] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 343.699628][ T2151] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input47 [ 343.715313][ T2151] imon_raw 5-1:0.0: probe with driver imon_raw failed with error -90 [ 343.734141][ T9589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.746308][ T9589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.890693][ T9576] openvswitch: netlink: IP tunnel attribute has 5451 unknown bytes. [ 343.969166][ T2151] usb 5-1: USB disconnect, device number 77 [ 344.419465][ T9596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.433056][ T9596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.706485][ T9596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.716505][ T9596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.884802][ T9607] xt_recent: Unsupported userspace flags (000000de) [ 345.239575][ T797] usb 2-1: USB disconnect, device number 73 [ 345.320620][ T9603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.336721][ T9603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.652327][ T58] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.681280][ T58] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.753119][ T58] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.772754][ T58] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.976526][ T9626] loop2: detected capacity change from 0 to 7 [ 346.005793][ T9626] Dev loop2: unable to read RDB block 7 [ 346.030703][ T9626] loop2: unable to read partition table [ 346.056278][ T9626] loop2: partition table beyond EOD, truncated [ 346.075572][ T9630] fuse: Invalid gid '00000000000000000000006' [ 346.096942][ T9626] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 346.184730][ T9631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.216826][ T9631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.285880][ T797] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 346.446684][ T9635] netlink: 'syz.4.1110': attribute type 1 has an invalid length. [ 346.463827][ T797] usb 3-1: Using ep0 maxpacket: 8 [ 346.480345][ T797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.497501][ T797] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 346.507689][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.521295][ T797] usb 3-1: Product: syz [ 346.526136][ T797] usb 3-1: Manufacturer: syz [ 346.531115][ T797] usb 3-1: SerialNumber: syz [ 346.543945][ T9635] bond1: entered promiscuous mode [ 346.549379][ T9635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.576222][ T797] usb 3-1: config 0 descriptor?? [ 346.662362][ T9637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.762010][ T9637] bond2: entered promiscuous mode [ 346.772478][ T9637] bond1: (slave bond2): Enslaving as an active interface with an up link [ 346.886758][ T617] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.947892][ T9646] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1113'. [ 346.956971][ T617] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.957015][ T617] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.957049][ T617] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.035460][ T9645] bond0: (slave bond_slave_0): Releasing backup interface [ 347.299469][ T9645] team0: Port device team_slave_0 removed [ 347.310728][ T9645] team0: Port device team_slave_1 removed [ 347.317932][ T9645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.330424][ T9645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.348327][ T9645] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 348.628040][ T9657] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1115'. [ 349.240431][ T9] usb 3-1: USB disconnect, device number 62 [ 349.524761][ T5828] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 349.583847][ T47] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 349.766632][ T5828] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 349.792562][ T5828] usb 1-1: config 0 has no interface number 0 [ 349.799766][ T5828] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 349.816628][ T5828] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 349.829367][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 349.838487][ T5828] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 349.851738][ T47] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 349.865526][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 349.885425][ T5828] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 349.897268][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 349.947178][ T5828] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 349.960853][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 349.980272][ T5828] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 349.998743][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 350.020448][ T5828] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 350.035438][ T9] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 350.047904][ T47] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 350.060203][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.068748][ T797] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 350.078736][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.097411][ T5828] usb 1-1: config 0 descriptor?? [ 350.105297][ T47] usb 5-1: Product: syz [ 350.111299][ T9681] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 350.122349][ T47] usb 5-1: Manufacturer: syz [ 350.122418][ T9681] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 350.139598][ T47] usb 5-1: SerialNumber: syz [ 350.158535][ T5828] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 350.170120][ T47] usb 5-1: config 0 descriptor?? [ 350.195772][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 350.207331][ T9] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 350.223132][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 350.237220][ T797] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 350.249785][ T797] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.251130][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 350.275400][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.275448][ T797] usb 2-1: config 0 interface 0 has no altsetting 0 [ 350.285805][ T9] usb 3-1: Product: syz [ 350.334353][ T797] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 350.374090][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.495704][ T9] usb 3-1: Manufacturer: syz [ 350.500410][ T9] usb 3-1: SerialNumber: syz [ 350.517298][ T797] usb 2-1: config 0 descriptor?? [ 350.526409][ T9698] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 350.615435][ T2151] usb 1-1: USB disconnect, device number 75 [ 350.625661][ T2151] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 350.701961][ T47] input input48: Device does not respond to id packet M [ 350.911467][ T47] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 350.924845][ T47] input input48: Device does not respond to id packet P [ 350.932814][ T47] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 350.942657][ T47] input input48: Device does not respond to id packet B [ 350.951034][ T47] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 350.965691][ T47] input input48: Device does not respond to id packet N [ 350.978338][ T47] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 350.994472][ T47] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 351.001103][ T47] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 351.010235][ T47] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 351.024861][ T47] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input48 [ 351.031560][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input49 [ 351.068681][ T5178] bcm5974 3-1:1.0: could not read from device [ 351.080171][ T5178] bcm5974 3-1:1.0: could not read from device [ 351.100351][ T5178] bcm5974 3-1:1.0: could not read from device [ 351.118008][ T9] usb 3-1: USB disconnect, device number 63 [ 351.126592][ T5178] bcm5974 3-1:1.0: could not read from device [ 351.128999][ T47] usb 5-1: USB disconnect, device number 78 [ 351.239184][ T9697] bcm5974 3-1:1.0: could not read from device [ 351.297427][ T797] usbhid 2-1:0.0: can't add hid device: -71 [ 351.310752][ T797] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 351.378433][ T797] usb 2-1: USB disconnect, device number 74 [ 351.756081][ T9705] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1130'. [ 351.774327][ T47] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 351.980206][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 352.017042][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.048907][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.072397][ T47] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 352.095649][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.141097][ T47] usb 5-1: config 0 descriptor?? [ 352.266342][ T9723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.299012][ T9723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.373891][ T5941] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 352.595360][ T47] hid_parser_main: 138 callbacks suppressed [ 352.595435][ T47] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 352.610108][ T5941] usb 3-1: Using ep0 maxpacket: 8 [ 352.758813][ T47] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 352.787748][ T5941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.843866][ T9738] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.860131][ T47] ft260 0003:0403:6030.0012: chip code: 0000 0000 [ 353.067591][ T47] ft260 0003:0403:6030.0012: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 353.080260][ T5941] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 353.110689][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.193906][ T5941] usb 3-1: Product: syz [ 353.198138][ T5941] usb 3-1: Manufacturer: syz [ 353.251796][ T5941] usb 3-1: SerialNumber: syz [ 353.278759][ T47] ft260 0003:0403:6030.0012: failed to retrieve status: -32, no wakeup [ 353.288965][ T5941] usb 3-1: config 0 descriptor?? [ 353.535705][ T9744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.555509][ T9744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.685500][ T2151] usb 5-1: USB disconnect, device number 79 [ 354.506375][ T2151] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 354.761512][ T2151] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 354.779357][ T2151] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.870796][ T2151] usb 2-1: config 0 interface 0 has no altsetting 0 [ 354.888937][ T2151] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 355.015638][ T2151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.041409][ T9752] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1145'. [ 355.068547][ T2151] usb 2-1: config 0 descriptor?? [ 355.431369][ T47] usb 3-1: USB disconnect, device number 64 [ 355.776323][ T2151] usbhid 2-1:0.0: can't add hid device: -71 [ 355.782420][ T2151] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 355.796488][ T2151] usb 2-1: USB disconnect, device number 75 [ 356.094927][ T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 356.134679][ T5836] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 356.257007][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 356.265338][ T9] usb 3-1: config 0 has an invalid interface number: 170 but max is 1 [ 356.274763][ T9] usb 3-1: config 0 has an invalid interface number: 242 but max is 1 [ 356.283118][ T9] usb 3-1: config 0 has no interface number 0 [ 356.292992][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.307827][ T9] usb 3-1: config 0 has no interface number 1 [ 356.318363][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.338622][ T9] usb 3-1: config 0 interface 170 has no altsetting 0 [ 356.351032][ T5836] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 356.388210][ T2151] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 356.459141][ T9] usb 3-1: config 0 interface 242 has no altsetting 0 [ 356.514329][ T9] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice=51.d5 [ 356.527772][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.541420][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.552663][ T9] usb 3-1: Product: syz [ 356.566228][ T9] usb 3-1: Manufacturer: syz [ 356.571966][ T5836] usb 5-1: config 0 descriptor?? [ 356.595409][ T9] usb 3-1: SerialNumber: syz [ 356.619699][ T9] usb 3-1: config 0 descriptor?? [ 356.657558][ T2151] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 356.686927][ T2151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.707324][ T2151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.720407][ T2151] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 356.746322][ T2151] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 356.764820][ T2151] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 356.773179][ T2151] usb 1-1: Manufacturer: syz [ 356.795367][ T2151] usb 1-1: config 0 descriptor?? [ 356.819142][ T5836] usbhid 5-1:0.0: can't add hid device: -71 [ 356.832082][ T5836] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 356.864925][ T5836] usb 5-1: USB disconnect, device number 80 [ 356.900246][ T9] kvaser_usb 3-1:0.170: error -ENODEV: Cannot get usb endpoint(s) [ 357.127534][ T9] kvaser_usb 3-1:0.242: error -ENODEV: Cannot get usb endpoint(s) [ 357.158527][ T9] usb 3-1: USB disconnect, device number 65 [ 357.424784][ T5836] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 357.654475][ T5836] usb 5-1: Using ep0 maxpacket: 16 [ 357.678258][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.691367][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.706060][ T5836] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.40 [ 357.716727][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.756425][ T5836] usb 5-1: config 0 descriptor?? [ 358.167978][ T2151] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 358.191773][ T2151] appleir 0003:05AC:8243.0013: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 358.257890][ T9788] xt_recent: Unsupported userspace flags (000000de) [ 358.267926][ T9787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.284404][ T9787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.330174][ T9787] netlink: 'syz.3.1156': attribute type 2 has an invalid length. [ 358.372057][ T9787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1156'. [ 358.386910][ T51] Bluetooth: hci0: Malformed LE Event: 0x0d [ 358.471262][ T5836] mcp2221 0003:04D8:00DD.0014: item fetching failed at offset 0/1 [ 358.482120][ T5836] mcp2221 0003:04D8:00DD.0014: can't parse reports [ 358.522490][ T5836] mcp2221 0003:04D8:00DD.0014: probe with driver mcp2221 failed with error -22 [ 358.702583][ T5941] usb 5-1: USB disconnect, device number 81 [ 359.032933][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1158'. [ 359.050375][ T9796] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1158'. [ 359.104708][ T5941] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 359.283866][ T5941] usb 2-1: Using ep0 maxpacket: 8 [ 359.291774][ T9800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.311042][ T9800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.330381][ T5941] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.365839][ T5941] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 359.498876][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.526237][ T5941] usb 2-1: Product: syz [ 359.545040][ T5941] usb 2-1: Manufacturer: syz [ 359.577209][ T5941] usb 2-1: SerialNumber: syz [ 359.596062][ T5941] usb 2-1: config 0 descriptor?? [ 359.804454][ T47] usb 1-1: reset high-speed USB device number 76 using dummy_hcd [ 359.864539][ T5828] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 359.934271][ T47] usb 1-1: device descriptor read/64, error -32 [ 360.013414][ T5828] usb 5-1: device descriptor read/64, error -71 [ 360.173942][ T47] usb 1-1: reset high-speed USB device number 76 using dummy_hcd [ 360.181773][ T5941] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 360.199433][ T9809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.208910][ T9809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.264107][ T5828] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 360.323885][ T47] usb 1-1: device descriptor read/64, error -32 [ 360.346520][ T5941] usb 3-1: unable to get BOS descriptor or descriptor too short [ 360.357998][ T5941] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 360.367481][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.375880][ T5941] usb 3-1: Product: syz [ 360.380120][ T5941] usb 3-1: Manufacturer: syz [ 360.385264][ T5941] usb 3-1: SerialNumber: syz [ 360.413715][ T5828] usb 5-1: device descriptor read/64, error -71 [ 360.535137][ T5828] usb usb5-port1: attempt power cycle [ 360.583851][ T47] usb 1-1: reset high-speed USB device number 76 using dummy_hcd [ 360.606102][ T9807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.630259][ T9807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.639321][ T47] usb 1-1: device descriptor read/8, error -32 [ 360.762513][ T9814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.795308][ T9814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.894214][ T5828] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 360.935335][ T5828] usb 5-1: device descriptor read/8, error -71 [ 361.173895][ T5828] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 361.206316][ T5828] usb 5-1: device descriptor read/8, error -71 [ 361.317942][ T5828] usb usb5-port1: unable to enumerate USB device [ 361.541100][ T797] usb 1-1: USB disconnect, device number 76 [ 361.659084][ T9807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.674995][ T9807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.929871][ T5941] usb 3-1: USB disconnect, device number 66 [ 362.101391][ T9] usb 2-1: USB disconnect, device number 76 [ 362.155316][ T5836] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 362.305938][ T9835] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 9835 comm: syz.1.1171) [ 362.325531][ T5836] usb 1-1: Using ep0 maxpacket: 32 [ 362.332562][ T5836] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 362.344250][ T9835] FAULT_INJECTION: forcing a failure. [ 362.344250][ T9835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.359097][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.359623][ T29] audit: type=1800 audit(1774321774.592:440): pid=9835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1171" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=30336 res=0 errno=0 [ 362.490719][ T9835] CPU: 1 UID: 0 PID: 9835 Comm: syz.1.1171 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.490745][ T9835] Tainted: [L]=SOFTLOCKUP [ 362.490751][ T9835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 362.490762][ T9835] Call Trace: [ 362.490848][ T9835] [ 362.490891][ T9835] dump_stack_lvl+0xe8/0x150 [ 362.491026][ T9835] should_fail_ex+0x412/0x560 [ 362.491129][ T9835] _copy_from_user+0x2d/0xb0 [ 362.491196][ T9835] kstrtouint_from_user+0xd6/0x180 [ 362.491223][ T9835] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 362.491292][ T9835] proc_fail_nth_write+0x8e/0x210 [ 362.491340][ T9835] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 362.491369][ T9835] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 362.491393][ T9835] vfs_write+0x29a/0xb90 [ 362.491439][ T9835] ? __pfx_vfs_write+0x10/0x10 [ 362.491457][ T9835] ? __fget_files+0x2a/0x420 [ 362.491497][ T9835] ? __fget_files+0x3a0/0x420 [ 362.491520][ T9835] ? __fget_files+0x2a/0x420 [ 362.491549][ T9835] ksys_write+0x150/0x270 [ 362.491570][ T9835] ? __pfx_ksys_write+0x10/0x10 [ 362.491598][ T9835] do_syscall_64+0x14d/0xf80 [ 362.491720][ T9835] ? trace_irq_disable+0x3b/0x150 [ 362.491762][ T9835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.491796][ T9835] ? clear_bhb_loop+0x40/0x90 [ 362.491816][ T9835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.491833][ T9835] RIP: 0033:0x7f369a15cfce [ 362.491879][ T9835] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 362.491894][ T9835] RSP: 002b:00007f369b079fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 362.491950][ T9835] RAX: ffffffffffffffda RBX: 00007f369b07a6c0 RCX: 00007f369a15cfce [ 362.491963][ T9835] RDX: 0000000000000001 RSI: 00007f369b07a0a0 RDI: 0000000000000004 [ 362.491974][ T9835] RBP: 00007f369b07a090 R08: 0000000000000000 R09: 0000000000000000 [ 362.491985][ T9835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 362.491996][ T9835] R13: 00007f369a416038 R14: 00007f369a415fa0 R15: 00007f369a53fa48 [ 362.492024][ T9835] [ 362.525898][ T5836] usb 1-1: config 0 descriptor?? [ 362.758645][ T5836] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 363.015973][ T5836] gspca_nw80x: reg_w err -71 [ 363.024710][ T5836] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 363.037304][ T5836] usb 1-1: USB disconnect, device number 77 [ 364.501365][ T9848] FAULT_INJECTION: forcing a failure. [ 364.501365][ T9848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.525989][ T9857] netlink: 'syz.4.1179': attribute type 1 has an invalid length. [ 364.677811][ T9848] CPU: 1 UID: 0 PID: 9848 Comm: syz.0.1176 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.677843][ T9848] Tainted: [L]=SOFTLOCKUP [ 364.677850][ T9848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 364.677860][ T9848] Call Trace: [ 364.677869][ T9848] [ 364.677876][ T9848] dump_stack_lvl+0xe8/0x150 [ 364.677908][ T9848] should_fail_ex+0x412/0x560 [ 364.677939][ T9848] _copy_to_user+0x31/0xb0 [ 364.677961][ T9848] copy_siginfo_to_user+0x22/0xc0 [ 364.678027][ T9848] x64_setup_rt_frame+0x77b/0xcb0 [ 364.678077][ T9848] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 364.678107][ T9848] arch_do_signal_or_restart+0x424/0x830 [ 364.678131][ T9848] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 364.678159][ T9848] ? ksys_write+0x242/0x270 [ 364.678187][ T9848] exit_to_user_mode_loop+0x86/0x480 [ 364.678219][ T9848] ? rcu_is_watching+0x15/0xb0 [ 364.678247][ T9848] do_syscall_64+0x32d/0xf80 [ 364.678268][ T9848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.678287][ T9848] ? clear_bhb_loop+0x40/0x90 [ 364.678308][ T9848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.678326][ T9848] RIP: 0033:0x7f6222b5cfce [ 364.678343][ T9848] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 364.678358][ T9848] RSP: 002b:00007f6223b13fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 364.678378][ T9848] RAX: 0000000000000001 RBX: 00007f6223b146c0 RCX: 00007f6222b5cfce [ 364.678390][ T9848] RDX: 0000000000000001 RSI: 00007f6223b14090 RDI: 0000000000000006 [ 364.678401][ T9848] RBP: 00007f6223b14090 R08: 0000000000000000 R09: 0000000000000000 [ 364.678412][ T9848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.678423][ T9848] R13: 00007f6222e16038 R14: 00007f6222e15fa0 R15: 00007f6222f3fa48 [ 364.678451][ T9848] [ 365.145993][ T9857] bond3: entered promiscuous mode [ 365.151356][ T9857] 8021q: adding VLAN 0 to HW filter on device bond3 [ 365.398343][ T9859] 8021q: adding VLAN 0 to HW filter on device bond4 [ 365.417685][ T9859] bond4: entered promiscuous mode [ 365.424819][ T9859] bond3: (slave bond4): Enslaving as an active interface with an up link [ 366.061738][ T5941] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 366.143898][ T797] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 366.236435][ T5941] usb 5-1: unable to get BOS descriptor or descriptor too short [ 366.332041][ T5941] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 366.337328][ T9882] fuse: Unknown parameter '' [ 366.367049][ T9882] tipc: Started in network mode [ 366.372252][ T9882] tipc: Node identity 5aa735994316, cluster identity 4711 [ 366.382568][ T9882] tipc: Enabled bearer , priority 0 [ 366.393123][ T9882] syzkaller0: entered promiscuous mode [ 366.405387][ T9882] syzkaller0: entered allmulticast mode [ 366.477409][ T797] usb 1-1: not running at top speed; connect to a high speed hub [ 366.552818][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.561575][ T5941] usb 5-1: Product: syz [ 366.580849][ T5941] usb 5-1: Manufacturer: syz [ 366.586066][ T797] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 366.621986][ T9884] tipc: Resetting bearer [ 366.647621][ T797] usb 1-1: config 1 interface 0 has no altsetting 0 [ 366.675236][ T9881] tipc: Resetting bearer [ 366.691211][ T5941] usb 5-1: SerialNumber: syz [ 366.745622][ T9881] tipc: Disabling bearer [ 366.800791][ T797] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 366.817360][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.830185][ T797] usb 1-1: Product: syz [ 366.838051][ T797] usb 1-1: Manufacturer: syz [ 366.842696][ T797] usb 1-1: SerialNumber: syz [ 366.862384][ T9868] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 366.925133][ T9879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.944035][ T9879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.064613][ T5836] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 367.265398][ T5836] usb 3-1: Using ep0 maxpacket: 8 [ 367.273017][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 367.290550][ T5836] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 367.385205][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.439366][ T5836] usb 3-1: config 0 descriptor?? [ 367.550082][ T797] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input51 [ 367.569108][ T5178] bcm5974 1-1:1.0: could not read from device [ 367.578636][ T5178] bcm5974 1-1:1.0: could not read from device [ 367.597064][ T5178] bcm5974 1-1:1.0: could not read from device [ 367.606945][ T5178] bcm5974 1-1:1.0: could not read from device [ 367.715434][ T797] usb 1-1: USB disconnect, device number 78 [ 367.751179][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'. [ 367.760682][ T9902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.807591][ T9902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.957546][ T9901] bond2 (unregistering): Released all slaves [ 367.986841][ T9879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.022759][ T9879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.297231][ T5836] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 368.325116][ T5941] usb 5-1: USB disconnect, device number 86 [ 368.393167][ T9914] xt_recent: Unsupported userspace flags (000000de) [ 368.451864][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 368.981804][ T9920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 369.445806][ T9] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 369.607605][ T9] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 369.674941][ T9] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.691277][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 369.713123][ T9] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 369.747178][ T9935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1203'. [ 369.751408][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.781432][ T9] usb 2-1: config 0 descriptor?? [ 369.927218][ T5836] usb 3-1: USB disconnect, device number 67 [ 370.032200][ T9935] bond1 (unregistering): Released all slaves [ 370.596413][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 370.608469][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 370.629156][ T9] usb 2-1: USB disconnect, device number 77 [ 371.136401][ T9953] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1207'. [ 371.621964][ T5834] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 371.775085][ T2151] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 371.991088][ T9956] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1209'. [ 372.001135][ T2151] usb 1-1: Using ep0 maxpacket: 32 [ 372.009702][ T2151] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 372.024775][ T2151] usb 1-1: config 0 has no interface number 0 [ 372.030908][ T2151] usb 1-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 372.085246][ T2151] usb 1-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 372.098984][ T2151] usb 1-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 372.484395][ T29] audit: type=1326 audit(1774321784.702:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9972 comm="syz.4.1216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ca7d9c799 code=0x0 [ 372.902989][ T2151] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 372.967391][ T2151] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 372.977379][ T2151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.994536][ T2151] usb 1-1: Product: syz [ 372.998762][ T2151] usb 1-1: Manufacturer: syz [ 373.008680][ T2151] usb 1-1: SerialNumber: syz [ 373.035991][ T2151] usb 1-1: config 0 descriptor?? [ 373.044869][ T9963] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 373.061789][ T2151] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input52 [ 373.093062][ T5178] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 373.133999][ T5941] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 373.198537][ T9990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.230522][ T9990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.380698][ T5941] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 373.405550][ T5941] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.419579][ T5941] usb 2-1: config 0 interface 0 has no altsetting 0 [ 373.441299][ T9993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.456618][ T9993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.560457][ T5941] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 373.621010][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.687861][ T9] usb 1-1: USB disconnect, device number 79 [ 373.756770][ T5941] usb 2-1: config 0 descriptor?? [ 374.254325][ T5941] hid-steam 0003:28DE:1102.0015: unknown main item tag 0x0 [ 374.272274][ T5941] hid-steam 0003:28DE:1102.0015: unknown main item tag 0x0 [ 374.292703][ T5941] hid-steam 0003:28DE:1102.0015: unknown main item tag 0x0 [ 374.309430][ T5941] hid-steam 0003:28DE:1102.0015: unknown main item tag 0x0 [ 374.324988][ T5941] hid-steam 0003:28DE:1102.0015: unknown main item tag 0x0 [ 374.372396][ T5941] hid-steam 0003:28DE:1102.0015: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 374.432134][ T5941] usb 2-1: USB disconnect, device number 78 [ 374.542486][T10006] fido_id[10006]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 376.177248][T10018] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1228'. [ 376.393277][ T5828] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 376.486426][T10037] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1232'. [ 376.501813][T10037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.511017][T10037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.653844][ T5941] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 376.750295][ T5828] usb 1-1: unable to get BOS descriptor or descriptor too short [ 376.761245][ T5828] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 376.770410][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.779150][ T5828] usb 1-1: Product: syz [ 376.783990][ T5828] usb 1-1: Manufacturer: syz [ 376.788663][ T5828] usb 1-1: SerialNumber: syz [ 376.896372][ T5941] usb 2-1: not running at top speed; connect to a high speed hub [ 376.906467][ T5941] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 376.937485][ T5941] usb 2-1: config 1 interface 0 has no altsetting 0 [ 376.959605][ T5941] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 376.970597][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.980290][ T5941] usb 2-1: Product: syz [ 376.986431][ T5941] usb 2-1: Manufacturer: syz [ 377.007850][ T5941] usb 2-1: SerialNumber: syz [ 377.045522][T10028] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 377.080380][T10030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.093321][T10030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.106677][T10043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.117893][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1234'. [ 377.453853][ T47] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 377.558561][ T5941] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input54 [ 377.587738][ T5178] bcm5974 2-1:1.0: could not read from device [ 377.614175][ T5941] usb 2-1: USB disconnect, device number 79 [ 377.621765][ T5178] bcm5974 2-1:1.0: could not read from device [ 377.633863][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 377.651904][ T47] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 377.670936][ T6000] bcm5974 2-1:1.0: could not read from device [ 377.690808][ T47] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 377.709047][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.733971][ T47] usb 5-1: Product: syz [ 377.738160][ T47] usb 5-1: Manufacturer: syz [ 377.743010][ T47] usb 5-1: SerialNumber: syz [ 377.762687][ T47] usb 5-1: config 0 descriptor?? [ 377.779496][ T47] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 377.904613][ T9] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 378.056008][ T9] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 378.068470][ T9] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.079843][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 378.087860][ T9] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 378.120944][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.147099][T10030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.164308][T10030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.182898][ T9] usb 3-1: config 0 descriptor?? [ 378.267278][ T29] audit: type=1326 audit(1774321790.512:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.1.1237" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f369a19c799 code=0x0 [ 378.415701][ T2151] usb 1-1: USB disconnect, device number 80 [ 378.506821][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.514469][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.549712][ T47] gspca_zc3xx: reg_w_i err -71 [ 378.606172][ T5828] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 378.620544][ T9] hid-steam 0003:28DE:1102.0016: unknown main item tag 0x0 [ 378.628724][ T9] hid-steam 0003:28DE:1102.0016: unknown main item tag 0x0 [ 378.636710][ T9] hid-steam 0003:28DE:1102.0016: unknown main item tag 0x0 [ 378.644744][ T9] hid-steam 0003:28DE:1102.0016: unknown main item tag 0x0 [ 378.652254][ T9] hid-steam 0003:28DE:1102.0016: unknown main item tag 0x0 [ 378.675110][ T9] hid-steam 0003:28DE:1102.0016: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 378.788169][ T5828] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 378.838869][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.847688][ T5941] usb 3-1: USB disconnect, device number 68 [ 378.876204][ T5828] usb 2-1: Product: syz [ 378.905265][ T5828] usb 2-1: Manufacturer: syz [ 378.923799][ T5828] usb 2-1: SerialNumber: syz [ 378.950178][ T5828] r8152-cfgselector 2-1: Unknown version 0x0000 [ 378.957104][ T5828] r8152-cfgselector 2-1: config 0 descriptor?? [ 379.163891][ T47] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 379.172757][ T47] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 379.251550][ T47] usb 5-1: USB disconnect, device number 87 [ 379.464882][ T9] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 379.475241][T10066] bond1 (unregistering): Released all slaves [ 379.644978][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 379.661100][ T47] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 379.670321][ T9] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 379.679501][ T9] usb 1-1: config 0 has no interface number 0 [ 379.694882][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 379.719949][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 379.767727][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 379.820720][ T9] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 379.872297][ T47] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 379.882514][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.893823][ T5941] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 379.905104][ T9] usb 1-1: Product: syz [ 379.909295][ T9] usb 1-1: SerialNumber: syz [ 379.909987][T10074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.926069][ T47] usb 5-1: config 0 has no interfaces? [ 379.931800][ T47] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 379.946964][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.947325][T10074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.967671][ T9] usb 1-1: config 0 descriptor?? [ 379.970204][ T47] usb 5-1: config 0 descriptor?? [ 379.988001][ T9] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 379.994846][T10075] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 379.994932][T10075] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 379.996176][T10075] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 380.025033][T10075] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 380.036926][T10075] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 380.038821][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input55 [ 380.076320][ T5941] usb 3-1: config index 0 descriptor too short (expected 8192, got 36) [ 380.100722][ T5941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.121165][T10075] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 380.132234][ T5941] usb 3-1: config 0 has no interfaces? [ 380.147644][ T5941] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 380.157591][T10075] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 380.179684][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.188619][T10075] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 380.243087][ T5941] usb 3-1: config 0 descriptor?? [ 380.332532][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.342569][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.350843][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.358728][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.371569][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.379442][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.387210][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.394996][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.402093][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.409947][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.440245][ T2151] usb 1-1: USB disconnect, device number 81 [ 380.446950][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 380.481144][ T2151] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 380.921394][T10079] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1243'. [ 381.219233][ T47] r8152-cfgselector 2-1: USB disconnect, device number 80 [ 381.619866][ T47] usb 5-1: USB disconnect, device number 88 [ 381.954434][ T47] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 382.247739][ T47] usb 5-1: unable to get BOS descriptor or descriptor too short [ 382.259401][ T47] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 382.273923][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.284068][ T47] usb 5-1: Product: syz [ 382.288744][ T47] usb 5-1: Manufacturer: syz [ 382.294700][ T47] usb 5-1: SerialNumber: syz [ 382.472362][ T24] usb 3-1: USB disconnect, device number 69 [ 382.483062][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1253'. [ 382.598383][T10096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.637073][T10096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.058502][ T24] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 383.513823][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 383.521906][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 383.637817][T10130] trusted_key: encrypted_key: insufficient parameters specified [ 383.660547][ T24] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 383.679386][ T24] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 383.721678][T10096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.731297][T10096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.742318][ T24] usb 3-1: Product: syz [ 383.751364][ T24] usb 3-1: Manufacturer: syz [ 383.800688][ T24] usb 3-1: SerialNumber: syz [ 383.817255][ T24] usb 3-1: config 0 descriptor?? [ 383.826004][T10115] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 384.015259][ T2151] usb 5-1: USB disconnect, device number 89 [ 384.069110][ T9] usb 3-1: USB disconnect, device number 70 [ 384.093568][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.331529][T10123] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1256'. [ 384.504392][ T2151] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 384.672331][ T2151] usb 3-1: Using ep0 maxpacket: 32 [ 384.756310][ T2151] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 384.976638][T10146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.987349][T10146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.072997][ T2151] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 385.084368][ T2151] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 385.095153][ T2151] usb 3-1: Product: syz [ 385.099521][ T2151] usb 3-1: Manufacturer: syz [ 385.173023][ T2151] usb 3-1: SerialNumber: syz [ 385.217339][ T2151] usb 3-1: config 0 descriptor?? [ 385.246157][T10115] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 385.460479][T10115] netlink: 'syz.2.1254': attribute type 27 has an invalid length. [ 385.471504][T10115] bond3: left promiscuous mode [ 385.561810][T10115] bridge1: left promiscuous mode [ 385.681652][ T797] usb 3-1: USB disconnect, device number 71 [ 385.919482][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'. [ 385.947866][T10163] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1267'. [ 386.460640][T10164] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1268'. [ 386.764005][ T797] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 386.946025][ T797] usb 2-1: unable to get BOS descriptor or descriptor too short [ 386.957792][ T797] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 386.967934][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.983627][ T797] usb 2-1: Product: syz [ 387.002797][ T797] usb 2-1: Manufacturer: syz [ 387.016516][ T797] usb 2-1: SerialNumber: syz [ 387.378625][T10173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.399142][ T29] audit: type=1326 audit(1774321799.632:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10182 comm="syz.0.1274" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6222b9c799 code=0x0 [ 387.425573][T10173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.455808][T10190] kvm: emulating exchange as write [ 387.484028][ T24] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 387.644437][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 387.656537][ T24] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 387.665015][ T24] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 387.676012][ T24] usb 5-1: config 6 has no interface number 0 [ 387.686648][ T24] usb 5-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 387.711133][ T24] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 387.723066][ T24] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 387.740153][ T24] usb 5-1: Product: syz [ 387.749569][ T24] usb 5-1: Manufacturer: syz [ 387.755114][ T24] usb 5-1: SerialNumber: syz [ 387.784019][ T24] hso 5-1:6.2: Failed to find INT IN ep [ 387.834884][ T5836] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 388.050506][T10185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.068397][ T5836] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 388.073868][T10185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.086952][ T24] usb 5-1: USB disconnect, device number 90 [ 388.096899][ T5836] usb 3-1: config 0 has no interface number 0 [ 388.118299][ T5836] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 388.145503][ T5836] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 388.157557][ T5836] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 388.179646][ T5836] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 388.196878][ T5836] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 388.209166][ T5836] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 388.227238][ T5836] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 388.238058][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.260604][ T5836] usb 3-1: config 0 descriptor?? [ 388.267948][T10194] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 388.276731][T10194] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 388.298257][ T5836] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 388.468590][T10173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.479136][T10173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.517153][T10194] ldusb 3-1:0.55: Write buffer overflow, 162 bytes dropped [ 388.544816][ T24] usb 3-1: USB disconnect, device number 72 [ 388.563398][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 388.802083][ T5836] usb 2-1: USB disconnect, device number 81 [ 388.962599][ T6914] udevd[6914]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.594142][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1282'. [ 389.709783][T10206] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.717161][T10206] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.754371][ T2151] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 389.994204][ T5828] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 390.044868][ T2151] usb 5-1: Using ep0 maxpacket: 32 [ 390.111941][ T2151] usb 5-1: config index 0 descriptor too short (expected 14544, got 27) [ 390.165442][ T2151] usb 5-1: config 255 has too many interfaces: 231, using maximum allowed: 32 [ 390.167413][ T5828] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 390.181760][T10221] FAULT_INJECTION: forcing a failure. [ 390.181760][T10221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.194791][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.200270][ T2151] usb 5-1: config 255 has an invalid descriptor of length 83, skipping remainder of the config [ 390.224905][T10221] CPU: 0 UID: 0 PID: 10221 Comm: syz.0.1288 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.224934][T10221] Tainted: [L]=SOFTLOCKUP [ 390.224941][T10221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 390.224954][T10221] Call Trace: [ 390.224962][T10221] [ 390.224970][T10221] dump_stack_lvl+0xe8/0x150 [ 390.225001][T10221] should_fail_ex+0x412/0x560 [ 390.225033][T10221] _copy_to_user+0x31/0xb0 [ 390.225057][T10221] simple_read_from_buffer+0xe1/0x170 [ 390.225090][T10221] proc_fail_nth_read+0x1bb/0x230 [ 390.225120][T10221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 390.225148][T10221] ? rw_verify_area+0x2a6/0x4d0 [ 390.225167][T10221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 390.225195][T10221] vfs_read+0x20c/0xa70 [ 390.225213][T10221] ? fdget_pos+0x246/0x320 [ 390.225233][T10221] ? __pfx___mutex_lock+0x10/0x10 [ 390.225325][T10221] ? __pfx_vfs_read+0x10/0x10 [ 390.225353][T10221] ? __fget_files+0x2a/0x420 [ 390.225382][T10221] ? __fget_files+0x3a0/0x420 [ 390.225406][T10221] ? __fget_files+0x2a/0x420 [ 390.225439][T10221] ksys_read+0x150/0x270 [ 390.225460][T10221] ? __pfx_ksys_read+0x10/0x10 [ 390.225490][T10221] do_syscall_64+0x14d/0xf80 [ 390.225508][T10221] ? trace_irq_disable+0x3b/0x150 [ 390.225534][T10221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.225552][T10221] ? clear_bhb_loop+0x40/0x90 [ 390.225574][T10221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.225595][T10221] RIP: 0033:0x7f6222b5cfce [ 390.225612][T10221] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 390.225627][T10221] RSP: 002b:00007f6223b13fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 390.225645][T10221] RAX: ffffffffffffffda RBX: 00007f6223b146c0 RCX: 00007f6222b5cfce [ 390.225658][T10221] RDX: 000000000000000f RSI: 00007f6223b140a0 RDI: 0000000000000004 [ 390.225670][T10221] RBP: 00007f6223b14090 R08: 0000000000000000 R09: 0000000000000000 [ 390.225680][T10221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.225691][T10221] R13: 00007f6222e16038 R14: 00007f6222e15fa0 R15: 00007f6222f3fa48 [ 390.225719][T10221] [ 390.237700][ T5828] usb 2-1: Product: syz [ 390.266355][ T2151] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 231 [ 390.496501][ T2151] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 390.507394][ T2151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.517810][ T2151] usb 5-1: Product: syz [ 390.522190][ T2151] usb 5-1: Manufacturer: syz [ 390.527911][ T2151] usb 5-1: SerialNumber: syz [ 390.562913][ T5828] usb 2-1: Manufacturer: syz [ 390.581487][ T5828] usb 2-1: SerialNumber: syz [ 390.614680][ T5828] usb 2-1: config 0 descriptor?? [ 390.658940][T10226] fuse: Bad value for 'fd' [ 390.869346][ T2151] usb 5-1: USB disconnect, device number 91 [ 391.452392][T10235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.482114][T10235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.787595][ T2151] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 391.965418][ T2151] usb 1-1: Using ep0 maxpacket: 32 [ 391.972517][ T2151] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 391.992885][ T2151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 392.016806][ T2151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 392.050656][ T2151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 392.110916][ T2151] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 392.122456][ T2151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.135173][ T2151] usb 1-1: Product: syz [ 392.139335][ T2151] usb 1-1: Manufacturer: syz [ 392.152164][ T2151] usb 1-1: SerialNumber: syz [ 392.162846][ T2151] usb 1-1: config 0 descriptor?? [ 392.174292][ T797] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 392.416429][ T797] usb 5-1: Using ep0 maxpacket: 8 [ 392.428044][ T797] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 392.651744][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 392.671603][ T797] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 392.684747][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 392.702265][ T797] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 392.722224][ T797] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 392.734721][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.750078][ T797] usb 5-1: Product: syz [ 392.761215][ T797] usb 5-1: Manufacturer: syz [ 392.771469][ T797] usb 5-1: SerialNumber: syz [ 392.783923][ T797] usb 5-1: config 0 descriptor?? [ 392.801633][ T797] kvaser_usb 5-1:0.0: error -EMSGSIZE: Cannot get software info [ 392.844932][ T797] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -90 [ 392.998466][ T797] usb 5-1: USB disconnect, device number 92 [ 393.465723][ T797] usb 2-1: USB disconnect, device number 82 [ 393.505054][T10253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.505305][T10253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.537365][ T797] usb 1-1: USB disconnect, device number 82 [ 395.453797][ T797] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 395.623066][ T797] usb 3-1: not running at top speed; connect to a high speed hub [ 395.658855][ T797] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 395.703434][ T797] usb 3-1: config 1 interface 0 has no altsetting 0 [ 395.800492][ T5828] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 395.825000][ T797] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 395.847854][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.877163][ T797] usb 3-1: Product: syz [ 395.891568][ T797] usb 3-1: Manufacturer: syz [ 395.914936][ T797] usb 3-1: SerialNumber: syz [ 395.946090][T10280] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 396.006040][ T5828] usb 1-1: Using ep0 maxpacket: 16 [ 396.017360][ T5828] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 396.036205][ T5828] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 396.060068][ T5828] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.077889][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.097367][ T5828] usb 1-1: Product: ࠄ [ 396.106379][ T5828] usb 1-1: Manufacturer: х [ 396.116846][ T5828] usb 1-1: SerialNumber: ᱈鈦ㄸ俳씋㷭Ἆ㎼⬬ႂ㫒ނ䝵桻젔܊낚竇耓ｘ퇼㊚埙삜ꯉɑⰑᠿ侸峪ᴤᙐ惿⯩Ὤᝇ拇蘽☇⢺鼰ꎿ渂❋쓡ᆣ똱粽㬂篯苬슄߭⻴᭭앆먜Ḫ쿟窿弫冕퉖ӌ﯇剝ꈹ〘녠屰衐꛼炡汩ڴ⌥ᘯ䖲䧿膫ꉍ⡍牸茎຤П絨ꪚ丧鱄 [ 396.157646][ T5828] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 396.163065][T10295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.174595][ T5828] usb 1-1: no configuration chosen from 1 choice [ 396.179083][T10295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.841011][ T797] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input56 [ 396.943269][ T5178] bcm5974 3-1:1.0: could not read from device [ 396.961003][ T5178] bcm5974 3-1:1.0: could not read from device [ 396.969730][ T797] usb 3-1: USB disconnect, device number 73 [ 397.003942][ T5178] bcm5974 3-1:1.0: could not read from device [ 397.038941][ T5178] bcm5974 3-1:1.0: could not read from device [ 397.065190][ T9] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 397.424302][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 397.446182][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 397.490774][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.512959][ T9] usb 2-1: config 0 descriptor?? [ 397.527053][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 397.935267][ T5836] usb 1-1: USB disconnect, device number 83 [ 398.328736][T10303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.338338][T10303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.654608][ T9] gspca_sunplus: reg_w_riv err -110 [ 398.659925][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 399.020047][ T29] audit: type=1326 audit(1774321811.262:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369a19c799 code=0x7ffc0000 [ 399.112014][ T29] audit: type=1326 audit(1774321811.302:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369a19c799 code=0x7ffc0000 [ 399.424467][ T5834] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 399.497373][ T29] audit: type=1326 audit(1774321811.742:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f369a19c42b code=0x7ffc0000 [ 399.854808][ T2151] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 400.065078][ T2151] usb 3-1: Using ep0 maxpacket: 16 [ 400.072755][ T2151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.127133][ T2151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.145549][ T2151] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 400.161809][ T2151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.495951][ T2151] usb 3-1: config 0 descriptor?? [ 400.603862][ T5828] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 400.763982][ T5828] usb 5-1: Using ep0 maxpacket: 16 [ 400.770795][ T5828] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 400.782558][ T5828] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 400.794440][ T5828] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 254 [ 400.811852][ T5828] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 400.831378][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 400.849574][ T5828] usb 5-1: SerialNumber: syz [ 400.927485][ T2151] ntrig 0003:1B96:0008.0017: unbalanced collection at end of report description [ 400.945601][ T9] usb 2-1: USB disconnect, device number 83 [ 400.979698][ T2151] ntrig 0003:1B96:0008.0017: parse failed [ 400.999470][ T2151] ntrig 0003:1B96:0008.0017: probe with driver ntrig failed with error -22 [ 401.079226][ T5828] usb 5-1: USB disconnect, device number 93 [ 401.117536][ T24] usb 3-1: USB disconnect, device number 74 [ 401.304836][ T9] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 401.588754][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 401.624798][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.633029][ T9] usb 2-1: Product: syz [ 401.639032][ T9] usb 2-1: Manufacturer: syz [ 401.645372][ T9] usb 2-1: SerialNumber: syz [ 401.668610][ T9] usb 2-1: config 0 descriptor?? [ 402.946964][T10396] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1341'. [ 403.021966][T10398] FAULT_INJECTION: forcing a failure. [ 403.021966][T10398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.038419][T10398] CPU: 0 UID: 0 PID: 10398 Comm: syz.0.1341 Tainted: G L syzkaller #0 PREEMPT(full) [ 403.038438][T10398] Tainted: [L]=SOFTLOCKUP [ 403.038442][T10398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.038448][T10398] Call Trace: [ 403.038452][T10398] [ 403.038457][T10398] dump_stack_lvl+0xe8/0x150 [ 403.038477][T10398] should_fail_ex+0x412/0x560 [ 403.038495][T10398] _copy_from_user+0x2d/0xb0 [ 403.038507][T10398] kstrtouint_from_user+0xd6/0x180 [ 403.038523][T10398] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 403.038545][T10398] proc_fail_nth_write+0x8e/0x210 [ 403.038560][T10398] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 403.038576][T10398] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 403.038591][T10398] vfs_write+0x29a/0xb90 [ 403.038606][T10398] ? __pfx_vfs_write+0x10/0x10 [ 403.038617][T10398] ? __fget_files+0x2a/0x420 [ 403.038634][T10398] ? __fget_files+0x3a0/0x420 [ 403.038647][T10398] ? __fget_files+0x2a/0x420 [ 403.038665][T10398] ksys_write+0x150/0x270 [ 403.038676][T10398] ? __pfx_ksys_write+0x10/0x10 [ 403.038692][T10398] do_syscall_64+0x14d/0xf80 [ 403.038703][T10398] ? trace_irq_disable+0x3b/0x150 [ 403.038717][T10398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.038728][T10398] ? clear_bhb_loop+0x40/0x90 [ 403.038739][T10398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.038749][T10398] RIP: 0033:0x7f6222b5cfce [ 403.038760][T10398] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 403.038768][T10398] RSP: 002b:00007f6223af2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 403.038781][T10398] RAX: ffffffffffffffda RBX: 00007f6223af36c0 RCX: 00007f6222b5cfce [ 403.038788][T10398] RDX: 0000000000000001 RSI: 00007f6223af30a0 RDI: 0000000000000007 [ 403.038794][T10398] RBP: 00007f6223af3090 R08: 0000000000000000 R09: 0000000000000000 [ 403.038800][T10398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.038805][T10398] R13: 00007f6222e16128 R14: 00007f6222e16090 R15: 00007f6222f3fa48 [ 403.038821][T10398] [ 403.708558][T10403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.718939][T10403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.127012][ T9] usb 2-1: USB disconnect, device number 84 [ 404.355341][T10410] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 404.422704][T10419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.439539][T10419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.009402][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 405.194811][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 405.201821][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 405.214489][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 405.271658][ T9] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 405.285152][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.296542][ T9] usb 1-1: Product: syz [ 405.304936][ T9] usb 1-1: Manufacturer: syz [ 405.314429][ T9] usb 1-1: SerialNumber: syz [ 405.337690][ T9] usb 1-1: config 0 descriptor?? [ 405.590370][ T9] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 405.651072][ T9] usb 1-1: USB disconnect, device number 84 [ 406.315645][ T9] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 406.476144][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 406.492973][ T9] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 406.516298][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 406.530728][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 406.541888][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.552624][ T9] usb 3-1: Product: syz [ 406.558220][ T9] usb 3-1: Manufacturer: syz [ 406.563113][ T9] usb 3-1: SerialNumber: syz [ 406.576538][ T24] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 406.585209][T10445] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 406.770846][ T24] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 406.781482][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.791686][ T24] usb 5-1: Product: syz [ 406.797209][T10462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.807364][ T24] usb 5-1: Manufacturer: syz [ 406.814327][T10462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.829972][ T24] usb 5-1: SerialNumber: syz [ 406.842940][ T24] usb 5-1: config 0 descriptor?? [ 406.886007][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input58 [ 406.917371][ T5178] bcm5974 3-1:1.0: could not read from device [ 406.921226][ T9] usb 3-1: USB disconnect, device number 75 [ 406.936350][ T5178] bcm5974 3-1:1.0: could not read from device [ 406.982312][ T6000] udevd[6000]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 407.014920][ T6000] udevd[6000]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 407.531918][T10475] xt_recent: Unsupported userspace flags (000000de) [ 408.048849][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1368'. [ 408.310806][T10489] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1370'. [ 409.041299][T10505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1377'. [ 409.049274][ T797] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 409.238256][ T797] usb 3-1: Using ep0 maxpacket: 16 [ 409.255082][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.273899][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.287142][ T797] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 409.299751][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.368739][ T797] usb 3-1: config 0 descriptor?? [ 409.434156][ T24] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 409.616550][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 409.634264][ T24] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 409.651755][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 409.682848][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 409.702470][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.738186][ T24] usb 1-1: Product: syz [ 409.747251][ T24] usb 1-1: Manufacturer: syz [ 409.759551][ T24] usb 1-1: SerialNumber: syz [ 409.773361][ T47] usb 5-1: USB disconnect, device number 94 [ 409.852220][T10501] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 410.052885][ T797] usbhid 3-1:0.0: can't add hid device: -71 [ 410.062511][ T797] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 410.084701][ T797] usb 3-1: USB disconnect, device number 76 [ 410.105724][T10517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.147248][ T24] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input59 [ 410.209388][ T5178] bcm5974 1-1:1.0: could not read from device [ 410.221243][ T5178] bcm5974 1-1:1.0: could not read from device [ 410.274399][ T47] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 410.300743][ T24] usb 1-1: USB disconnect, device number 85 [ 410.301045][ T5178] bcm5974 1-1:1.0: could not read from device [ 410.335467][ T5178] bcm5974 1-1:1.0: could not read from device [ 410.436684][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 410.444864][ T47] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 410.455789][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.597028][ T47] usb 5-1: config 0 descriptor?? [ 410.628214][ T47] gspca_main: sunplus-2.14.0 probing 041e:400b [ 410.836511][T10524] tipc: Started in network mode [ 410.865364][T10524] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 410.894429][T10524] tipc: Enabling of bearer rejected, failed to enable media [ 410.976597][T10529] xt_recent: Unsupported userspace flags (000000de) [ 411.108671][T10531] : renamed from bond0 (while UP) [ 411.259715][T10537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.285475][T10537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.416856][T10541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.440790][T10541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.498118][T10516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.574989][T10516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.644946][ T29] audit: type=1326 audit(1774321823.882:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca7d9c799 code=0x7ffc0000 [ 411.686467][ T29] audit: type=1326 audit(1774321823.882:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca7d9c799 code=0x7ffc0000 [ 411.712267][ T29] audit: type=1326 audit(1774321823.912:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f6ca7d9c799 code=0x7ffc0000 [ 411.738494][ T29] audit: type=1326 audit(1774321823.912:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca7d9c799 code=0x7ffc0000 [ 411.784298][ T29] audit: type=1326 audit(1774321823.912:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca7d9c799 code=0x7ffc0000 [ 411.815584][ T29] audit: type=1326 audit(1774321823.912:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ca7d9c799 code=0x7ffc0000 [ 411.843858][ T24] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 411.844937][ T29] audit: type=1326 audit(1774321823.912:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca7d9c799 code=0x7ffc0000 [ 411.884934][ T29] audit: type=1326 audit(1774321823.912:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ca7d9c799 code=0x7ffc0000 [ 411.910726][ T29] audit: type=1326 audit(1774321823.912:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca7d9c799 code=0x7ffc0000 [ 411.946344][ T29] audit: type=1326 audit(1774321823.912:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6ca7d5cfce code=0x7ffc0000 [ 412.067940][ T24] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 412.077424][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.087891][ T24] usb 1-1: Product: syz [ 412.101991][ T24] usb 1-1: Manufacturer: syz [ 412.123090][ T24] usb 1-1: SerialNumber: syz [ 412.140590][ T24] usb 1-1: config 0 descriptor?? [ 412.595844][T10554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1392'. [ 412.606236][ T9] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 412.625310][ T47] gspca_sunplus: reg_w_riv err -110 [ 412.634455][ T47] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 412.765223][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 412.774351][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.790449][ T9] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 412.809826][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.916017][ T9] usb 3-1: Product: syz [ 412.924514][ T9] usb 3-1: Manufacturer: syz [ 412.934892][ T9] usb 3-1: SerialNumber: syz [ 412.960777][ T9] usb 3-1: config 0 descriptor?? [ 413.204261][ T5828] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 413.365711][ T5828] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 413.374745][ T5828] usb 2-1: config 0 has no interface number 0 [ 413.382637][ T5828] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 413.401498][ T5828] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 413.431680][ T5828] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 413.460223][ T5828] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 413.477195][ T5828] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 413.496638][ T5828] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 413.520593][ T5828] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 413.531764][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.660014][ T5828] usb 2-1: config 0 descriptor?? [ 413.678979][T10558] raw-gadget.8 gadget.1: fail, usb_ep_enable returned -22 [ 413.687751][T10558] raw-gadget.8 gadget.1: fail, usb_ep_enable returned -22 [ 413.708822][ T5828] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 413.918953][T10558] ldusb 2-1:0.55: Write buffer overflow, 162 bytes dropped [ 413.937372][ T5828] usb 2-1: USB disconnect, device number 85 [ 413.948521][ T5828] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 414.295251][T10534] delete_channel: no stack [ 414.454567][T10569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.467437][T10569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.737263][T10569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.751703][T10569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.101353][ T9] usb 1-1: USB disconnect, device number 86 [ 415.615673][ T30] INFO: task kworker/0:3:5833 blocked for more than 143 seconds. [ 415.636029][ T30] Tainted: G L syzkaller #0 [ 415.651086][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.667717][ T30] task:kworker/0:3 state:D stack:21280 pid:5833 tgid:5833 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 415.702675][ T30] Workqueue: usb_hub_wq hub_event [ 415.729720][ T30] Call Trace: [ 415.734933][ T30] [ 415.739363][ T30] __schedule+0x15dd/0x52d0 [ 415.747072][ T30] ? __pfx___schedule+0x10/0x10 [ 415.754974][ T30] ? schedule+0x90/0x360 [ 415.759428][ T30] schedule+0x164/0x360 [ 415.766439][ T30] schedule_timeout+0xc3/0x2c0 [ 415.771617][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 415.804525][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 415.812290][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 415.825091][ T30] ? wait_for_completion+0x274/0x5e0 [ 415.835788][ T30] wait_for_completion+0x2cc/0x5e0 [ 415.846129][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 415.857103][ T30] i2c_del_adapter+0x5c0/0x790 [ 415.866781][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 415.877049][ T30] ? kernfs_put+0x40e/0x470 [ 415.886706][ T30] ? sysfs_remove_group+0x23d/0x2e0 [ 415.899970][ T30] ? __pfx_ft260_remove+0x10/0x10 [ 415.911749][ T30] ft260_remove+0x5d/0x80 [ 415.920593][ T30] hid_device_remove+0x228/0x370 [ 415.938242][ T30] ? __pfx_hid_device_remove+0x10/0x10 [ 415.950874][ T30] device_release_driver_internal+0x46f/0x870 [ 415.968555][ T30] bus_remove_device+0x455/0x570 [ 416.008510][ T30] ? __pfx_bus_remove_device+0x10/0x10 [ 416.021037][ T30] device_del+0x527/0x8f0 [ 416.054879][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 416.072259][ T30] ? __pfx_device_del+0x10/0x10 [ 416.082705][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 416.096190][ T30] hid_destroy_device+0x6b/0x1b0 [ 416.106309][ T30] usbhid_disconnect+0x9f/0xc0 [ 416.117549][ T30] usb_unbind_interface+0x26e/0x910 [ 416.128481][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 416.140840][ T30] device_release_driver_internal+0x4d9/0x870 [ 416.154434][ T30] bus_remove_device+0x455/0x570 [ 416.165022][ T30] ? __pfx_bus_remove_device+0x10/0x10