last executing test programs: 1m37.079065501s ago: executing program 3 (id=4): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x20}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x5b, 0xa, 0x0, "93bba551042af768810fa32fa3ccbaf1121823a6dc898168d8b3c3945d8636cf"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000017c0)={0x5, &(0x7f0000001780)=[{0x2, 0x4e, 0xfb, 0xffff}, {0x1, 0x6, 0x4, 0xf}, {0x7ff, 0x8, 0x39}, {0xfffd, 0x0, 0x69, 0x4}, {0x6, 0x49, 0x1, 0x8001}]}, 0x10) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x42000001}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00f37f03bf00000000000000000000020000870c004946fbfd7b6211040001000000f46f64de741f889a561b6ab557000000000000000000e0ae80419b74f8f84612ebf74e68422a65f335471eb936fd4043cf9c1b136dae0c5ece488f41a4cc52479fe34f376cbb527d81c9bae127d3a827c39a1ae28358c09fb08564bacb91190ac4d9c1bd25267696be8e3653d3d1164655b8b031786fd5b8b0df7012ab701776d64925c64f16"], 0x2c}, 0x1, 0x0, 0x0, 0x15}, 0x880) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f00000003c0)={0x0, 0x0, 0x8, 0xfffffffffffffffe}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet_sctp(r4, &(0x7f0000001740)=[{&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x4, @mcast2, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000540)="a544dff6af717dd4b4c053b0ae60372f00c5a6e798ca4d32e0a7bce606ab9497e83685e57c7180f2fef2345265852003d7b5cca791a159a0a3821f3f5605d45819a8eacaaef47cbf617e63510544479b6f2c93cb63e1a811a84d17340b4fe7b098c1279eb2318359060ea26253728d542725c0b815cbdf8b6dc1561fbc88912d4be9069d71739accc67d0ba2b7f80229c4546cbdcc9a3dc3009098466380ff3b153b877a4dda3b1a0728a075f581b7594b7d2235d7324b0008dde833ffd2b5ae3e289b3278186fbbb4564a0dd0a035168ee1ce1d0cd652c87d07bda1b7efb1b61da78e652b67ab9d523c", 0xea}, {&(0x7f0000000400)="f42fd09b7d4736b5f24d87103f2dc956a051c092569601373f757adce0f8a39ab92d0ca7be02875493af785191d747c299e6ee8e9baa964229e05a4bcf912d6c295111f099ab1f1ed724d5b961dae3cf2b8b58a8137944cd78d7802914d6d83be5cfafa847d9622bcb05eae63d25761f3c1ec84648c6d4ba528751a305c6964c25f253d514ee4634c370dae6517c543e", 0x90}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="bdeb3b87896166c1fd1ed2f053e2255c0a0646dc7b8d3e65fb9349ae3deecad6b3a6e85bb5e0dab4cf2311b4b38b198054a7e6aa2331bdb21b9e61ff0d3c5740b96cf71edba2df42f9ce7f37cffcb0d3f0e6adc42ccfc83d79585e45e80c64eb592a50a809ba4d0d88c595a672554a593d4fd2560ea6c2efc054772dda6f925e1bfe8864d3840bc576a86d49", 0x8c}], 0x4, &(0x7f0000001700)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @empty}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x1}}], 0x38, 0x50}], 0x1, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff018}, {0x6}]}, 0x10) setsockopt$inet_int(r6, 0x0, 0xc, &(0x7f0000000240)=0x800, 0x4) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000500)="8238", 0x2}, {&(0x7f0000001840)="3cda4e6cf087fc2f2d856285543f1caee5963da3f0039521e58d8464f657734fca0ef2b434d1feb5ce6c9e46699b9385c184559e7f90f34ffe", 0x39}], 0x2}}], 0x1, 0x44004840) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0xaf4, 0x0) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000001800)={0x8, 0x80, 0x9}) sendto$inet6(r0, &(0x7f0000000140)="e0238140", 0x4, 0x0, 0x0, 0x0) 1m34.10450716s ago: executing program 0 (id=14): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) 1m34.03204459s ago: executing program 0 (id=15): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m33.929489666s ago: executing program 3 (id=16): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000440)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x1, 0x2}, 0x2}}, 0x10, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000640)=""/210, 0xd2}], 0x1, &(0x7f00000001c0)=""/145, 0x91}, 0x2102) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000380)=0x2, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x48c0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x11, 0x4) recvmmsg(r2, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000740)="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", 0x13c}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114", 0xe6}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x124}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000004, 0x13, 0xffffffffffffffff, 0x6931b000) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x3ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000500)={0x2, &(0x7f0000000340)=[{0x3cb, 0x2, 0x6, 0x9}, {0xffff, 0xb, 0x7, 0x3}]}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000b0000000e4c4da1dce648748d780f940001006e657464657673696d0000000f0002006e657464657673696d3000004a000b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000002880)=0x2, 0x4) sendto$inet(r0, &(0x7f0000000a40)="15a85cd973d465a83e4e50973d87919f24881d9e341f34ecb5a5410ba956fb61e1141547d46d1f59f18f1c363cb86959234d7ff8510f2b6aa9b9a913c256248f4eb48fd440e1067eeb97187a2769fc4fea53459c5776076b88a30725c02f8e6aac4b941d8cef383f2a39fd35bbf27b61a5829fd48ad6d1be9db1d626eb000000000000", 0x83, 0x10008095, 0x0, 0x0) sendto(r0, &(0x7f0000000880)="063b23602b98931cc71bb43791eae4a105405e2cac0f03e9ea7d98ef0405f6efdb0abf456d80f0d99383ad81440b3984e172a61df1be0ffa73ee098bde0e3baf8aaf9bcd7980feace2411a282c8e31ad74bc696deacaccfa9f66877d72bcc2517553a1910aa7043f64cb63bc4ced96515937f70257c4ddc1024909932dd36689603a030808d03e6f053597e71e17e368e3f4c8ef013e7057f67d237d7cf644875e948141c4854622b57f2ee2d516eaf5ce9e1b9effc636c25a2831e45df2a5da3e23e87b09ab2bca6da1c4958a", 0xcd, 0x4000000, &(0x7f00000002c0)=@ethernet={0x6, @remote}, 0x80) 1m33.788553529s ago: executing program 3 (id=19): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000780)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x3]}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) madvise(&(0x7f0000242000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) writev(0xffffffffffffffff, 0x0, 0x0) 1m33.413211319s ago: executing program 3 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000740)={0x0}) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x0, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x2, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r2, 0x40480923, 0x1) 1m33.256181907s ago: executing program 3 (id=22): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r3 = syz_open_pts(r0, 0x900) r4 = dup3(r3, r0, 0x80000) read(r4, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r4, 0x0, 0x0) 1m30.955868179s ago: executing program 0 (id=28): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = dup(r0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000080)) (async) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000040)={0x66, 0x14, &(0x7f0000000740)}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000fc0)={0x1c, &(0x7f0000000e80)={0x40, 0x14, 0x4, "1175f33c"}, 0x0, 0x0}) (async) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb9040220081c0bc14b0a26f7aad3724745f5267cfd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000040012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f90000", 0xd8}], 0x1}, 0x884) (async) r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x10, 0x100) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000180)={0x1, 0x1, @stop_pts=0xd7f}) (async) r5 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f0000000340)={0x0, 0x0, 0x101, 0x7, {0x9, 0x0, 0x8, 0x6}}) (async) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000100)={0x1, 0x1, 0xa934, 0x84000}) 1m30.020367435s ago: executing program 0 (id=29): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000019140)={0x54, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xffff}, {0x8, 0x15, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004809}, 0x20008000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0x40000020, 0x6}}], 0x20}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r6, 0x8010aebb, &(0x7f0000000080)={0x8000000, 0x8000}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010078f029b152fb75bd0000000a74000000060a0b0400000000000000000200000048000480440001800b0001006578746864720000340002800800044000000002080006400000000108000340000000040500020000000000080007400000000508000514000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r8 = syz_open_dev$media(&(0x7f0000001a80), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f000000a2c0), 0x0}) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) 1m29.851998474s ago: executing program 0 (id=30): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) r5 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000780)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x3]}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) madvise(&(0x7f0000242000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) writev(0xffffffffffffffff, 0x0, 0x0) 1m29.56535552s ago: executing program 0 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000740)={0x0}) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x0, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x2, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r2, 0x40480923, 0x1) 1m29.422015309s ago: executing program 32 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000740)={0x0}) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x0, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x2, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r2, 0x40480923, 0x1) 1m18.231877545s ago: executing program 33 (id=22): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r3 = syz_open_pts(r0, 0x900) r4 = dup3(r3, r0, 0x80000) read(r4, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r4, 0x0, 0x0) 53.001861071s ago: executing program 2 (id=161): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e22, @private=0xa010101}}) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'wg1\x00', &(0x7f0000000000)=@ethtool_cmd={0x9, 0x2, 0x3, 0x3ff, 0x3f, 0x7, 0x1, 0x3, 0x6, 0x3, 0x101, 0x142f, 0x8, 0x3, 0x0, 0xa, [0x4000000, 0xff]}}) fdatasync(r0) 52.954822879s ago: executing program 2 (id=163): syz_init_net_socket$ax25(0x3, 0x5, 0x8) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x310, 0x2d, 0x2e, 0xcf, 0x40, 0x41e, 0x401d, 0x3d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x17, 0x40, 0x0, "", [{{0x9, 0x4, 0x9e, 0x6, 0x0, 0xff, 0xff, 0xff, 0xf7}}]}}]}}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x10, 0x20, 0x7, 0xfffffc01, {{0x1a, 0x4, 0x2, 0x2, 0x68, 0x65, 0x0, 0xe4, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x1f}, {[@timestamp_prespec={0x44, 0x4c, 0x49, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x18}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@broadcast}, {@empty, 0x1}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}, {@local}, {@multicast2, 0x6}, {@empty, 0xb0000000}]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f0000000200)={0x7fffffffffffffff, 0x80, 0x3, 0x4000000, 0x1, [0x4, 0x1, 0xd1f, 0x4]}) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="d00200001200e20826bd7000fedbdf2509050e5f4e2033318491f428c24e2100000000040000000008000000090000000800000000100000bc29ec10b9a7f786148e4d0f7b021718acbfc24fb8b707aee96133c20215d3b2858a12311cc902c2e2839abf6fe3c00a25b57f2afa1271d4e77f5c9c624146df608e7d9be3c945be7adf167db5002271daef4f", @ANYRES32=r4, @ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYRES64=r6], 0x54}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) 52.109024599s ago: executing program 2 (id=166): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bc"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/8) 50.979876491s ago: executing program 1 (id=169): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(0x0, 0x40, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/8) 50.463702627s ago: executing program 2 (id=172): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000080)={r4}) shutdown(r0, 0x1) 50.343363125s ago: executing program 2 (id=173): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) 50.237940619s ago: executing program 2 (id=174): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0xd) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40186f40, &(0x7f0000000100)={0x4, 0x8bffffff, 0xf3d, 0x1, 'syz1\x00', 0x5}) read$char_usb(r3, &(0x7f0000000100)=""/201, 0xc9) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x9c, 0x80, 0x4, 0xfffffffb}]}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@private2, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c40)={0x34, &(0x7f0000000a00)=ANY=[@ANYBLOB="20120500189e149c0ece10"], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 49.478654254s ago: executing program 1 (id=176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f071, 0x5}) r2 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0xb, 0x1, 0x0, "f3f0b32aa4526bc424cc83055c5a8d21e6cb87d69b11022ef02d2b83dda571f8"}) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0x1278, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4051}}], 0x2, 0x0) r6 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r7 = getpgrp(0xffffffffffffffff) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000180)={'\x00', 0x5, 0x54f1582a, 0x9, 0x2, 0x5, r7}) openat$cgroup_ro(r6, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 49.385588238s ago: executing program 1 (id=177): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='htcp', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0xfffffffffffffe31, 0x10008095, 0x0, 0x0) 48.559894097s ago: executing program 1 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0xfffe, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) 48.4892846s ago: executing program 1 (id=179): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x88582) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x1, 0x0, 0x0, 0x20, 0x14, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4a2e00d9683dda1af1ea09de2b7fb0a0100000000000000000300000000000a000029bf00", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x8001) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) open(&(0x7f0000000200)='./file0\x00', 0xa5941, 0x5) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006ec0)=[{{&(0x7f0000003280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, 0x0}}], 0x1, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2a0, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@device_b}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_BEACON_HEAD={0x194, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x80}, @device_a, @broadcast, @from_mac=@device_b, {0x2, 0x1}}, 0x3, @default, 0x0, @void, @val={0x1, 0x3, [{0x2}, {0x1b}, {0x1, 0x1}]}, @void, @void, @void, @val={0x5, 0x8d, {0x8, 0xa7, 0x5, "0051bf10083b73fdf09d135b8872b5282e096671f6bdf615a9ec86aeba3b397f156d7cc57ff4cda036c3dd0a10ed1d13bf549e1e9007f27e9acbe32b21461e4b7489a81b4d5a918df546d2b2715fe0cbbfe0fbc0b980a6ad69e8321c1aeff03e1cb46f34a0c025986b500799e0a32c5a9acca0d2e1a9786361faf49a743be8c3d651596edba12e38a6f5"}}, @val={0x25, 0x3, {0x1, 0x8, 0x6}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x4, 0x8, 0xd7}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, 0x41}}, @val={0x76, 0x6, {0x6, 0xf8, 0x3c, 0xfff}}, [{0xdd, 0x6e, "32358760a30753a31cb1b599a1107a85d65544b9cef0d9035e0f1342d22a398fe9dcb05c5076fa1ba42be74b794f88df8b8ac453a65a19ca3189467427cfa24a6ef3537dc021fe9e00a06912b8ed07304ff04f14d0164045935a78c17c282ba1898340a1e9be2beb2d9b729c865a"}, {0xdd, 0x6, "780f7516b634"}, {0xdd, 0x37, "09bc13becbfd815deba5f3a4dccff4acf8c8f41429c418f7d7563c37c3f514507d6771045f221a6a2a99b2a3eec37d3298ffa313fd3f13"}]}}, @NL80211_ATTR_FTM_RESPONDER={0xa8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x9f, 0x3, "e699b8674450ac074e77a016aff908e594725f3534bae9cdd9d64a090563b06a175c9d7bf976c3a06d66034b3ba26cb13eb79281eaee74a8a8e57265fd47930ea6df550e963475f2de9d36f040cb96d9588987513e976e85c8c857116a412a914ced7c62a43e8f1ffe4d38f24ea8dc9992532a8501f9e325ff25e7b23467fd51c584679c2a744c7908e910d4f3836ed6c9c9eefed42ee88770799e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x2a0}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) finit_module(r1, &(0x7f0000000240)='wlan0\x00', 0x2) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x81}, 0x8) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x6) 48.177771247s ago: executing program 1 (id=180): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @sint={0x2, 0x400}}]}) pread64(r0, &(0x7f0000000000), 0x0, 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) epoll_create1(0x80000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x1}}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r3, 0x0, 0x3}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 47.742595298s ago: executing program 34 (id=180): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @sint={0x2, 0x400}}]}) pread64(r0, &(0x7f0000000000), 0x0, 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) epoll_create1(0x80000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x1}}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r3, 0x0, 0x3}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 35.171150757s ago: executing program 35 (id=174): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0xd) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40186f40, &(0x7f0000000100)={0x4, 0x8bffffff, 0xf3d, 0x1, 'syz1\x00', 0x5}) read$char_usb(r3, &(0x7f0000000100)=""/201, 0xc9) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x9c, 0x80, 0x4, 0xfffffffb}]}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@private2, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c40)={0x34, &(0x7f0000000a00)=ANY=[@ANYBLOB="20120500189e149c0ece10"], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 29.268940409s ago: executing program 4 (id=210): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x17e}) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f0000000000)={0xfec00002, 0x4000}) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24040890) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 28.863917151s ago: executing program 4 (id=218): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='[:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r8, 0x4}, &(0x7f0000000140)=0x8) r9 = syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000100)={0x5, 0x3, 0x6}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000001c0)={0x0, "a9f3dc8eadce29b1d1935245db28188c8987100d43602653d5288dbd18c3e342", 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01864c1, &(0x7f0000000200)={0x0, 0x1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000280)={"ae38c2eaa9de0859c7b1e8f6f97cf2cd28f34ac73e42d0cd59572f918d660734", r11}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x8, 0x5, 0x6}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x450180, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000000)={0x2, 0x6, 0xbc0}) 27.912073927s ago: executing program 4 (id=217): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, 0x0) 27.420210047s ago: executing program 36 (id=217): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, 0x0) 7.29190354s ago: executing program 8 (id=313): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x8000, 0x700, 0x0, 0x8, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x67, 0x0, 0x4, 0x29, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0x4, 0xfd}]}}}}}) (async) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0xe0b, 0xc0) ioctl$KDMKTONE(r1, 0x4b30, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) syz_usb_connect$uac1(0x5, 0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYRES32=r2], 0x0) 6.505504055s ago: executing program 7 (id=319): syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3042, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0x50, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xff, 0xff, 0x69, {0x7, 0x25, 0x1, 0x4, 0xd, 0xead}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5a, 0x9, 0x8, {0x7, 0x25, 0x1, 0x0, 0x2, 0x300}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000002480)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0xfd, 0x2}, {0xf0}}]}}, 0xf) 5.925889308s ago: executing program 8 (id=324): syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="eb0efe05200c"], 0x7) 5.740802912s ago: executing program 8 (id=325): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="8d00"}) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000400)) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="672b2a5a639194436c9878965bbb263a2066ec0cd77f56ae48ba23ee0edeff3226d3a28ef6da88e450ac84300020d8ab220eb6ad6533018fbd478517a5af0ba7535c796796676e97f5679041da8931ffc8fafca3a7309aef4a3924937ccc36be90d97bd6f23eb2eb754b56bd80a04b6c87ede1a748577ccf1b2a28e0e3e5326122491f22d2ebfa60cbcb3e3d0e615c546ee8ae1d2f3e2910fd00793b0ef54166df6916fde8b50af2bb8a19ad628c17a0f95ad6e34c0481741034598eb60f", 0xbe) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000008c0)={0x0, 0x15bd, 0xb6ca, 0x0, 0x0, [0x2]}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') r5 = syz_socket_connect_nvme_tcp() r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000200)={0xe1, 0xfff9, 0x9, 0x8007, 0x9, "7e77672dffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0xff) preadv(r5, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) shmget$private(0x0, 0x4000, 0x808, &(0x7f0000007000/0x4000)=nil) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r7 = ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000400)={0x1, 0x0, r5}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000480)={r8, 0x3, 0x1, 0x4}) r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r9, 0x40045613, &(0x7f0000000000)=0xeb) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB="2c338c5a9d6f3d", @ANYRESHEX=r11, @ANYBLOB=',version=9p2000,\x00']) 5.363091248s ago: executing program 6 (id=327): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @multicast2}}, [0x6363ba55, 0xfffffffffffffff1, 0x3, 0x0, 0x7, 0x3, 0xffffffff00000000, 0x4, 0xf, 0x7, 0x4, 0xa, 0x80, 0x5, 0x9]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0xfff, 0x2, 0x9, 0x0, r1}, &(0x7f0000000240)=0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x4, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000300)={@val={0x8, 0x9100}, @void, @x25={0x0, 0x1, 0x1b, "86de92c03aca06c3a046d8a6b33d9492c29b69ace38faab791d21ac26e0437b5db82f68262704f44e805e449b8d528435432f611d27ab59ce243d54488a49c7e5b51f3f6670e011a6d96a389d6cd932f2a0c906ec1ad84535ad2f23e3db8caab0b1b9297995e6ef2eee88c3687716e1052e93f8cf57a2401c8b04075c09ac7d56cce88af3bfebc60bd781bb7c5f14c97711ad1d57f92760a171c98ae95c853004f723b76c753428f4e7093cbcf94ca18d15dc060b3882a28676568d6ef758b1081e4"}}, 0xc9) 4.613219949s ago: executing program 6 (id=329): syz_usb_connect(0x0, 0x36, 0x0, 0x0) 4.519073298s ago: executing program 7 (id=330): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) prctl$PR_SCHED_CORE(0x4d, 0x1fffffffffffffd, 0x0, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x15, 0x0, 0x0, 0x5}, @mpls={[], @ipv6=@generic={0x3, 0x6, '\x00', 0x8, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@dstopts={0x3c}]}}}}, 0x3e) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000080)={0x1, 0xfff, 0x80000000}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = socket$inet6(0xa, 0x802, 0x88) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f0000000000)={0xa, 0x3, 0x0, {0x42, 0x1ff, 0x40000002, 0x2006}}) syz_usb_connect$uac2(0x5, 0x8f, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x9, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x3, 0x2}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x10, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r5, 0x118, 0x2, 0x0, &(0x7f00000003c0)) sendto$inet6(r3, &(0x7f00000001c0)="ad518d980b", 0x5, 0x40040c0, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) bind$l2tp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r6) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000280)={0x4, r0}) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000380)=0x10) 4.184224379s ago: executing program 8 (id=332): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r1, 0x10e, 0x9, 0x0, &(0x7f0000000280)) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r4, &(0x7f00000003c0), 0x100000000000022d) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f00000000c0)={0x0, 0x2, r1, 0x10000, 0x80000}) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='jfs\x00', 0x800041, &(0x7f00000001c0)='\xd2\xdf\x00\x10ard') 3.790528935s ago: executing program 6 (id=335): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2, 0x380, 0x0}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) fstatfs(r3, &(0x7f00000005c0)=""/4096) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) 3.625187162s ago: executing program 8 (id=336): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x15, 0x0, 0x0, 0x5}, @mpls={[], @ipv6=@generic={0x3, 0x6, '\x00', 0x8, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@dstopts={0x3c}]}}}}, 0x3e) 3.517629552s ago: executing program 6 (id=338): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = eventfd2(0x7b448cf1, 0x801) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x3, r1}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x6}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control={0x9, 0xfffffffc, 0x1bb}}], 0x70) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x57, 0x1, 0xdb7, {0xffff, 0x1}, {0x48, 0x3}, @cond=[{0x8, 0x4, 0x8, 0x849, 0x5, 0x7}, {0x94, 0x4, 0x1, 0x7, 0x6, 0x4}]}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000000)={0x5b, 0x5, 0x7, 0x3, "9c2b45e4f5d791f27b531f369941f25a4bfa0527ddcd1880b190aa8c00"}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000000)={0x2, 0x0, 0x0, r7}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r9 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$EVIOCGBITSND(r9, 0x80404532, &(0x7f00000001c0)=""/219) ptrace(0x10, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x9}, {0x2, [{0xc9, 0x200}, {0xc8, 0x4}]}}}, 0xc) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$DVB_DVR_DMX_QUERYBUF(r3, 0xc0186f3d, &(0x7f0000000140)={0x5, 0xe, 0x8, 0x7fff, 0x21}) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.03442226s ago: executing program 8 (id=339): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x4}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x100, 0x40, "", [{{0x9, 0x4, 0x0, 0xb9, 0x2, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x7, 0x5, 0x5}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x2, 0x0, 0x5, 0xff, 0x2}, 0x28, &(0x7f0000000140)=ANY=[@ANYBLOB="050f2800091800000000003000ff00dd08c447bb429b25ada128e82b7621ab92ed000000000000cf4f97e451ca000000"], 0x3, [{0xf2, &(0x7f0000000400)=@string={0xf2, 0x3, "39b4bca7ba363baa2a41f47e57db80eb9a1af6228c62e45d1053bbd85e1a22ebb20d9e82c3835a479417cbf50e01aae1b6a71136a7a2c131aacc8fc7c02c7fb5c3ce90e0808ed08d86509a37d3ee759b6c3e6f10916f7d3c805094ed7f292f0b2869683a1986445799db9dbb6ffb0f0e8116ad314d4ce33320df0884773331f925278d1ea08db0931ffaa99b56390037c4aaf3ad8d34950073f245a4b3582a8465996b59174e49cf51f99f6b109c65f2d00394b7aa25f6bc9246367b16608482df6b6df39178bc621a0c260b2b745f9246dc66b12a600da8890495fab3823efc7b0ecaa333899b33b2ba5322e85a5495"}}, {0x102, &(0x7f0000000700)=@string={0x102, 0x3, "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"}}, {0x8d, &(0x7f0000000640)=@string={0x8d, 0x3, "147ba135b2a90c413acbef08007d369ed49742e1a9e08ac56d24f2faea8d7efab077b102496642654cbcb314e78db9b562b0ed47c52f4b6194421a70c5f3116969a18f66732e9ffa964f50ee3823faa6fb728b4d222e3467137ae811576fa9a1daaba0c41f51d6d050d339eb4a55b2045f9d935aacf40328974d472f9f367417dc32b4f92d5735767d646e"}}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x78, &(0x7f00002a0000/0x1000)=nil, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_connect$uac3(0x5, 0x9d, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x9e8, 0x62, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x3, 0x10, 0x0, {0x8, 0xb, 0x0, 0x2, 0x1, 0x41, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x1e, 0x5d}, [@input_terminal={0x14, 0x24, 0x2, 0x6, 0x202, 0x5, 0x80, 0x119, 0x22aa, 0x3, 0x9b08, 0xffff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x66, 0x10, {0xa, 0x25, 0x25, 0xfff, 0x20, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x2, 0x7, 0x6, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x81, 0x1, 0x0, {0xa, 0x25, 0x25, 0x6, 0x9, 0x2}}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x15, 0x0, 0x10, 0x20}, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="050f0c000107baa908f8d600"], 0x1, [{0x6b, &(0x7f00000005c0)=@string={0x6b, 0x3, "12f877b92336a0c9debb83c25d97f23bb0bc16544498b365b17ecb81acb4fe95d9463f66ffb7e4d99086f42c7f803783fbe8e57610b8f19e34dd5c679e276bbaf113c7d81e4fa8d014c332724986ecb1c66f049795cf5029a4fea3589d57bd50a48efa2d725374066a"}}]}) syz_usb_control_io(r0, 0x0, 0x0) 2.697572641s ago: executing program 5 (id=340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x20}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 2.439460872s ago: executing program 5 (id=341): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="02e2a64c05818cce1d9e29", 0xb}, {&(0x7f0000000b80)="3a0292f9c090d59704fef93e2a4c2b2b0cb062efba3f5553066c8666c05f3e7e65385e9347a6c98293b7521a3df7df34f1af4d5124e1ecfba355d3b83065234864e6e8b4494095b0cba43b594615670d7e7364802d0c4663851579d75737b98232c8cb78aaba3348afc0db149ad00ff01087fe70514389ca39e8c048e90c0414ca6d994cade6163ea8aca020937bc30ae261334f8ca93d432b020b955c63a12a3778db9bcfecf301ff6d5d08ec4445ffff09c98bb3cb29fd72a9", 0xba}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0xfffffffffffffe31, 0x10008095, 0x0, 0x0) 2.373573368s ago: executing program 6 (id=342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000002c0)={0xdf, 0x0, 0x10000}) 2.193932294s ago: executing program 5 (id=343): syz_usb_connect(0x0, 0x36, 0x0, 0x0) 1.558991288s ago: executing program 5 (id=344): syz_clone3(&(0x7f0000001340)={0x10400, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280), {0x3}, &(0x7f00000002c0)=""/4096, 0x1000, &(0x7f00000012c0), &(0x7f0000001300)=[0x0], 0x1}, 0x58) fsetxattr(r0, &(0x7f00000013c0)=@random={'system.', '!#\x00'}, &(0x7f0000001400)='\x00', 0x1, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 1.530885723s ago: executing program 6 (id=345): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)={0x20, 0x15, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000c0400000049e28375"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3) syz_usb_control_io$sierra_net(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x5, 0x5f, {0x5f, 0x23, "9f89e91962533deaf7a07b36d6bd9511eabd46ae925fe62b9943ea5a3403d7c0d4202f1e1a809a599e1649f59b188ba593ac9f203d140c853846ae0c464fd51ccfc8c988962a83d0c7215621b604f94fb5a2c857b6cc6e0a42892db0e6"}}, &(0x7f0000000140)={0x0, 0x3, 0x96, @string={0x96, 0x3, "3a6f8488eb7cbbb7abfbfbcee825741fcd58b5d96450e77b6c38a530a6d9914fb65109d86b6961e4a328ae45e1484f903b81f565ec1ad13ade2b74d05c4400804ed0669e45946e9b1fd01b484e0e13a144b71c5ca0e4cb47490416da83e2f1f209ff80e12ca646030755660deb2fe70c2bc6e482d4281223302ac353b71c06399c12d5728bfe2a907f0e649877ed597cd7277797"}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000240)={0x40, 0x5d60edd038d26c45, 0x40, "a75af5c1ae7afb8f897a31a4dd7887b0623df2908e489aa50542e6729a7d3c5031682b68d6493a22de079663f333b21d096a671a78e69e2d95b1905e8353836f"}, &(0x7f0000000b00)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000000c0)={0x21, 0x0, 0x2, 'z+'}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)={0x20, 0x14, 0x4, "00bd24ba"}, 0x0, 0x0}) 1.277937097s ago: executing program 5 (id=346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r1, 0x0, 0x0, 0x2120, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x1, @raw_data="a425e2f1a54d24f15247474260608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa1810000000319"}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x14, 0x5, 0x5) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x61d0, &(0x7f0000000100)) 1.116277615s ago: executing program 7 (id=347): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x181) statx(r2, 0x0, 0x7800, 0x80, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="11000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r6, 0x40047452, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_buf(r7, 0x1, 0x52, 0x0, &(0x7f00000000c0)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x101280, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x2099, 0x3, 0x20000006, 0x7ffffff9}, 0x10) write(r8, &(0x7f00000000c0)="1800000016005f0227fffffffffffff80700000001000000", 0x18) openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0xb) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) sendto$inet6(r0, &(0x7f0000000000)="8f6bb66f", 0x18, 0x0, 0x0, 0x0) 767.021868ms ago: executing program 7 (id=348): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x8a881, 0x180) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000280)={r1, 0x4, 0x7, "99963b36d92cd43e330e465666407e88d8c88990279f6076485c7bc270ff884f9f2caf1115ba03fb0730500a3e9b5d44ad2d07c464a08ede35cb45d3efec721f8e45a0894b51f37a5b685f9247c986bb30e388c1af76e8624042dd3b2c9eb585ff69de38c6384002134ab411d2cffb45835dcdfb309292d1ebe4396dc87a2fbb10780130a65ff458fc6cca0c78fdb26121d34c7e383410fd94577b641129f162b34c71cbb9c9fe64c9d779379b62c6"}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) 337.742655ms ago: executing program 7 (id=349): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) (async) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f00000000c0)="c9", 0x1, 0x44065, 0x0, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000901000000000000000000000000010800054046ac9c05cb6d69a073797a31000000000c000480080001400051"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240), 0x8) 76.685847ms ago: executing program 7 (id=350): syz_emit_vhci(&(0x7f0000000a80)=ANY=[], 0xd) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x88, r4, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x3800, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r4, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x50}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c92024002000050017071c000200040005000300ff7fe600030000041c0500d3d1ff030000000000"], 0x29) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r6, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r7, &(0x7f0000000140)={0x1f, 0x0, @none, 0x8}, 0xe) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2, 0x1}, 0xe) r8 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x713, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0xeb6}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x8, 0x1b}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x6, 0xf8, 0x1}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x2, 0x7, 0xc, 0x20, 0x9}, 0x21, &(0x7f0000000080)=ANY=[@ANYBLOB="05238413c16ad0ccb8003f0000cf370000"], 0x4, [{0x7, &(0x7f00000001c0)=@string={0x7, 0x3, "992ced468f"}}, {0xfd, &(0x7f0000000200)=@string={0xfd, 0x3, "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"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40f}}]}) syz_usb_disconnect(r8) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x8b}, @l2cap_cid_signaling={{0x87}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xf, 0x2}, {0x401}}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x52}}, @l2cap_create_chan_req={{0xc, 0x7, 0x5}, {0xe000, 0x8000, 0x8}}, @l2cap_conf_rsp={{0x5, 0x89, 0x31}, {0x7, 0x7, 0x3, [@l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0xf7, 0x0, 0x1, 0x3afb312f, 0x3, 0xf84}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x7, 0x1, 0x1, 0x82ca}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x7}]}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x6}}, @l2cap_conf_rsp={{0x5, 0x7, 0x33}, {0x40, 0x3, 0xa, [@l2cap_conf_mtu={0x1, 0x2, 0x40}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_mtu={0x1, 0x2, 0xd}, @l2cap_conf_efs={0x6, 0x10, {0x69, 0x0, 0x5c0e, 0xffff7fff, 0x1ff, 0x6}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x8, 0x9, 0x6, 0x6, 0x2}}, @l2cap_conf_flushto={0x2, 0x2, 0xa4cb}]}}]}}, 0x90) 0s ago: executing program 5 (id=351): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="02e2a64c05818cce1d9e29", 0xb}, {&(0x7f0000000b80)="3a0292f9c090d59704fef93e2a4c2b2b0cb062efba3f5553066c8666c05f3e7e65385e9347a6c98293b7521a3df7df34f1af4d5124e1ecfba355d3b83065234864e6e8b4494095b0cba43b594615670d7e7364802d0c4663851579d75737b98232c8cb78aaba3348afc0db149ad00ff01087fe70514389ca39e8c048e90c0414ca6d994cade6163ea8aca020937bc30ae261334f8ca93d432b020b955c63a12a3778db9bcfecf301ff6d5d08ec4445ffff09c98bb3cb29fd72a9", 0xba}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0xfffffffffffffe31, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): Call Trace: [ 119.179189][ T6305] [ 119.179197][ T6305] dump_stack_lvl+0xe8/0x150 [ 119.179232][ T6305] should_fail_ex+0x412/0x560 [ 119.179265][ T6305] should_failslab+0xa8/0x100 [ 119.179295][ T6305] __kmalloc_noprof+0xe8/0x760 [ 119.179319][ T6305] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 119.179352][ T6305] tomoyo_realpath_from_path+0xe3/0x5d0 [ 119.179390][ T6305] ? tomoyo_path_number_perm+0x219/0x630 [ 119.179411][ T6305] tomoyo_path_number_perm+0x246/0x630 [ 119.179436][ T6305] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 119.179462][ T6305] ? __lock_acquire+0x6b5/0x2cf0 [ 119.179509][ T6305] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 119.179558][ T6305] ? __fget_files+0x2a/0x420 [ 119.179582][ T6305] ? __fget_files+0x2a/0x420 [ 119.179600][ T6305] ? __fget_files+0x3a0/0x420 [ 119.179618][ T6305] ? __fget_files+0x2a/0x420 [ 119.179643][ T6305] security_file_ioctl+0xc3/0x2a0 [ 119.179678][ T6305] __se_sys_ioctl+0x47/0x170 [ 119.179707][ T6305] do_syscall_64+0x14d/0xf80 [ 119.179730][ T6305] ? trace_irq_disable+0x3b/0x150 [ 119.179748][ T6305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.179768][ T6305] ? clear_bhb_loop+0x40/0x90 [ 119.179790][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.179809][ T6305] RIP: 0033:0x7fb87fb9c799 [ 119.179828][ T6305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.179843][ T6305] RSP: 002b:00007fb880a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.179864][ T6305] RAX: ffffffffffffffda RBX: 00007fb87fe16090 RCX: 00007fb87fb9c799 [ 119.179877][ T6305] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 119.179889][ T6305] RBP: 00007fb880a77090 R08: 0000000000000000 R09: 0000000000000000 [ 119.179900][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.179911][ T6305] R13: 00007fb87fe16128 R14: 00007fb87fe16090 R15: 00007fff75ac3008 [ 119.179942][ T6305] [ 119.179950][ T6305] ERROR: Out of memory at tomoyo_realpath_from_path. [ 119.306651][ T5831] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 119.352293][ T5833] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 119.408373][ T6308] netlink: 24 bytes leftover after parsing attributes in process `syz.5.83'. [ 119.513305][ T6313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.84'. [ 119.553625][ T5833] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 119.591589][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.626930][ T6286] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 119.776963][ T5831] Bluetooth: hci4: command tx timeout [ 120.015992][ T5833] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 120.075869][ T5928] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 120.120434][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 120.128783][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 120.138773][ T5825] usb 5-1: USB disconnect, device number 5 [ 120.199068][ T5833] usb 2-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config [ 120.215593][ T5833] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 120.229932][ T5833] usb 2-1: config 1 interface 0 has no altsetting 0 [ 120.237274][ T5928] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 120.239589][ T5833] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.249270][ T5928] usb 3-1: config 0 has no interface number 0 [ 120.261515][ T5928] usb 3-1: config 0 interface 4 has no altsetting 0 [ 120.263153][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.268342][ T5928] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 120.268370][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.271283][ T5928] usb 3-1: config 0 descriptor?? [ 120.292807][ T5833] usb 2-1: Product: syz [ 120.294284][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 120.299767][ T5833] usb 2-1: Manufacturer: syz [ 120.325391][ T5833] usb 2-1: SerialNumber: syz [ 120.333155][ T5928] cp210x 3-1:0.4: cp210x converter detected [ 120.465507][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 120.476617][ T24] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 120.486195][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.494392][ T24] usb 6-1: Product: syz [ 120.499766][ T24] usb 6-1: Manufacturer: syz [ 120.504670][ T24] usb 6-1: SerialNumber: syz [ 120.526387][ T24] usb 6-1: config 0 descriptor?? [ 120.542527][ T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 120.563909][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 120.578290][ T5928] cp210x 3-1:0.4: failed to get vendor val 0x370b size 1: -32 [ 120.595357][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 120.605940][ T5928] cp210x 3-1:0.4: querying part number failed [ 120.627765][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 120.637018][ T5928] usb 3-1: cp210x converter now attached to ttyUSB0 [ 120.653968][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 120.681949][ T5928] usb 3-1: USB disconnect, device number 13 [ 120.722753][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.737004][ T5928] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 120.780018][ T5928] cp210x 3-1:0.4: device disconnected [ 120.788207][ T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 120.797854][ T6332] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 120.825050][ T24] usb 6-1: media controller created [ 120.850832][ T6332] dvb-usb: bulk message failed: -22 (7/0) [ 120.881183][ T6332] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 120.902623][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.934967][ T6332] ttusb2: i2c transfer failed. [ 120.993272][ T24] usb 6-1: selecting invalid altsetting 3 [ 121.014535][ T24] ttusb2: set interface to alts=3 failed [ 121.130334][ T24] DVB: Unable to find symbol tda10086_attach() [ 121.148974][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 121.165731][ T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 121.194332][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 121.210814][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 121.237048][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 121.251444][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 121.273642][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 121.312684][ T24] usb 6-1: USB disconnect, device number 4 [ 121.325545][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 121.355452][ T10] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 121.391386][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.430458][ T10] usb 5-1: Product: syz [ 121.439497][ T10] usb 5-1: Manufacturer: syz [ 121.442453][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 121.444240][ T10] usb 5-1: SerialNumber: syz [ 121.512921][ T10] usb 5-1: config 0 descriptor?? [ 121.532610][ T10] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 121.540689][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 121.547059][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 121.558003][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 121.563879][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 121.623884][ T5833] cdc_ether 2-1:1.0: invalid descriptor buffer length [ 121.642451][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.658113][ T5833] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 121.689106][ T10] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 121.717423][ T5833] usb 2-1: USB disconnect, device number 12 [ 121.731342][ T10] usb 5-1: media controller created [ 121.794846][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.851087][ T10] usb 5-1: selecting invalid altsetting 3 [ 121.858877][ T10] ttusb2: set interface to alts=3 failed [ 121.905621][ T10] DVB: Unable to find symbol tda10086_attach() [ 121.911988][ T10] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 121.922242][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 121.946654][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 121.958925][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 121.964710][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 121.988319][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 122.013660][ T10] usb 5-1: USB disconnect, device number 6 [ 122.055463][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 122.091872][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 122.228803][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 122.252731][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 122.261529][ T6367] ALSA: mixer_oss: invalid OSS volume '' [ 122.277702][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 122.303497][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 122.317772][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.334326][ T24] usb 6-1: Product: syz [ 122.345189][ T24] usb 6-1: Manufacturer: syz [ 122.355148][ T24] usb 6-1: SerialNumber: syz [ 122.404895][ T24] usb 6-1: config 0 descriptor?? [ 122.421530][ T6372] openvswitch: netlink: IP tunnel dst address not specified [ 122.432964][ T6362] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 122.652705][ T6362] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 122.856910][ T796] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 122.869494][ T24] usb 6-1: USB disconnect, device number 5 [ 122.947652][ T5825] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 123.018230][ T796] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 123.028635][ T796] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 123.035632][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 123.040696][ T796] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=1c.1c [ 123.054367][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.062457][ T796] usb 2-1: Product: syz [ 123.066944][ T796] usb 2-1: Manufacturer: syz [ 123.071575][ T796] usb 2-1: SerialNumber: syz [ 123.115447][ T5825] usb 5-1: Using ep0 maxpacket: 32 [ 123.122648][ T5825] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 123.131346][ T5825] usb 5-1: config 0 has no interface number 0 [ 123.137632][ T5825] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 123.151076][ T5825] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 123.160298][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.168750][ T5825] usb 5-1: Product: syz [ 123.173259][ T5825] usb 5-1: Manufacturer: syz [ 123.178042][ T5825] usb 5-1: SerialNumber: syz [ 123.185442][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 123.191297][ T5825] usb 5-1: config 0 descriptor?? [ 123.198272][ T6378] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 123.198721][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 123.214114][ T10] usb 3-1: config 179 has no interface number 0 [ 123.225669][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 123.236933][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 123.248319][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 123.259820][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 123.271383][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 123.284860][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 123.294025][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.315692][ T6380] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 123.351033][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.361101][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.429765][ T6378] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 123.649066][ T5825] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 123.676462][ T5825] asix 5-1:0.188: probe with driver asix failed with error -71 [ 123.694668][ T5825] usb 5-1: USB disconnect, device number 7 [ 123.764008][ T24] usb 3-1: USB disconnect, device number 14 [ 123.764077][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 123.778518][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 124.235391][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 124.403695][ T10] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 124.435231][ T10] usb 6-1: config 0 has no interface number 0 [ 124.447719][ T10] usb 6-1: config 0 interface 4 has no altsetting 0 [ 124.465508][ T10] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 124.474635][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.494524][ T10] usb 6-1: config 0 descriptor?? [ 124.521985][ T10] cp210x 6-1:0.4: cp210x converter detected [ 124.734536][ T10] cp210x 6-1:0.4: failed to get vendor val 0x370b size 1: -32 [ 124.757246][ T10] cp210x 6-1:0.4: querying part number failed [ 124.782313][ T10] usb 6-1: cp210x converter now attached to ttyUSB0 [ 124.809230][ T10] usb 6-1: USB disconnect, device number 6 [ 124.826318][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 124.850010][ T10] cp210x 6-1:0.4: device disconnected [ 125.121893][ T6398] netlink: 48 bytes leftover after parsing attributes in process `syz.4.102'. [ 125.186424][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 125.345521][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 125.357818][ T24] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 125.369664][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.381467][ T24] usb 3-1: Product: syz [ 125.385873][ T24] usb 3-1: Manufacturer: syz [ 125.391448][ T24] usb 3-1: SerialNumber: syz [ 125.402840][ T24] usb 3-1: config 0 descriptor?? [ 125.421852][ T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 125.429791][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 125.429900][ T6400] binder: 6399:6400 ioctl c0306201 200000000640 returned -22 [ 125.436326][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 125.450512][ T5825] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 125.456245][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 125.470805][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 125.486677][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.497997][ T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 125.506504][ T24] usb 3-1: media controller created [ 125.521917][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.549129][ T24] usb 3-1: selecting invalid altsetting 3 [ 125.555535][ T24] ttusb2: set interface to alts=3 failed [ 125.620352][ T5825] usb 5-1: Using ep0 maxpacket: 16 [ 125.645106][ T24] DVB: Unable to find symbol tda10086_attach() [ 125.651507][ T5825] usb 5-1: config 5 has an invalid interface number: 168 but max is 0 [ 125.665623][ T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 125.671246][ T5825] usb 5-1: config 5 has no interface number 0 [ 125.684493][ T6408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.690955][ T5825] usb 5-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 125.696337][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 125.705514][ T5825] usb 5-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 125.713482][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 125.731909][ T6408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.752855][ T5825] usb 5-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0x23, changing to 0x3 [ 125.753046][ T796] usb 2-1: USB disconnect, device number 13 [ 125.782468][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 125.795409][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 125.801198][ T5825] usb 5-1: config 5 interface 168 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 125.831420][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 125.848783][ T5825] usb 5-1: config 5 interface 168 has no altsetting 0 [ 125.863740][ T24] usb 3-1: USB disconnect, device number 15 [ 125.882692][ T5825] usb 5-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 125.895569][ T5928] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 125.907102][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.921530][ T5825] usb 5-1: Product: syz [ 125.937426][ T5825] usb 5-1: Manufacturer: syz [ 125.942395][ T5825] usb 5-1: SerialNumber: syz [ 125.979033][ T6398] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 126.013221][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 126.035512][ T5928] usb 6-1: device descriptor read/64, error -71 [ 126.258526][ T6417] syzkaller1: entered promiscuous mode [ 126.264317][ T6417] syzkaller1: entered allmulticast mode [ 126.275569][ T5928] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 126.406527][ T5928] usb 6-1: device descriptor read/64, error -71 [ 126.464490][ T6420] @: renamed from dummy0 (while UP) [ 126.537572][ T5928] usb usb6-port1: attempt power cycle [ 126.705573][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 126.747480][ T5825] pn533_usb 5-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 126.806778][ T5825] usb 5-1: USB disconnect, device number 8 [ 126.856034][ T6423] FAULT_INJECTION: forcing a failure. [ 126.856034][ T6423] name failslab, interval 1, probability 0, space 0, times 0 [ 126.869268][ T6423] CPU: 1 UID: 0 PID: 6423 Comm: syz.1.109 Not tainted syzkaller #0 PREEMPT(full) [ 126.869296][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.869308][ T6423] Call Trace: [ 126.869316][ T6423] [ 126.869324][ T6423] dump_stack_lvl+0xe8/0x150 [ 126.869353][ T6423] should_fail_ex+0x412/0x560 [ 126.869373][ T6423] should_failslab+0xa8/0x100 [ 126.869391][ T6423] __kmalloc_cache_noprof+0x88/0x660 [ 126.869406][ T6423] ? sctp_add_bind_addr+0x8c/0x370 [ 126.869422][ T6423] ? __ipv6_addr_type+0x247/0x2f0 [ 126.869438][ T6423] sctp_add_bind_addr+0x8c/0x370 [ 126.869460][ T6423] sctp_bind_addr_copy+0xb3/0x3c0 [ 126.869478][ T6423] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 126.869495][ T6423] sctp_connect_new_asoc+0x2ff/0x6b0 [ 126.869510][ T6423] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 126.869524][ T6423] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 126.869538][ T6423] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 126.869553][ T6423] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 126.869566][ T6423] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 126.869582][ T6423] ? security_sctp_bind_connect+0x7e/0x2c0 [ 126.869596][ T6423] sctp_sendmsg+0x1528/0x2c10 [ 126.869617][ T6423] ? __pfx_sctp_sendmsg+0x10/0x10 [ 126.869636][ T6423] ? aa_sk_perm+0x6d5/0x900 [ 126.869654][ T6423] ? __pfx_aa_sk_perm+0x10/0x10 [ 126.869666][ T6423] ? sock_rps_record_flow+0x19/0x400 [ 126.869681][ T6423] ? inet_sendmsg+0x2f4/0x370 [ 126.869698][ T6423] sock_sendmsg_nosec+0x128/0x1d0 [ 126.869728][ T6423] __sys_sendto+0x3ff/0x590 [ 126.869751][ T6423] ? __pfx___sys_sendto+0x10/0x10 [ 126.869767][ T6423] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 126.869800][ T6423] ? __fget_files+0x3a0/0x420 [ 126.869819][ T6423] ? ksys_write+0x242/0x270 [ 126.869840][ T6423] ? __pfx_ksys_write+0x10/0x10 [ 126.869856][ T6423] __x64_sys_sendto+0xde/0x100 [ 126.869871][ T6423] do_syscall_64+0x14d/0xf80 [ 126.869887][ T6423] ? trace_irq_disable+0x3b/0x150 [ 126.869899][ T6423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.869910][ T6423] ? clear_bhb_loop+0x40/0x90 [ 126.869924][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.869935][ T6423] RIP: 0033:0x7fb87fb9c799 [ 126.869948][ T6423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.869957][ T6423] RSP: 002b:00007fb880a98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 126.869972][ T6423] RAX: ffffffffffffffda RBX: 00007fb87fe15fa0 RCX: 00007fb87fb9c799 [ 126.869980][ T6423] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 126.869987][ T6423] RBP: 00007fb880a98090 R08: 000020000005ffe4 R09: 000000000000001c [ 126.869994][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.870001][ T6423] R13: 00007fb87fe16038 R14: 00007fb87fe15fa0 R15: 00007fff75ac3008 [ 126.870019][ T6423] [ 126.876025][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 126.886340][ T5928] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 126.928096][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 126.978516][ T5928] usb 6-1: device descriptor read/8, error -71 [ 127.022791][ T10] usb 3-1: config 179 has no interface number 0 [ 127.203914][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 127.229616][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 127.242117][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.257165][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 127.268821][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 127.282253][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 127.291758][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.319026][ T6421] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 127.327352][ T5928] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 127.366637][ T5928] usb 6-1: device descriptor read/8, error -71 [ 127.488768][ T5928] usb usb6-port1: unable to enumerate USB device [ 127.555399][ T5913] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 127.677792][ T6436] netlink: 'syz.1.113': attribute type 27 has an invalid length. [ 127.729423][ T5913] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 127.737921][ T5913] usb 5-1: config 0 has no interface number 0 [ 127.744262][ T5913] usb 5-1: config 0 interface 4 has no altsetting 0 [ 127.751405][ T5913] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 127.762227][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.774569][ T5913] usb 5-1: config 0 descriptor?? [ 127.777084][ T10] usb 3-1: USB disconnect, device number 16 [ 127.779581][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 127.779629][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 127.783562][ T5913] cp210x 5-1:0.4: cp210x converter detected [ 127.988336][ T5913] cp210x 5-1:0.4: failed to get vendor val 0x370b size 1: -121 [ 127.997027][ T5913] cp210x 5-1:0.4: querying part number failed [ 128.013895][ T5913] usb 5-1: cp210x converter now attached to ttyUSB0 [ 128.191243][ T5825] usb 5-1: USB disconnect, device number 9 [ 128.202607][ T5825] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 128.217445][ T5825] cp210x 5-1:0.4: device disconnected [ 128.315521][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 128.484476][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 128.485403][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 128.504855][ T10] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 128.521034][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.529161][ T10] usb 2-1: Product: syz [ 128.533460][ T10] usb 2-1: Manufacturer: syz [ 128.538136][ T10] usb 2-1: SerialNumber: syz [ 128.548747][ T10] usb 2-1: config 0 descriptor?? [ 128.557611][ T10] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 128.566005][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 128.571763][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 128.586389][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 128.592238][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 128.605213][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.615614][ T10] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 128.623708][ T10] usb 2-1: media controller created [ 128.650610][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.702561][ T10] usb 2-1: selecting invalid altsetting 3 [ 128.710419][ T10] ttusb2: set interface to alts=3 failed [ 128.751764][ T5913] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 128.755715][ T10] DVB: Unable to find symbol tda10086_attach() [ 128.766059][ T10] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 128.781302][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 128.801968][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 128.812318][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 128.818597][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 128.828841][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 128.840963][ T10] usb 2-1: USB disconnect, device number 14 [ 128.891797][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 128.925558][ T5913] usb 3-1: device descriptor read/64, error -71 [ 128.938164][ T6453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.056582][ T5928] IPVS: starting estimator thread 0... [ 129.057168][ T6453] IPVS: sed: FWM 3 0x00000003 - no destination available [ 129.156513][ T6455] IPVS: using max 46 ests per chain, 110400 per kthread [ 129.165654][ T5913] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 129.295683][ T5913] usb 3-1: device descriptor read/64, error -71 [ 129.418358][ T5913] usb usb3-port1: attempt power cycle [ 129.475554][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 129.627002][ T24] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 129.637159][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.647758][ T29] audit: type=1326 audit(1772524401.318:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26219c799 code=0x7fc00000 [ 129.671745][ T29] audit: type=1326 audit(1772524401.318:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe26219c799 code=0x7fc00000 [ 129.694415][ T29] audit: type=1326 audit(1772524401.318:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26219c799 code=0x7fc00000 [ 129.694853][ T24] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 129.728016][ T24] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 129.728082][ T29] audit: type=1326 audit(1772524401.318:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26219c799 code=0x7fc00000 [ 129.736217][ T24] usb 6-1: Manufacturer: syz [ 129.765655][ T29] audit: type=1326 audit(1772524401.318:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26219c799 code=0x7fc00000 [ 129.785414][ T5913] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 129.795058][ T29] audit: type=1326 audit(1772524401.318:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26219c799 code=0x7fc00000 [ 129.797073][ T24] usb 6-1: config 0 descriptor?? [ 129.823059][ T29] audit: type=1326 audit(1772524401.318:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26219c799 code=0x7fc00000 [ 129.837391][ T5913] usb 3-1: device descriptor read/8, error -71 [ 129.848265][ T29] audit: type=1326 audit(1772524401.318:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26219c799 code=0x7fc00000 [ 129.878359][ T29] audit: type=1326 audit(1772524401.318:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26219c799 code=0x7fc00000 [ 129.901758][ T29] audit: type=1326 audit(1772524401.318:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26219c799 code=0x7fc00000 [ 129.929708][ T24] rc_core: IR keymap rc-hauppauge not found [ 129.935869][ T24] Registered IR keymap rc-empty [ 129.944306][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 129.959826][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input7 [ 130.088904][ T5913] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 130.097892][ T10] usb 6-1: USB disconnect, device number 11 [ 130.126241][ T5913] usb 3-1: device descriptor read/8, error -71 [ 130.235879][ T5913] usb usb3-port1: unable to enumerate USB device [ 130.355508][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 130.485451][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 130.505568][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 130.512349][ T24] usb 5-1: config 0 has an invalid interface number: 33 but max is 1 [ 130.521478][ T24] usb 5-1: config 0 has no interface number 1 [ 130.527658][ T24] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 130.538734][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 130.550831][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 130.560007][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.568618][ T24] usb 5-1: Product: syz [ 130.572987][ T24] usb 5-1: Manufacturer: syz [ 130.577750][ T24] usb 5-1: SerialNumber: syz [ 130.584573][ T24] usb 5-1: config 0 descriptor?? [ 130.596372][ T24] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 130.650135][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.676095][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.687004][ T10] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 130.704268][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.721271][ T10] usb 2-1: config 0 descriptor?? [ 130.809141][ T2348] pvrusb2: Invalid read control endpoint [ 130.819375][ T24] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 130.828612][ T2348] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 130.832771][ T24] usb 5-1: USB disconnect, device number 10 [ 130.845240][ T2348] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 130.955589][ T5825] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 131.105460][ T5825] usb 6-1: Using ep0 maxpacket: 8 [ 131.112534][ T5825] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 131.121078][ T5825] usb 6-1: config 179 has no interface number 0 [ 131.127994][ T5825] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 131.139379][ T5825] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 131.150972][ T5825] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 131.164917][ T5825] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 131.180156][ T5825] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 131.193667][ T5825] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 131.204676][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.217636][ T6469] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 131.614901][ T10] hid-led 0003:27B8:01ED.0002: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 131.644387][ T5928] usb 6-1: USB disconnect, device number 12 [ 131.644417][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 131.658928][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 131.725099][ T10] hid-led 0003:27B8:01ED.0002: ThingM blink(1) initialized [ 131.838152][ T10] usb 2-1: USB disconnect, device number 15 [ 131.995481][ T5825] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 132.147170][ T5825] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 132.155251][ T5825] usb 3-1: config 0 has no interface number 0 [ 132.161528][ T5825] usb 3-1: config 0 interface 4 has no altsetting 0 [ 132.168374][ T5825] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 132.177862][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.190718][ T5825] usb 3-1: config 0 descriptor?? [ 132.200125][ T5825] cp210x 3-1:0.4: cp210x converter detected [ 132.264872][ T6480] FAULT_INJECTION: forcing a failure. [ 132.264872][ T6480] name failslab, interval 1, probability 0, space 0, times 0 [ 132.278013][ T6480] CPU: 0 UID: 0 PID: 6480 Comm: syz.5.127 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.278050][ T6480] Tainted: [L]=SOFTLOCKUP [ 132.278056][ T6480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 132.278067][ T6480] Call Trace: [ 132.278075][ T6480] [ 132.278084][ T6480] dump_stack_lvl+0xe8/0x150 [ 132.278119][ T6480] should_fail_ex+0x412/0x560 [ 132.278153][ T6480] should_failslab+0xa8/0x100 [ 132.278191][ T6480] __kmalloc_noprof+0xe8/0x760 [ 132.278215][ T6480] ? trace_kmalloc+0x2a/0x110 [ 132.278234][ T6480] ? tomoyo_encode+0x28b/0x550 [ 132.278266][ T6480] tomoyo_encode+0x28b/0x550 [ 132.278297][ T6480] tomoyo_realpath_from_path+0x58d/0x5d0 [ 132.278336][ T6480] ? tomoyo_path_number_perm+0x219/0x630 [ 132.278358][ T6480] tomoyo_path_number_perm+0x246/0x630 [ 132.278383][ T6480] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 132.278409][ T6480] ? __lock_acquire+0x6b5/0x2cf0 [ 132.278446][ T6480] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 132.278495][ T6480] ? __fget_files+0x2a/0x420 [ 132.278518][ T6480] ? __fget_files+0x2a/0x420 [ 132.278536][ T6480] ? __fget_files+0x3a0/0x420 [ 132.278554][ T6480] ? __fget_files+0x2a/0x420 [ 132.278578][ T6480] security_file_ioctl+0xc3/0x2a0 [ 132.278602][ T6480] __se_sys_ioctl+0x47/0x170 [ 132.278630][ T6480] do_syscall_64+0x14d/0xf80 [ 132.278653][ T6480] ? trace_irq_disable+0x3b/0x150 [ 132.278673][ T6480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.278692][ T6480] ? clear_bhb_loop+0x40/0x90 [ 132.278717][ T6480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.278736][ T6480] RIP: 0033:0x7fa3fc39c799 [ 132.278755][ T6480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.278770][ T6480] RSP: 002b:00007fa3fd243028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.278791][ T6480] RAX: ffffffffffffffda RBX: 00007fa3fc615fa0 RCX: 00007fa3fc39c799 [ 132.278805][ T6480] RDX: 0000200000000100 RSI: 0000000040045701 RDI: 0000000000000005 [ 132.278817][ T6480] RBP: 00007fa3fd243090 R08: 0000000000000000 R09: 0000000000000000 [ 132.278828][ T6480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.278839][ T6480] R13: 00007fa3fc616038 R14: 00007fa3fc615fa0 R15: 00007fff839adac8 [ 132.278871][ T6480] [ 132.278920][ T6480] ERROR: Out of memory at tomoyo_realpath_from_path. [ 132.523729][ T5825] cp210x 3-1:0.4: failed to get vendor val 0x370b size 1: -121 [ 132.531415][ T5825] cp210x 3-1:0.4: querying part number failed [ 132.562384][ T5825] usb 3-1: cp210x converter now attached to ttyUSB0 [ 132.728217][ T5908] usb 3-1: USB disconnect, device number 21 [ 132.759703][ T5908] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 132.784356][ T5908] cp210x 3-1:0.4: device disconnected [ 132.980643][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.988528][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.075576][ T5825] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 133.235426][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 133.242598][ T5825] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 133.253446][ T5825] usb 2-1: config 179 has no interface number 0 [ 133.260910][ T5825] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 133.272323][ T5825] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 133.283721][ T5825] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 133.295080][ T5825] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 133.308479][ T5825] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 133.324746][ T5825] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 133.335025][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.349025][ T6497] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 133.775035][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 133.783572][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 133.794327][ T5833] usb 2-1: USB disconnect, device number 16 [ 134.467983][ T6527] fuse: Unknown parameter 'grou~' [ 134.473047][ T6528] capability: warning: `syz.2.149' uses 32-bit capabilities (legacy support in use) [ 134.495570][ T5913] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 134.679907][ T5913] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 134.702221][ T5913] usb 6-1: config 0 has no interface number 0 [ 134.708782][ T5913] usb 6-1: config 0 interface 4 has no altsetting 0 [ 134.715659][ T5913] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 134.724948][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.740499][ T5913] usb 6-1: config 0 descriptor?? [ 134.758443][ T5913] cp210x 6-1:0.4: cp210x converter detected [ 134.925395][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 134.962244][ T5913] cp210x 6-1:0.4: failed to get vendor val 0x370b size 1: -121 [ 134.970657][ T5913] cp210x 6-1:0.4: querying part number failed [ 134.994102][ T5913] usb 6-1: cp210x converter now attached to ttyUSB0 [ 135.075534][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 135.082358][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.092793][ T10] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 135.104705][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 135.113567][ T10] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 135.122927][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.131035][ T10] usb 2-1: Product: syz [ 135.135221][ T10] usb 2-1: Manufacturer: syz [ 135.140015][ T10] usb 2-1: SerialNumber: syz [ 135.148043][ T10] usb 2-1: config 0 descriptor?? [ 135.167327][ T5928] usb 6-1: USB disconnect, device number 13 [ 135.182424][ T5928] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 135.191244][ T5928] cp210x 6-1:0.4: device disconnected [ 135.275440][ T5913] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 135.425502][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 135.432939][ T5913] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 135.441359][ T5913] usb 3-1: config 179 has no interface number 0 [ 135.447799][ T5913] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 135.459072][ T5913] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 135.470550][ T5913] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.481983][ T5913] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 135.493566][ T5913] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 135.508145][ T5913] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 135.518913][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.533937][ T6540] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 135.566493][ T10] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 135.962298][ T10] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 135.971554][ T10] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 135.986728][ T10] usb 3-1: USB disconnect, device number 22 [ 135.987435][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 136.004005][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 136.095445][ T5913] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 136.162643][ T6534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.171444][ T6534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.192762][ T5833] usb 2-1: USB disconnect, device number 17 [ 136.226420][ T5913] usb 6-1: device descriptor read/64, error -71 [ 136.475451][ T5913] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 136.616196][ T5913] usb 6-1: device descriptor read/64, error -71 [ 136.695884][ T5833] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 136.746747][ T5913] usb usb6-port1: attempt power cycle [ 136.858680][ T5833] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 136.869913][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.880913][ T5833] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 136.890189][ T5833] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 136.902724][ T5833] usb 2-1: Manufacturer: syz [ 136.905436][ T5928] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 136.916598][ T5833] usb 2-1: config 0 descriptor?? [ 136.976718][ T5833] rc_core: IR keymap rc-hauppauge not found [ 136.982836][ T5833] Registered IR keymap rc-empty [ 136.989257][ T5833] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 137.001455][ T5833] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 137.067558][ T5928] usb 3-1: unable to get BOS descriptor or descriptor too short [ 137.076917][ T5928] usb 3-1: config 0 has an invalid interface number: 158 but max is 0 [ 137.087040][ T5913] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 137.096112][ T5928] usb 3-1: config 0 has no interface number 0 [ 137.102473][ T5928] usb 3-1: config 0 interface 158 has no altsetting 0 [ 137.111991][ T5928] usb 3-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice= 3.d9 [ 137.121330][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.129603][ T5928] usb 3-1: Product: syz [ 137.134093][ T5928] usb 3-1: Manufacturer: syz [ 137.138956][ T5913] usb 6-1: device descriptor read/8, error -71 [ 137.146196][ T5928] usb 3-1: SerialNumber: syz [ 137.153933][ T5928] usb 3-1: config 0 descriptor?? [ 137.158282][ T5833] usb 2-1: USB disconnect, device number 18 [ 137.385444][ T5913] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 137.406614][ T5913] usb 6-1: device descriptor read/8, error -71 [ 137.458894][ T5928] gspca_main: spca505-2.14.0 probing 041e:401d [ 137.468420][ T5928] gspca_spca505: reg write: error -71 [ 137.482431][ T5928] spca505 3-1:0.158: probe with driver spca505 failed with error -5 [ 137.510647][ T5928] usb 3-1: USB disconnect, device number 23 [ 137.517653][ T5913] usb usb6-port1: unable to enumerate USB device [ 137.815556][ T5928] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 137.965458][ T5928] usb 3-1: Using ep0 maxpacket: 8 [ 137.971886][ T5928] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 137.980520][ T5928] usb 3-1: config 179 has no interface number 0 [ 137.986922][ T5928] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 137.998075][ T5928] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 138.009560][ T5928] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 138.021776][ T5928] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 138.033281][ T5928] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 138.047144][ T5928] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 138.056290][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.068944][ T6576] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 138.528455][ T5833] usb 3-1: USB disconnect, device number 24 [ 138.528455][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 138.528505][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 138.845457][ T5825] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 138.995435][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 139.002014][ T5825] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 139.010544][ T5825] usb 2-1: config 179 has no interface number 0 [ 139.017046][ T5825] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 139.028350][ T5825] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 139.039719][ T5825] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 139.051011][ T5825] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 139.062561][ T5825] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 139.076376][ T5825] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 139.085510][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.101855][ T6582] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 139.285562][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 139.353773][ T5825] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input10 [ 139.425554][ T10] usb 6-1: device descriptor read/64, error -71 [ 139.541116][ T5908] usb 2-1: USB disconnect, device number 19 [ 139.541116][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 139.541271][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 139.576483][ T5928] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 139.675446][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 139.737534][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.747848][ T5928] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 139.757547][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.767981][ T5928] usb 3-1: config 0 descriptor?? [ 139.778793][ T5928] pwc: Askey VC010 type 2 USB webcam detected. [ 139.806975][ T10] usb 6-1: device descriptor read/64, error -71 [ 139.925918][ T10] usb usb6-port1: attempt power cycle [ 139.980898][ T5928] pwc: send_video_command error -71 [ 139.986497][ T5928] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 139.994341][ T5928] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 140.006958][ T5928] usb 3-1: USB disconnect, device number 25 [ 140.275396][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 140.295841][ T10] usb 6-1: device descriptor read/8, error -71 [ 140.495503][ T5928] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 140.545428][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 140.576906][ T10] usb 6-1: device descriptor read/8, error -71 [ 140.648418][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.658999][ T5928] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 140.668223][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.678241][ T5928] usb 3-1: config 0 descriptor?? [ 140.687977][ T10] usb usb6-port1: unable to enumerate USB device [ 140.689178][ T5928] pwc: Askey VC010 type 2 USB webcam detected. [ 141.087377][ T5928] pwc: recv_control_msg error -32 req 02 val 2b00 [ 141.103413][ T5928] pwc: recv_control_msg error -32 req 02 val 2700 [ 141.178955][ T5928] pwc: recv_control_msg error -32 req 02 val 2c00 [ 141.199056][ T5928] pwc: recv_control_msg error -32 req 04 val 1000 [ 141.222318][ T5928] pwc: recv_control_msg error -32 req 04 val 1300 [ 141.236985][ T5928] pwc: recv_control_msg error -32 req 04 val 1400 [ 141.251469][ T5928] pwc: recv_control_msg error -32 req 02 val 2000 [ 141.464596][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.609337][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.785103][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.903624][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.121913][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.132506][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.138450][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.182'. [ 142.142291][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.165008][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.173017][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 142.350596][ T13] bridge_slave_1: left allmulticast mode [ 142.378671][ T13] bridge_slave_1: left promiscuous mode [ 142.398961][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.414468][ T13] bridge_slave_0: left allmulticast mode [ 142.423204][ T13] bridge_slave_0: left promiscuous mode [ 142.430424][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.769253][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.787575][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.803120][ T13] bond0 (unregistering): Released all slaves [ 142.987192][ T13] tipc: Left network mode [ 143.625474][ T5913] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 143.688422][ T13] hsr_slave_0: left promiscuous mode [ 143.721146][ T13] hsr_slave_1: left promiscuous mode [ 143.750684][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.762146][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.784298][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.795485][ T5913] usb 6-1: Using ep0 maxpacket: 8 [ 143.799507][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.813003][ T5913] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 143.845746][ T5913] usb 6-1: config 179 has no interface number 0 [ 143.859613][ T5913] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 143.877438][ T13] veth1_macvtap: left promiscuous mode [ 143.895974][ T13] veth0_macvtap: left promiscuous mode [ 143.902441][ T5913] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 143.916741][ T13] veth1_vlan: left promiscuous mode [ 143.935870][ T13] veth0_vlan: left promiscuous mode [ 143.941195][ T5913] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 143.955968][ T5913] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 143.967835][ T5913] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 143.982019][ T5913] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 143.991711][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.044061][ T6622] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 144.256505][ T5831] Bluetooth: hci3: command tx timeout [ 144.334122][ T5913] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input11 [ 144.491474][ T5833] usb 6-1: USB disconnect, device number 22 [ 144.491543][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 144.505970][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 144.727126][ T13] team0 (unregistering): Port device team_slave_1 removed [ 144.759045][ T13] team0 (unregistering): Port device team_slave_0 removed [ 144.989215][ T6605] chnl_net:caif_netlink_parms(): no params data found [ 145.380203][ T6605] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.387982][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.396183][ T6605] bridge_slave_0: entered allmulticast mode [ 145.404949][ T6605] bridge_slave_0: entered promiscuous mode [ 145.415655][ T6605] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.423255][ T6605] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.441311][ T6605] bridge_slave_1: entered allmulticast mode [ 145.459279][ T6605] bridge_slave_1: entered promiscuous mode [ 145.546887][ T5913] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 145.586275][ T6605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.617520][ T6605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.710082][ T6605] team0: Port device team_slave_0 added [ 145.715881][ T5913] usb 6-1: Using ep0 maxpacket: 16 [ 145.725116][ T5913] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 145.746843][ T6605] team0: Port device team_slave_1 added [ 145.755843][ T5913] usb 6-1: config 0 has no interface number 0 [ 145.764242][ T5913] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 145.789714][ T5913] usb 6-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 145.815450][ T5913] usb 6-1: config 0 interface 41 has no altsetting 0 [ 145.830058][ T5913] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 145.851424][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.865881][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.872993][ T5913] usb 6-1: Product: syz [ 145.877786][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.904182][ T5913] usb 6-1: Manufacturer: syz [ 145.910778][ T5913] usb 6-1: SerialNumber: syz [ 145.919798][ T6605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.930629][ T5913] usb 6-1: config 0 descriptor?? [ 145.939347][ T6639] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 145.941468][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.960231][ T5913] sr9700 6-1:0.41: probe with driver sr9700 failed with error -22 [ 145.983890][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.027405][ T6605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.253802][ T6605] hsr_slave_0: entered promiscuous mode [ 146.280433][ T6605] hsr_slave_1: entered promiscuous mode [ 146.335580][ T5831] Bluetooth: hci3: command tx timeout [ 146.341491][ T5928] pwc: recv_control_msg error -110 req 02 val 2100 [ 146.375623][ T5928] pwc: recv_control_msg error -32 req 04 val 1500 [ 146.389548][ T5928] pwc: recv_control_msg error -32 req 02 val 2500 [ 146.406210][ T5928] pwc: recv_control_msg error -32 req 02 val 2400 [ 146.428349][ T5928] pwc: recv_control_msg error -32 req 02 val 2600 [ 146.431629][ T6639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.442155][ T5928] pwc: recv_control_msg error -32 req 02 val 2900 [ 146.463814][ T5928] pwc: recv_control_msg error -32 req 02 val 2800 [ 146.479690][ T5928] pwc: recv_control_msg error -32 req 04 val 1100 [ 146.483813][ T6639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.494232][ T5928] pwc: recv_control_msg error -32 req 04 val 1200 [ 146.534619][ T5928] pwc: Registered as video103. [ 146.555065][ T5833] usb 6-1: USB disconnect, device number 23 [ 146.557777][ T5928] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 146.943353][ T6605] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 146.960307][ T6605] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 146.987988][ T6605] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 147.028279][ T6605] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 147.520277][ T6605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.623371][ T6605] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.677030][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.684342][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.759895][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.767244][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.835524][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 148.020783][ T9] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 148.039605][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.070828][ T9] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 148.098203][ T9] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 148.126936][ T9] usb 6-1: Manufacturer: syz [ 148.153900][ T9] usb 6-1: config 0 descriptor?? [ 148.325490][ T9] rc_core: IR keymap rc-hauppauge not found [ 148.351794][ T9] Registered IR keymap rc-empty [ 148.378776][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 148.416560][ T5831] Bluetooth: hci3: command tx timeout [ 148.440194][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input13 [ 148.539361][ T9] usb 6-1: USB disconnect, device number 24 [ 148.545977][ T6605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.574414][ T6605] veth0_vlan: entered promiscuous mode [ 149.605942][ T796] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 149.622384][ T6605] veth1_vlan: entered promiscuous mode [ 149.702113][ T6605] veth0_macvtap: entered promiscuous mode [ 149.743918][ T6605] veth1_macvtap: entered promiscuous mode [ 149.787905][ T796] usb 6-1: Using ep0 maxpacket: 8 [ 149.803064][ T796] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 149.837285][ T796] usb 6-1: config 179 has no interface number 0 [ 149.852604][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.874219][ T796] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 149.895372][ T796] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 149.907015][ T796] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 149.931216][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.938558][ T796] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 149.977931][ T796] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 150.003730][ T192] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.012864][ T796] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 150.026550][ T192] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.036764][ T796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.047565][ T1107] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.065170][ T6706] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 150.085757][ T1107] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.389470][ T796] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input14 [ 150.484967][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.503735][ T5831] Bluetooth: hci3: command tx timeout [ 150.521545][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.582436][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 150.582440][ T5833] usb 6-1: USB disconnect, device number 25 [ 150.582563][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 150.779901][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.800020][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.415395][ T5908] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 151.545557][ T5908] usb 7-1: device descriptor read/64, error -71 [ 151.786197][ T5908] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 151.946071][ T5908] usb 7-1: device descriptor read/64, error -71 [ 152.067041][ T5908] usb usb7-port1: attempt power cycle [ 152.415875][ T5908] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 152.446412][ T5908] usb 7-1: device descriptor read/8, error -71 [ 152.685477][ T5908] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 152.716226][ T5908] usb 7-1: device descriptor read/8, error -71 [ 152.835797][ T5908] usb usb7-port1: unable to enumerate USB device [ 154.215902][ T5888] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 154.390259][ T5888] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 154.409369][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.437403][ T5888] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 154.467282][ T5888] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 154.485366][ T5888] usb 6-1: Manufacturer: syz [ 154.507727][ T5888] usb 6-1: config 0 descriptor?? [ 154.611823][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.626078][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.634332][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.641430][ T5888] rc_core: IR keymap rc-hauppauge not found [ 154.649037][ T5888] Registered IR keymap rc-empty [ 154.658518][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.666960][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.682943][ T5888] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 154.696640][ T5928] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 154.717292][ T5888] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input15 [ 154.832811][ T5888] usb 6-1: USB disconnect, device number 26 [ 154.866509][ T5928] usb 7-1: Using ep0 maxpacket: 8 [ 154.887115][ T5928] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 154.925808][ T5928] usb 7-1: config 179 has no interface number 0 [ 154.948518][ T5928] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 154.979137][ T5928] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 154.994563][ T5928] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 155.006774][ T5928] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 155.022042][ T5928] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 155.036083][ T5928] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 155.045190][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.073858][ T6740] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 155.256252][ T6742] chnl_net:caif_netlink_parms(): no params data found [ 155.421174][ T6742] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.441761][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.477635][ T6742] bridge_slave_0: entered allmulticast mode [ 155.506451][ T6742] bridge_slave_0: entered promiscuous mode [ 155.519210][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.536952][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 155.539972][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.545357][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 155.545446][ T796] usb 7-1: USB disconnect, device number 6 [ 155.569013][ T6742] bridge_slave_1: entered allmulticast mode [ 155.584329][ T6742] bridge_slave_1: entered promiscuous mode [ 155.660375][ T6742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.678019][ T6742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.732725][ T6742] team0: Port device team_slave_0 added [ 155.743202][ T6742] team0: Port device team_slave_1 added [ 155.795458][ T5833] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 155.797654][ T6742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.813574][ T6742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.841234][ T6742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.855750][ T6742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.863893][ T6742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.894128][ T6742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.974401][ T6742] hsr_slave_0: entered promiscuous mode [ 155.982459][ T6742] hsr_slave_1: entered promiscuous mode [ 155.992290][ T5833] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.003193][ T5833] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 156.014621][ T6742] debugfs: 'hsr0' already exists in 'hsr' [ 156.024613][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.033194][ T6742] Cannot create hsr debugfs directory [ 156.042179][ T5833] usb 6-1: config 0 descriptor?? [ 156.061934][ T5833] pwc: Askey VC010 type 2 USB webcam detected. [ 156.262017][ T5833] pwc: send_video_command error -71 [ 156.279390][ T5833] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 156.305491][ T5833] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 156.327622][ T5833] usb 6-1: USB disconnect, device number 27 [ 156.505669][ T796] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 156.536763][ T6742] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 156.551391][ T6742] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 156.565081][ T6742] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 156.580955][ T6742] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 156.660436][ T796] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 156.688008][ T796] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 173, changing to 4 [ 156.726929][ T796] usb 7-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 156.736332][ T5832] Bluetooth: hci5: command tx timeout [ 156.750600][ T6742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.762918][ T796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.765941][ T5833] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 156.779124][ T796] usb 7-1: Product: syz [ 156.787680][ T796] usb 7-1: Manufacturer: syz [ 156.812340][ T6742] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.814449][ T796] usb 7-1: SerialNumber: syz [ 156.843487][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.850799][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.873855][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.881234][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.941402][ T5833] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.961813][ T5833] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 156.972041][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.980756][ T6742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.042164][ T5833] usb 6-1: config 0 descriptor?? [ 157.058053][ T796] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 157.071595][ T5833] pwc: Askey VC010 type 2 USB webcam detected. [ 157.071778][ T796] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 157.232605][ T796] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 157.245230][ T9] usb 3-1: USB disconnect, device number 26 [ 157.262661][ T796] usb 7-1: USB disconnect, device number 7 [ 157.382825][ T6478] udevd[6478]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.461167][ T192] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.473562][ T5833] pwc: recv_control_msg error -32 req 02 val 2b00 [ 157.484104][ T5833] pwc: recv_control_msg error -32 req 02 val 2700 [ 157.495174][ T5833] pwc: recv_control_msg error -32 req 02 val 2c00 [ 157.503988][ T5833] pwc: recv_control_msg error -32 req 04 val 1000 [ 157.517056][ T5833] pwc: recv_control_msg error -32 req 04 val 1300 [ 157.537175][ T5833] pwc: recv_control_msg error -32 req 04 val 1400 [ 157.558846][ T5833] pwc: recv_control_msg error -32 req 02 val 2000 [ 157.574249][ T192] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.672792][ T192] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.700002][ T6742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.756255][ T192] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.915772][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 157.971827][ T5833] pwc: recv_control_msg error -71 req 02 val 2500 [ 157.997621][ T5833] pwc: recv_control_msg error -71 req 02 val 2400 [ 158.008726][ T5833] pwc: recv_control_msg error -71 req 02 val 2600 [ 158.023061][ T5833] pwc: recv_control_msg error -71 req 02 val 2900 [ 158.034904][ T5833] pwc: recv_control_msg error -71 req 02 val 2800 [ 158.045689][ T5833] pwc: recv_control_msg error -71 req 04 val 1100 [ 158.052991][ T5833] pwc: recv_control_msg error -71 req 04 val 1200 [ 158.057804][ T192] bridge_slave_1: left allmulticast mode [ 158.061877][ T5833] pwc: Registered as video103. [ 158.071059][ T192] bridge_slave_1: left promiscuous mode [ 158.074430][ T5833] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16 [ 158.095932][ T192] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.097133][ T9] usb 7-1: config 0 has an invalid interface number: 4 but max is 0 [ 158.134892][ T9] usb 7-1: config 0 has no interface number 0 [ 158.145463][ T5833] usb 6-1: USB disconnect, device number 28 [ 158.151482][ T9] usb 7-1: config 0 interface 4 has no altsetting 0 [ 158.180380][ T9] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 158.189877][ T192] bridge_slave_0: left allmulticast mode [ 158.189906][ T192] bridge_slave_0: left promiscuous mode [ 158.191490][ T192] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.200275][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.243749][ T9] usb 7-1: config 0 descriptor?? [ 158.267733][ T9] cp210x 7-1:0.4: cp210x converter detected [ 158.435775][ T192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.450019][ T192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.460653][ T192] bond0 (unregistering): Released all slaves [ 158.476868][ T9] usb 7-1: cp210x converter now attached to ttyUSB0 [ 158.676020][ T9] usb 7-1: USB disconnect, device number 8 [ 158.724724][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 158.726747][ T6783] netlink: 104 bytes leftover after parsing attributes in process `syz.5.206'. [ 158.752871][ T9] cp210x 7-1:0.4: device disconnected [ 158.815812][ T5832] Bluetooth: hci5: command tx timeout [ 158.828247][ T6742] veth0_vlan: entered promiscuous mode [ 158.941252][ T6742] veth1_vlan: entered promiscuous mode [ 158.977356][ T5832] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 159.017404][ T192] hsr_slave_0: left promiscuous mode [ 159.064940][ T192] hsr_slave_1: left promiscuous mode [ 159.083556][ T192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.096898][ T192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.110799][ T192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.119398][ T192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.138424][ T192] veth1_macvtap: left promiscuous mode [ 159.144140][ T192] veth0_macvtap: left promiscuous mode [ 159.153576][ T192] veth1_vlan: left promiscuous mode [ 159.164529][ T192] veth0_vlan: left promiscuous mode [ 159.336044][ T5928] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 159.515766][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 159.523019][ T5928] usb 6-1: config 0 has an invalid interface number: 30 but max is 0 [ 159.555349][ T5928] usb 6-1: config 0 has no interface number 0 [ 159.561665][ T5928] usb 6-1: too many endpoints for config 0 interface 30 altsetting 222: 254, using maximum allowed: 30 [ 159.574390][ T796] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 159.582479][ T5928] usb 6-1: config 0 interface 30 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.605653][ T5928] usb 6-1: config 0 interface 30 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.616224][ T5928] usb 6-1: config 0 interface 30 altsetting 222 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 159.630956][ T192] team0 (unregistering): Port device team_slave_1 removed [ 159.630991][ T5928] usb 6-1: config 0 interface 30 has no altsetting 0 [ 159.645178][ T5928] usb 6-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 159.654434][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.654987][ T192] team0 (unregistering): Port device team_slave_0 removed [ 159.665438][ T5928] usb 6-1: config 0 descriptor?? [ 159.757597][ T796] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 159.766515][ T796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.779364][ T796] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 159.795549][ T796] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 159.803789][ T796] usb 7-1: Manufacturer: syz [ 159.822996][ T796] usb 7-1: config 0 descriptor?? [ 159.937774][ T796] rc_core: IR keymap rc-hauppauge not found [ 159.953421][ T796] Registered IR keymap rc-empty [ 159.981384][ T796] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 159.986397][ T6742] veth0_macvtap: entered promiscuous mode [ 159.996260][ T796] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input17 [ 160.007909][ T6742] veth1_macvtap: entered promiscuous mode [ 160.092944][ T796] usb 7-1: USB disconnect, device number 9 [ 160.109651][ T6792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.115547][ T6742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.138574][ T6792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.242919][ T6742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.307463][ T5928] uclogic 0003:256C:006E.0003: interface is invalid, ignoring [ 160.370546][ T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.394624][ T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.418389][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.433740][ T192] IPVS: stop unused estimator thread 0... [ 160.441228][ T49] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.589516][ T2157] usb 6-1: USB disconnect, device number 29 [ 160.651095][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.668500][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.785181][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.795085][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.895882][ T5832] Bluetooth: hci5: command tx timeout [ 161.075619][ T796] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 161.152488][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 161.152509][ T29] audit: type=1326 audit(1772524432.828:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.4.213" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe26219c799 code=0xffff0000 [ 161.252857][ T6824] Invalid option length (16540) for dns_resolver key [ 161.266210][ T6833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.287742][ T796] usb 7-1: Using ep0 maxpacket: 16 [ 161.302918][ T796] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 161.332718][ T796] usb 7-1: config 0 has no interface number 0 [ 161.347863][ T796] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 161.364657][ T796] usb 7-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 161.389898][ T796] usb 7-1: config 0 interface 41 has no altsetting 0 [ 161.420790][ T796] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 161.448205][ T796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.461896][ T796] usb 7-1: Product: syz [ 161.471149][ T796] usb 7-1: Manufacturer: syz [ 161.486035][ T796] usb 7-1: SerialNumber: syz [ 161.515076][ T796] usb 7-1: config 0 descriptor?? [ 161.527905][ T6817] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 161.542813][ T796] sr9700 7-1:0.41: probe with driver sr9700 failed with error -22 [ 161.748838][ T1107] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.766364][ T5928] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 161.940404][ T1107] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.011558][ T6817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.036961][ T6817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.064462][ T5833] usb 7-1: USB disconnect, device number 10 [ 162.130226][ T1107] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.239463][ T5928] usb 8-1: unable to get BOS descriptor or descriptor too short [ 162.252709][ T1107] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.263727][ T5928] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 162.291983][ T5928] usb 8-1: can't read configurations, error -71 [ 162.440752][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.452590][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.466703][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.480527][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.490760][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.886905][ T1107] bridge_slave_1: left allmulticast mode [ 162.913594][ T1107] bridge_slave_1: left promiscuous mode [ 162.931635][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.998814][ T1107] bridge_slave_0: left allmulticast mode [ 163.018790][ T1107] bridge_slave_0: left promiscuous mode [ 163.037873][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.060283][ T5832] Bluetooth: hci5: command tx timeout [ 163.178587][ T6881] netlink: 'syz.7.229': attribute type 1 has an invalid length. [ 163.197460][ T6881] netlink: 220 bytes leftover after parsing attributes in process `syz.7.229'. [ 163.430709][ T5832] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 163.723239][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.780044][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.808124][ T1107] bond0 (unregistering): Released all slaves [ 163.839697][ T5832] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 164.362524][ T5832] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 164.575912][ T5832] Bluetooth: hci0: command tx timeout [ 164.767090][ T1107] hsr_slave_0: left promiscuous mode [ 164.783178][ T1107] hsr_slave_1: left promiscuous mode [ 164.798719][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.811509][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.824690][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.851059][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.908758][ T1107] veth1_macvtap: left promiscuous mode [ 164.919555][ T1107] veth0_macvtap: left promiscuous mode [ 164.926310][ T1107] veth1_vlan: left promiscuous mode [ 164.931740][ T1107] veth0_vlan: left promiscuous mode [ 164.973250][ T6947] Invalid option length (16540) for dns_resolver key [ 165.246180][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 165.261035][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 165.563426][ T6857] chnl_net:caif_netlink_parms(): no params data found [ 165.750070][ T1107] IPVS: stop unused estimator thread 0... [ 165.794480][ T6857] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.802981][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.810449][ T6857] bridge_slave_0: entered allmulticast mode [ 165.820521][ T6857] bridge_slave_0: entered promiscuous mode [ 165.830939][ T6857] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.838459][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.845886][ T6857] bridge_slave_1: entered allmulticast mode [ 165.855643][ T6857] bridge_slave_1: entered promiscuous mode [ 165.911012][ T6857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.927120][ T6857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.987628][ T6857] team0: Port device team_slave_0 added [ 166.000470][ T6857] team0: Port device team_slave_1 added [ 166.059748][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.067035][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.093418][ T6857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.108615][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.115933][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.143389][ T6857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.229852][ T6857] hsr_slave_0: entered promiscuous mode [ 166.237749][ T6857] hsr_slave_1: entered promiscuous mode [ 166.245209][ T6857] debugfs: 'hsr0' already exists in 'hsr' [ 166.251454][ T6857] Cannot create hsr debugfs directory [ 166.655724][ T5832] Bluetooth: hci0: command tx timeout [ 167.733782][ T6939] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.786474][ T6857] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 167.833919][ T6857] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 167.866976][ T6857] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 167.889531][ T6857] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 167.984808][ T5832] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 168.180483][ T6857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.243352][ T6857] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.262233][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.265471][ T5833] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 168.269486][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.297551][ T796] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 168.329370][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.336724][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.451421][ T5833] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 168.475424][ T796] usb 8-1: Using ep0 maxpacket: 16 [ 168.483143][ T5833] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 168.499802][ T5833] usb 6-1: Product: syz [ 168.501053][ T796] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.513466][ T5833] usb 6-1: Manufacturer: syz [ 168.519441][ T5833] usb 6-1: SerialNumber: syz [ 168.536298][ T5833] usb 6-1: config 0 descriptor?? [ 168.543019][ T796] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.552704][ T5833] ch341 6-1:0.0: ch341-uart converter detected [ 168.567544][ T796] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 168.595505][ T796] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 168.619912][ T796] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.652298][ T796] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 168.667273][ T796] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 168.685353][ T796] usb 8-1: Manufacturer: syz [ 168.707629][ T796] usb 8-1: config 0 descriptor?? [ 168.739929][ T5832] Bluetooth: hci0: command tx timeout [ 168.757984][ T47] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 168.919175][ T47] usb 7-1: config 0 has no interfaces? [ 168.929444][ T6857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.936816][ T47] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 168.948139][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.976204][ T47] usb 7-1: config 0 descriptor?? [ 169.365378][ T796] rc_core: IR keymap rc-hauppauge not found [ 169.373755][ T796] Registered IR keymap rc-empty [ 169.387365][ T796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 169.435537][ T796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 169.470315][ T47] usb 7-1: USB disconnect, device number 11 [ 169.485677][ T796] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 169.531911][ T796] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input18 [ 169.557194][ T5833] usb 6-1: ch341-uart converter now attached to ttyUSB0 [ 169.584266][ T796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 169.627213][ T796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 169.669050][ T6857] veth0_vlan: entered promiscuous mode [ 169.676421][ T796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 169.696109][ T6857] veth1_vlan: entered promiscuous mode [ 169.706486][ T796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 169.735673][ T796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 169.766500][ T796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 169.773687][ T7001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.777564][ T6857] veth0_macvtap: entered promiscuous mode [ 169.799146][ T6857] veth1_macvtap: entered promiscuous mode [ 169.801356][ T7001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.816056][ T796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 169.866157][ T796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 169.890703][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.899700][ T796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 169.918885][ T5833] usb 6-1: USB disconnect, device number 30 [ 169.949562][ T796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 169.967092][ T5833] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 169.983082][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.018935][ T5833] ch341 6-1:0.0: device disconnected [ 170.020554][ T796] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 170.070317][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.071363][ T796] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 170.149963][ T796] usb 8-1: USB disconnect, device number 4 [ 170.150336][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.204672][ T5832] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 170.212386][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.289810][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.386460][ T5832] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 170.580708][ T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.598342][ T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.694060][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.702639][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.795460][ T796] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 170.815742][ T5832] Bluetooth: hci0: command tx timeout [ 170.945858][ T796] usb 8-1: device descriptor read/64, error -71 [ 171.126595][ T5908] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 171.206423][ T796] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 171.263386][ T7081] Invalid option length (16540) for dns_resolver key [ 171.297687][ T5908] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 171.317645][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.343102][ T5908] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 171.354109][ T796] usb 8-1: device descriptor read/64, error -71 [ 171.365907][ T5908] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 171.392720][ T5908] usb 9-1: Manufacturer: syz [ 171.430790][ T5908] usb 9-1: config 0 descriptor?? [ 171.438472][ T7087] FAT-fs (nullb0): bogus number of reserved sectors [ 171.448674][ T7087] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 171.472266][ T7087] FAT-fs (nullb0): bogus number of reserved sectors [ 171.482169][ T7087] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 171.490648][ T796] usb usb8-port1: attempt power cycle [ 171.545801][ T5908] rc_core: IR keymap rc-hauppauge not found [ 171.572573][ T5908] Registered IR keymap rc-empty [ 171.585816][ T5908] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 171.612504][ T5908] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input19 [ 171.674588][ T5908] usb 9-1: USB disconnect, device number 2 [ 171.845863][ T796] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 171.876137][ T796] usb 8-1: device descriptor read/8, error -71 [ 172.128197][ T796] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 172.146923][ T10] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 172.156210][ T796] usb 8-1: device descriptor read/8, error -71 [ 172.187626][ T7110] random: crng reseeded on system resumption [ 172.285899][ T796] usb usb8-port1: unable to enumerate USB device [ 172.322961][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.354679][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.364081][ T5832] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 172.376875][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 172.411527][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 172.426995][ T10] usb 6-1: SerialNumber: syz [ 172.461037][ T10] usb 6-1: 0:2 : does not exist [ 172.786330][ T5888] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 172.858427][ T796] usb 6-1: USB disconnect, device number 31 [ 172.888269][ T7130] mmap: syz.8.262 (7130) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 172.959076][ T5888] usb 7-1: Using ep0 maxpacket: 16 [ 172.978902][ T5888] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 173.002185][ T5888] usb 7-1: config 0 has no interface number 0 [ 173.022192][ T5888] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 173.054782][ T5888] usb 7-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 173.070257][ T5888] usb 7-1: config 0 interface 41 has no altsetting 0 [ 173.086256][ T5888] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 173.097578][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.108081][ T5888] usb 7-1: Product: syz [ 173.112418][ T5888] usb 7-1: Manufacturer: syz [ 173.125363][ T5888] usb 7-1: SerialNumber: syz [ 173.142688][ T5888] usb 7-1: config 0 descriptor?? [ 173.154869][ T7122] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 173.183702][ T5888] sr9700 7-1:0.41: probe with driver sr9700 failed with error -22 [ 173.255090][ T5832] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 173.362152][ T5832] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 173.388556][ T796] usb 7-1: USB disconnect, device number 12 [ 173.606061][ T5832] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 173.775803][ T5888] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 173.893115][ T7163] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 173.912538][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.7.268'. [ 173.932353][ T7163] netlink: 212324 bytes leftover after parsing attributes in process `syz.7.268'. [ 173.944071][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 173.949210][ T5888] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 173.949258][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.949285][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.949307][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 173.949350][ T5888] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 173.949374][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.975565][ T5833] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 174.042258][ T5888] usb 6-1: config 0 descriptor?? [ 174.121704][ T7168] netlink: 16 bytes leftover after parsing attributes in process `syz.6.269'. [ 174.239354][ T5833] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 174.249528][ T5833] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.264794][ T5833] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 174.274535][ T5833] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 174.282865][ T5833] usb 9-1: Manufacturer: syz [ 174.290893][ T5833] usb 9-1: config 0 descriptor?? [ 174.335751][ T796] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 174.355608][ T5833] rc_core: IR keymap rc-hauppauge not found [ 174.361639][ T5833] Registered IR keymap rc-empty [ 174.369335][ T5833] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 174.385784][ T5833] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input20 [ 174.405429][ T5928] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 174.483918][ T5888] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0004/input/input21 [ 174.509682][ T796] usb 8-1: unable to get BOS descriptor or descriptor too short [ 174.532372][ T796] usb 8-1: config 66 has an invalid interface number: 53 but max is 0 [ 174.548073][ T5833] usb 9-1: USB disconnect, device number 3 [ 174.555777][ T796] usb 8-1: config 66 contains an unexpected descriptor of type 0x2, skipping [ 174.573674][ T796] usb 8-1: config 66 has an invalid descriptor of length 252, skipping remainder of the config [ 174.588737][ T5928] usb 7-1: config 0 has no interfaces? [ 174.595404][ T5928] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 174.604533][ T796] usb 8-1: config 66 has no interface number 0 [ 174.610865][ T796] usb 8-1: too many endpoints for config 66 interface 53 altsetting 130: 193, using maximum allowed: 30 [ 174.622866][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.636318][ T796] usb 8-1: config 66 interface 53 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 193 [ 174.653355][ T796] usb 8-1: config 66 interface 53 has no altsetting 0 [ 174.662431][ T5928] usb 7-1: config 0 descriptor?? [ 174.677648][ T796] usb 8-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 174.682773][ T5888] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0004/input/input22 [ 174.688030][ T796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.710283][ T796] usb 8-1: Product: syz [ 174.735726][ T796] usb 8-1: Manufacturer: syz [ 174.758245][ T796] usb 8-1: SerialNumber: syz [ 174.840725][ T5888] kye 0003:0458:5013.0004: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 174.872586][ T5888] usb 6-1: USB disconnect, device number 32 [ 174.974263][ T7178] fido_id[7178]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 174.976339][ T5928] usb 7-1: USB disconnect, device number 13 [ 175.055018][ T796] usb 8-1: USB disconnect, device number 9 [ 175.465446][ T5895] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 175.580103][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.6.274'. [ 175.590135][ T7192] warning: `syz.6.274' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 175.602452][ T29] audit: type=1326 audit(1772524447.288:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.6.274" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd0119c799 code=0x0 [ 175.605728][ T5928] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 175.631335][ T5895] usb 9-1: config 0 has an invalid interface number: 4 but max is 0 [ 175.640557][ T5895] usb 9-1: config 0 has no interface number 0 [ 175.648414][ T5895] usb 9-1: config 0 interface 4 has no altsetting 0 [ 175.655127][ T5895] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 175.677846][ T5895] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.694106][ T5895] usb 9-1: config 0 descriptor?? [ 175.710347][ T5895] cp210x 9-1:0.4: cp210x converter detected [ 175.785594][ T5928] usb 6-1: Using ep0 maxpacket: 32 [ 175.813651][ T5928] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 175.823135][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.837310][ T5928] usb 6-1: Product: syz [ 175.841701][ T5928] usb 6-1: Manufacturer: syz [ 175.848360][ T5928] usb 6-1: SerialNumber: syz [ 175.862066][ T5928] usb 6-1: config 0 descriptor?? [ 175.871746][ T5928] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 175.881842][ T5928] dvb-usb: bulk message failed: -22 (2/0) [ 175.894097][ T5928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 175.904077][ T5928] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 175.905857][ T5833] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 175.913346][ T5928] usb 6-1: media controller created [ 175.932078][ T5895] usb 9-1: cp210x converter now attached to ttyUSB0 [ 175.951159][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.977158][ T5928] usb 6-1: selecting invalid altsetting 7 [ 175.983014][ T5928] cxusb: set interface failed [ 175.988145][ T5928] dvb-usb: bulk message failed: -22 (1/0) [ 176.019975][ T5928] DVB: Unable to find symbol lgdt330x_attach() [ 176.026257][ T5928] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 176.067414][ T5833] usb 7-1: unable to get BOS descriptor or descriptor too short [ 176.075513][ T5913] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 176.077018][ T5833] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 86, changing to 4 [ 176.094558][ T5833] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 0 [ 176.098475][ T5928] rc_core: IR keymap rc-dvico-portable not found [ 176.106914][ T5833] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 176.125945][ T5928] Registered IR keymap rc-empty [ 176.132415][ T5928] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 176.134410][ T5895] usb 9-1: USB disconnect, device number 4 [ 176.151345][ T5928] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input23 [ 176.168613][ T5895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 176.170774][ T5928] dvb-usb: schedule remote query interval to 100 msecs. [ 176.180544][ T5895] cp210x 9-1:0.4: device disconnected [ 176.190347][ T5928] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 176.220757][ T5928] usb 6-1: USB disconnect, device number 33 [ 176.288877][ T5913] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 176.308920][ T5928] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 176.318438][ T5913] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8200, setting to 1024 [ 176.334625][ T5913] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 176.343982][ T5913] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.357827][ T5913] usb 8-1: config 0 descriptor?? [ 176.818246][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 177.165583][ T5895] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 177.322585][ T5895] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 177.331263][ T5895] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.343317][ T5895] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 177.353509][ T5895] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 177.363017][ T5895] usb 9-1: Manufacturer: syz [ 177.373517][ T5895] usb 9-1: config 0 descriptor?? [ 177.463369][ T5895] rc_core: IR keymap rc-hauppauge not found [ 177.470341][ T5895] Registered IR keymap rc-empty [ 177.479251][ T5895] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 177.493693][ T5895] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input24 [ 177.607283][ T10] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 177.618841][ T5928] usb 9-1: USB disconnect, device number 5 [ 177.765545][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 177.772994][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 177.787315][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 177.800089][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 177.813864][ T10] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 177.823265][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.831418][ T10] usb 6-1: Product: syz [ 177.836799][ T10] usb 6-1: Manufacturer: syz [ 177.841452][ T10] usb 6-1: SerialNumber: syz [ 177.849820][ T10] usb 6-1: config 0 descriptor?? [ 177.865820][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input25 [ 177.909630][ C0] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 178.065591][ T7074] usb 6-1: USB disconnect, device number 34 [ 178.065591][ C0] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 178.260505][ T5832] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 178.605557][ T5833] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 178.656488][ T5832] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 178.656580][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.695441][ T5928] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 178.709536][ T5833] usb 7-1: can't set config #1, error -71 [ 178.728744][ T5833] usb 7-1: USB disconnect, device number 14 [ 178.895995][ T5928] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 178.919331][ T5913] usbhid 8-1:0.0: can't add hid device: -71 [ 178.929524][ T5928] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.942116][ T5913] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 178.944366][ T5832] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 178.968990][ T5928] usb 9-1: Product: syz [ 179.003610][ T5913] usb 8-1: USB disconnect, device number 10 [ 179.030116][ T5928] usb 9-1: Manufacturer: syz [ 179.042096][ T5928] usb 9-1: SerialNumber: syz [ 179.083755][ T5928] r8152-cfgselector 9-1: Unknown version 0x0000 [ 179.094881][ T5928] r8152-cfgselector 9-1: config 0 descriptor?? [ 179.115804][ T5833] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 179.265412][ T5833] usb 7-1: device descriptor read/64, error -71 [ 179.536819][ T5833] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 179.676642][ T5833] usb 7-1: device descriptor read/64, error -71 [ 179.798415][ T5833] usb usb7-port1: attempt power cycle [ 179.921498][ T5832] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 180.157532][ T5833] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 180.206088][ T5833] usb 7-1: device descriptor read/8, error -71 [ 180.485506][ T5833] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 180.508370][ T5833] usb 7-1: device descriptor read/8, error -71 [ 180.635823][ T5833] usb usb7-port1: unable to enumerate USB device [ 180.709568][ T7267] netlink: 124 bytes leftover after parsing attributes in process `syz.5.299'. [ 181.160472][ T5832] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 181.201170][ T7273] sp0: Synchronizing with TNC [ 181.231144][ T7272] [U] `` [ 181.397494][ T5832] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 181.407721][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.304'. [ 181.453439][ T7279] No control pipe specified [ 181.488257][ T5913] r8152-cfgselector 9-1: USB disconnect, device number 6 [ 182.120197][ T7303] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 182.147221][ T10] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 182.305376][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 182.320662][ T10] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 182.336604][ T10] usb 7-1: config 0 has no interface number 0 [ 182.343977][ T10] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 182.361480][ T10] usb 7-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 182.379754][ T10] usb 7-1: config 0 interface 41 has no altsetting 0 [ 182.391090][ T10] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 182.400843][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.412912][ T10] usb 7-1: Product: syz [ 182.419074][ T10] usb 7-1: Manufacturer: syz [ 182.424083][ T10] usb 7-1: SerialNumber: syz [ 182.435051][ T10] usb 7-1: config 0 descriptor?? [ 182.442653][ T7296] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 182.454565][ T10] sr9700 7-1:0.41: probe with driver sr9700 failed with error -22 [ 182.595438][ T5913] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 182.624076][ T5832] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 182.659055][ T5928] usb 7-1: USB disconnect, device number 19 [ 182.765504][ T5913] usb 9-1: Using ep0 maxpacket: 16 [ 182.781370][ T5913] usb 9-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config [ 182.802684][ T5913] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.813411][ T7317] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 182.820383][ T5913] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.832159][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.842818][ T5913] usb 9-1: Product: syz [ 182.848115][ T5913] usb 9-1: Manufacturer: syz [ 182.852771][ T5913] usb 9-1: SerialNumber: syz [ 182.999778][ T7319] VFS: Mount too revealing [ 183.070864][ T5913] usb 9-1: 0:2 : does not exist [ 183.085737][ T5913] usb 9-1: unit 9 not found! [ 183.103302][ T5913] usb 9-1: 4:0: cannot get min/max values for control 3 (id 4) [ 183.104837][ T7324] netlink: 'syz.5.318': attribute type 1 has an invalid length. [ 183.132072][ T5913] usb 9-1: 4:0: cannot get min/max values for control 4 (id 4) [ 183.162338][ T5913] usb 9-1: 4:0: cannot get min/max values for control 5 (id 4) [ 183.194576][ T5913] usb 9-1: 4:0: cannot get min/max values for control 6 (id 4) [ 183.227841][ T5913] usb 9-1: 4:0: cannot get min/max values for control 7 (id 4) [ 183.258019][ T5913] usb 9-1: 4:0: cannot get min/max values for control 8 (id 4) [ 183.363208][ T5913] usb 9-1: USB disconnect, device number 7 [ 183.435404][ T7074] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 183.603907][ T7074] usb 8-1: unable to get BOS descriptor or descriptor too short [ 183.621910][ T7074] usb 8-1: not running at top speed; connect to a high speed hub [ 183.662220][ T7074] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 183.681923][ T7335] FAULT_INJECTION: forcing a failure. [ 183.681923][ T7335] name failslab, interval 1, probability 0, space 0, times 0 [ 183.698015][ T7074] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 90, changing to 4 [ 183.726379][ T7074] usb 8-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 183.742856][ T7335] CPU: 0 UID: 0 PID: 7335 Comm: syz.6.323 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.742898][ T7335] Tainted: [L]=SOFTLOCKUP [ 183.742906][ T7335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.742918][ T7335] Call Trace: [ 183.742927][ T7335] [ 183.742936][ T7335] dump_stack_lvl+0xe8/0x150 [ 183.742972][ T7335] should_fail_ex+0x412/0x560 [ 183.743008][ T7335] should_failslab+0xa8/0x100 [ 183.743046][ T7335] __kmalloc_noprof+0xe8/0x760 [ 183.743072][ T7335] ? tomoyo_encode+0x28b/0x550 [ 183.743106][ T7335] tomoyo_encode+0x28b/0x550 [ 183.743139][ T7335] tomoyo_realpath_from_path+0x58d/0x5d0 [ 183.743179][ T7335] ? tomoyo_path_number_perm+0x219/0x630 [ 183.743202][ T7335] tomoyo_path_number_perm+0x246/0x630 [ 183.743225][ T7335] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 183.743249][ T7335] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 183.743314][ T7335] ? __pfx_from_kgid+0x10/0x10 [ 183.743334][ T7335] ? down_write_killable+0x180/0x240 [ 183.743364][ T7335] ? __pfx_down_write_killable+0x10/0x10 [ 183.743400][ T7335] security_path_chown+0x139/0x340 [ 183.743433][ T7335] chown_common+0x40c/0x6b0 [ 183.743473][ T7335] ? __pfx_chown_common+0x10/0x10 [ 183.743513][ T7335] ? mnt_get_write_access+0x213/0x280 [ 183.743550][ T7335] do_fchownat+0x14c/0x250 [ 183.743582][ T7335] ? __pfx_do_fchownat+0x10/0x10 [ 183.743610][ T7335] ? __pfx_ksys_write+0x10/0x10 [ 183.743644][ T7335] __x64_sys_lchown+0x85/0xa0 [ 183.743674][ T7335] do_syscall_64+0x14d/0xf80 [ 183.743698][ T7335] ? trace_irq_disable+0x3b/0x150 [ 183.743717][ T7335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.743737][ T7335] ? clear_bhb_loop+0x40/0x90 [ 183.743763][ T7335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.743782][ T7335] RIP: 0033:0x7efd0119c799 [ 183.743802][ T7335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.743819][ T7335] RSP: 002b:00007efcff3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 183.743841][ T7335] RAX: ffffffffffffffda RBX: 00007efd01415fa0 RCX: 00007efd0119c799 [ 183.743856][ T7335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 183.743868][ T7335] RBP: 00007efcff3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 183.743881][ T7335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.743892][ T7335] R13: 00007efd01416038 R14: 00007efd01415fa0 R15: 00007ffeb7054db8 [ 183.743927][ T7335] [ 183.748456][ T7074] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.760195][ T7335] ERROR: Out of memory at tomoyo_realpath_from_path. [ 183.784259][ T7074] usb 8-1: Product: syz [ 183.819404][ T7335] evm: overlay not supported [ 183.964987][ T7074] usb 8-1: Manufacturer: syz [ 184.054868][ T7341] loop5: detected capacity change from 0 to 7 [ 184.056067][ T7074] usb 8-1: SerialNumber: syz [ 184.235170][ T7344] 9pnet_fd: Insufficient options for proto=fd [ 184.306524][ T7074] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 184.340308][ T7074] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 184.594758][ T6478] Dev loop5: unable to read RDB block 7 [ 184.621252][ T6478] loop5: unable to read partition table [ 184.657585][ T6478] loop5: partition table beyond EOD, truncated [ 184.753855][ T7074] usb 8-1: USB disconnect, device number 11 [ 185.197568][ T7366] syzkaller1: entered promiscuous mode [ 185.223873][ T7366] syzkaller1: entered allmulticast mode [ 185.311513][ T7341] Dev loop5: unable to read RDB block 7 [ 185.320538][ T7341] loop5: unable to read partition table [ 185.333308][ T7341] loop5: partition table beyond EOD, truncated [ 185.340648][ T7341] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 185.565452][ T5833] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 185.640137][ T7377] jfs: Unknown parameter '' [ 185.735187][ T5833] usb 8-1: unable to get BOS descriptor or descriptor too short [ 185.764820][ T5833] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 185.852917][ T5833] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 185.894622][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.931464][ T5833] usb 8-1: Product: syz [ 185.955494][ T5833] usb 8-1: Manufacturer: syz [ 185.971721][ T5833] usb 8-1: SerialNumber: syz [ 186.162079][ T7393] dlm: no locking on control device [ 186.187707][ T7387] Invalid source name [ 186.207126][ T7387] UBIFS error (pid: 7387): cannot open "ubifs", error -22 [ 186.210499][ T7387] syzkaller1: entered promiscuous mode [ 186.248886][ T7387] syzkaller1: entered allmulticast mode [ 186.273934][ T5832] Bluetooth: hci3: hcon ffff88802d898000 sent 1 < count 512 [ 186.287226][ T5832] Bluetooth: hci3: hcon ffff88805c5c8000 sent 1 < count 4 [ 186.511195][ T7399] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.661826][ T7399] bridge_slave_0 (unregistering): left allmulticast mode [ 186.692194][ T7399] bridge_slave_0 (unregistering): left promiscuous mode [ 186.714934][ T7399] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.915431][ T5928] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 186.945218][ T7410] netlink: 'syz.5.340': attribute type 4 has an invalid length. [ 186.970532][ T7410] netlink: 28 bytes leftover after parsing attributes in process `syz.5.340'. [ 187.086822][ T5928] usb 9-1: Using ep0 maxpacket: 8 [ 187.101906][ T5928] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.130695][ T5928] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.164152][ T5928] usb 9-1: config 0 interface 0 has no altsetting 0 [ 187.175857][ T5928] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 187.196947][ T5928] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.228940][ T5928] usb 9-1: config 0 descriptor?? [ 187.400798][ T7417] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 187.458150][ T7417] kvm: pic: non byte read [ 187.493723][ T7417] kvm: pic: level sensitive irq not supported [ 187.495179][ T7417] kvm: pic: non byte read [ 187.549399][ T7417] kvm: pic: level sensitive irq not supported [ 187.550619][ T7417] kvm: pic: non byte read [ 187.594281][ T7405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.617894][ T7405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.639550][ T7417] kvm: pic: level sensitive irq not supported [ 187.640247][ T7417] kvm: pic: non byte read [ 187.671197][ T7417] kvm: pic: level sensitive irq not supported [ 187.671356][ T7417] kvm: pic: non byte read [ 187.702390][ T7417] kvm: pic: level sensitive irq not supported [ 187.702499][ T7417] kvm: pic: non byte read [ 187.755348][ T7417] kvm: pic: level sensitive irq not supported [ 187.755443][ T7417] kvm: pic: non byte read [ 188.303519][ T5833] usb 8-1: unit 4 not found! [ 188.408711][ T5833] usb 8-1: USB disconnect, device number 12 [ 188.428451][ T7074] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 188.521023][ T5928] usbhid 9-1:0.0: can't add hid device: -71 [ 188.545588][ T5928] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 188.589560][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.606281][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.7.347'. [ 188.620221][ T5928] usb 9-1: USB disconnect, device number 8 [ 188.626319][ T7074] usb 7-1: Using ep0 maxpacket: 32 [ 188.663673][ T7074] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 188.691524][ T7074] usb 7-1: config 0 has no interface number 0 [ 188.704874][ T7074] usb 7-1: config 0 interface 184 has no altsetting 0 [ 188.733074][ T7074] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 188.756813][ T7074] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.779929][ T7074] usb 7-1: Product: syz [ 188.791429][ T7074] usb 7-1: Manufacturer: syz [ 188.803576][ T7074] usb 7-1: SerialNumber: syz [ 188.838915][ T7074] usb 7-1: config 0 descriptor?? [ 188.954700][ T7447] loop5: detected capacity change from 0 to 7 [ 189.018078][ T7447] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 189.033532][ T7447] loop5: partition table partially beyond EOD, truncated [ 189.060571][ T7447] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 189.264488][ T6271] udevd[6271]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 189.345072][ T7452] netlink: 'syz.7.349': attribute type 1 has an invalid length. [ 189.373869][ T7452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.657757][ T5832] ================================================================== [ 189.665889][ T5832] BUG: KASAN: stack-out-of-bounds in l2cap_send_cmd+0x2a3/0xb90 [ 189.673565][ T5832] Read of size 28 at addr ffffc900046d7540 by task kworker/u9:3/5832 [ 189.681660][ T5832] [ 189.684021][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.684061][ T5832] Tainted: [L]=SOFTLOCKUP [ 189.684068][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 189.684081][ T5832] Workqueue: hci5 hci_rx_work [ 189.684112][ T5832] Call Trace: [ 189.684120][ T5832] [ 189.684129][ T5832] dump_stack_lvl+0xe8/0x150 [ 189.684160][ T5832] print_report+0xba/0x230 [ 189.684187][ T5832] ? l2cap_send_cmd+0x2a3/0xb90 [ 189.684210][ T5832] kasan_report+0x117/0x150 [ 189.684234][ T5832] ? trace_kmem_cache_alloc+0x29/0xf0 [ 189.684259][ T5832] ? l2cap_send_cmd+0x2a3/0xb90 [ 189.684285][ T5832] kasan_check_range+0x264/0x2c0 [ 189.684310][ T5832] ? l2cap_send_cmd+0x2a3/0xb90 [ 189.684334][ T5832] __asan_memcpy+0x29/0x70 [ 189.684355][ T5832] l2cap_send_cmd+0x2a3/0xb90 [ 189.684380][ T5832] l2cap_recv_frame+0xc078/0x10290 [ 189.684411][ T5832] ? unwind_next_frame+0xa5/0x23c0 [ 189.684443][ T5832] ? unwind_next_frame+0xa5/0x23c0 [ 189.684474][ T5832] ? unwind_next_frame+0xa5/0x23c0 [ 189.684501][ T5832] ? unwind_next_frame+0x1aaf/0x23c0 [ 189.684531][ T5832] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 189.684558][ T5832] ? ret_from_fork_asm+0x1a/0x30 [ 189.684587][ T5832] ? ret_from_fork_asm+0x1a/0x30 [ 189.684617][ T5832] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 189.684643][ T5832] ? ret_from_fork_asm+0x1a/0x30 [ 189.684672][ T5832] ? stack_trace_save+0xa9/0x100 [ 189.684692][ T5832] ? __pfx_stack_trace_save+0x10/0x10 [ 189.684713][ T5832] ? stack_depot_save_flags+0x33/0x810 [ 189.684744][ T5832] ? __lock_acquire+0x6b5/0x2cf0 [ 189.684773][ T5832] ? __lock_acquire+0x6b5/0x2cf0 [ 189.684797][ T5832] ? update_cfs_rq_load_avg+0x3fb/0x4e0 [ 189.684824][ T5832] ? __mutex_trylock_common+0x158/0x260 [ 189.684844][ T5832] ? __pfx___mutex_trylock_common+0x10/0x10 [ 189.684863][ T5832] ? rcu_is_watching+0x15/0xb0 [ 189.684888][ T5832] ? trace_contention_end+0x3d/0x150 [ 189.684908][ T5832] ? __mutex_lock+0x319/0x1300 [ 189.684937][ T5832] ? l2cap_recv_acldata+0x2e3/0x13e0 [ 189.684962][ T5832] ? l2cap_recv_acldata+0x30b/0x13e0 [ 189.684988][ T5832] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 189.685015][ T5832] ? __pfx___mutex_lock+0x10/0x10 [ 189.685050][ T5832] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 189.685075][ T5832] ? l2cap_conn_hold_unless_zero+0x179/0x2b0 [ 189.685102][ T5832] ? __pfx_l2cap_conn_hold_unless_zero+0x10/0x10 [ 189.685131][ T5832] ? l2cap_recv_acldata+0x41/0x13e0 [ 189.685160][ T5832] l2cap_recv_acldata+0x7e9/0x13e0 [ 189.685190][ T5832] hci_rx_work+0x4f9/0x1040 [ 189.685219][ T5832] ? process_one_work+0x87c/0x1650 [ 189.685242][ T5832] process_one_work+0x949/0x1650 [ 189.685271][ T5832] ? __pfx_process_one_work+0x10/0x10 [ 189.685292][ T5832] ? do_raw_spin_lock+0x12b/0x2f0 [ 189.685318][ T5832] worker_thread+0xb46/0x1140 [ 189.685350][ T5832] kthread+0x388/0x470 [ 189.685375][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 189.685400][ T5832] ? __pfx_kthread+0x10/0x10 [ 189.685420][ T5832] ret_from_fork+0x51e/0xb90 [ 189.685447][ T5832] ? __pfx_ret_from_fork+0x10/0x10 [ 189.685469][ T5832] ? __switch_to+0xc7d/0x1450 [ 189.685491][ T5832] ? __pfx_kthread+0x10/0x10 [ 189.685510][ T5832] ret_from_fork_asm+0x1a/0x30 [ 189.685545][ T5832] [ 189.685552][ T5832] [ 190.002721][ T5832] The buggy address belongs to stack of task kworker/u9:3/5832 [ 190.010274][ T5832] and is located at offset 128 in frame: [ 190.016013][ T5832] l2cap_recv_frame+0x0/0x10290 [ 190.020888][ T5832] [ 190.023225][ T5832] This frame has 26 objects: [ 190.027807][ T5832] [32, 34) 'rsp.i241.i.i' [ 190.027820][ T5832] [48, 88) 'chan.i.i.i' [ 190.032241][ T5832] [128, 146) 'pdu_u.i.i.i' [ 190.036504][ T5832] [192, 202) 'rsp.i94.i.i' [ 190.041014][ T5832] [224, 226) 'rsp.i.i.i111' [ 190.045517][ T5832] [240, 242) 'rej.i' [ 190.050191][ T5832] [256, 258) 'rej.i145.i' [ 190.054223][ T5832] [272, 274) 'rej.i143.i' [ 190.058688][ T5832] [288, 290) 'req.i229.i.i' [ 190.063125][ T5832] [304, 312) 'buf.i222.i.i' [ 190.067715][ T5832] [336, 348) 'buf29.i.i.i' [ 190.072476][ T5832] [368, 372) 'rsp49.i.i.i' [ 190.076973][ T5832] [384, 393) 'rfc.i.i118.i.i' [ 190.081503][ T5832] [416, 480) 'buf.i119.i.i' [ 190.086265][ T5832] [512, 576) 'req.i120.i.i' [ 190.090953][ T5832] [608, 617) 'rfc.i.i.i.i' [ 190.095658][ T5832] [640, 656) 'efs.i.i.i.i' [ 190.100248][ T5832] [672, 678) 'rej.i371.i.i.i' [ 190.104758][ T5832] [704, 710) 'rej.i.i.i.i' [ 190.109522][ T5832] [736, 800) 'rsp.i.i.i' [ 190.114027][ T5832] [832, 896) 'buf.i.i.i' [ 190.118352][ T5832] [928, 1056) 'req.i.i.i' [ 190.122685][ T5832] [1088, 1096) 'rsp.i.i.i.i' [ 190.127186][ T5832] [1120, 1122) 'info.i.i.i.i' [ 190.131863][ T5832] [1136, 1264) 'buf.i.i.i.i' [ 190.136621][ T5832] [1296, 1298) 'rej.i.i' [ 190.141293][ T5832] [ 190.147923][ T5832] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc900046d0000 allocated at copy_process+0x508/0x3cf0 [ 190.160997][ T5832] The buggy address belongs to the physical page: [ 190.167499][ T5832] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79b57 [ 190.176257][ T5832] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 190.183373][ T5832] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 190.192308][ T5832] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 190.200885][ T5832] page dumped because: kasan: bad access detected [ 190.207294][ T5832] page_owner tracks the page as allocated [ 190.213004][ T5832] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 2, tgid 2 (kthreadd), ts 84932108284, free_ts 84770609869 [ 190.231760][ T5832] post_alloc_hook+0x231/0x280 [ 190.236534][ T5832] get_page_from_freelist+0x23a1/0x2440 [ 190.242085][ T5832] __alloc_frozen_pages_noprof+0x18d/0x380 [ 190.248073][ T5832] __alloc_pages_noprof+0xa/0x30 [ 190.253013][ T5832] __vmalloc_node_range_noprof+0x7c0/0x1a80 [ 190.258906][ T5832] __vmalloc_node_noprof+0xc2/0x100 [ 190.264195][ T5832] dup_task_struct+0x228/0x9e0 [ 190.268968][ T5832] copy_process+0x508/0x3cf0 [ 190.273571][ T5832] kernel_clone+0x248/0x8e0 [ 190.278079][ T5832] kernel_thread+0x13f/0x1b0 [ 190.282681][ T5832] kthreadd+0x4ec/0x6e0 [ 190.286847][ T5832] ret_from_fork+0x51e/0xb90 [ 190.291445][ T5832] ret_from_fork_asm+0x1a/0x30 [ 190.296224][ T5832] page last free pid 5824 tgid 5824 stack trace: [ 190.302545][ T5832] __free_frozen_pages+0xbe2/0xd60 [ 190.307658][ T5832] __slab_free+0x263/0x2b0 [ 190.312171][ T5832] qlist_free_all+0x97/0x100 [ 190.316765][ T5832] kasan_quarantine_reduce+0x148/0x160 [ 190.322224][ T5832] __kasan_slab_alloc+0x22/0x80 [ 190.327186][ T5832] __kmalloc_cache_noprof+0x2ba/0x660 [ 190.332651][ T5832] kcov_open+0x25/0x90 [ 190.336724][ T5832] open_proxy_open+0x346/0x4a0 [ 190.341491][ T5832] do_dentry_open+0x785/0x14e0 [ 190.346261][ T5832] vfs_open+0x3b/0x340 [ 190.350337][ T5832] path_openat+0x2e08/0x3860 [ 190.354937][ T5832] do_file_open+0x23e/0x4a0 [ 190.359536][ T5832] do_sys_openat2+0x113/0x200 [ 190.364209][ T5832] __x64_sys_openat+0x138/0x170 [ 190.369059][ T5832] do_syscall_64+0x14d/0xf80 [ 190.373655][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.379549][ T5832] [ 190.381868][ T5832] Memory state around the buggy address: [ 190.387489][ T5832] ffffc900046d7400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 190.395552][ T5832] ffffc900046d7480: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 f8 f2 f8 f8 [ 190.403713][ T5832] >ffffc900046d7500: f8 f8 f8 f2 f2 f2 f2 f2 00 00 02 f2 f2 f2 f2 f2 [ 190.411768][ T5832] ^ [ 190.418528][ T5832] ffffc900046d7580: f8 f8 f2 f2 f8 f2 f8 f2 f8 f2 f8 f2 f8 f2 f8 f2 [ 190.426585][ T5832] ffffc900046d7600: f2 f2 f8 f8 f2 f2 f8 f2 f8 f8 f2 f2 f8 f8 f8 f8 [ 190.434642][ T5832] ================================================================== [ 190.453908][ T5832] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 190.461168][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.472399][ T5832] Tainted: [L]=SOFTLOCKUP [ 190.476729][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 190.486784][ T5832] Workqueue: hci5 hci_rx_work [ 190.491477][ T5832] Call Trace: [ 190.494765][ T5832] [ 190.497710][ T5832] vpanic+0x56c/0xa60 [ 190.501707][ T5832] ? __pfx_vpanic+0x10/0x10 [ 190.506226][ T5832] panic+0xc5/0xd0 [ 190.509957][ T5832] ? __pfx_panic+0x10/0x10 [ 190.514385][ T5832] ? preempt_schedule_thunk+0x16/0x30 [ 190.519761][ T5832] ? preempt_schedule_thunk+0x16/0x30 [ 190.525220][ T5832] ? l2cap_send_cmd+0x2a3/0xb90 [ 190.530076][ T5832] check_panic_on_warn+0x89/0xb0 [ 190.535301][ T5832] ? l2cap_send_cmd+0x2a3/0xb90 [ 190.540191][ T5832] end_report+0x73/0x180 [ 190.544457][ T5832] ? l2cap_send_cmd+0x2a3/0xb90 [ 190.549319][ T5832] kasan_report+0x128/0x150 [ 190.553826][ T5832] ? trace_kmem_cache_alloc+0x29/0xf0 [ 190.559200][ T5832] ? l2cap_send_cmd+0x2a3/0xb90 [ 190.564487][ T5832] kasan_check_range+0x264/0x2c0 [ 190.569435][ T5832] ? l2cap_send_cmd+0x2a3/0xb90 [ 190.574293][ T5832] __asan_memcpy+0x29/0x70 [ 190.578722][ T5832] l2cap_send_cmd+0x2a3/0xb90 [ 190.583421][ T5832] l2cap_recv_frame+0xc078/0x10290 [ 190.588634][ T5832] ? unwind_next_frame+0xa5/0x23c0 [ 190.593925][ T5832] ? unwind_next_frame+0xa5/0x23c0 [ 190.599132][ T5832] ? unwind_next_frame+0xa5/0x23c0 [ 190.604250][ T5832] ? unwind_next_frame+0x1aaf/0x23c0 [ 190.609544][ T5832] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 190.614920][ T5832] ? ret_from_fork_asm+0x1a/0x30 [ 190.619949][ T5832] ? ret_from_fork_asm+0x1a/0x30 [ 190.625060][ T5832] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 190.631217][ T5832] ? ret_from_fork_asm+0x1a/0x30 [ 190.636163][ T5832] ? stack_trace_save+0xa9/0x100 [ 190.641105][ T5832] ? __pfx_stack_trace_save+0x10/0x10 [ 190.646476][ T5832] ? stack_depot_save_flags+0x33/0x810 [ 190.652304][ T5832] ? __lock_acquire+0x6b5/0x2cf0 [ 190.657247][ T5832] ? __lock_acquire+0x6b5/0x2cf0 [ 190.662187][ T5832] ? update_cfs_rq_load_avg+0x3fb/0x4e0 [ 190.667742][ T5832] ? __mutex_trylock_common+0x158/0x260 [ 190.673285][ T5832] ? __pfx___mutex_trylock_common+0x10/0x10 [ 190.679177][ T5832] ? rcu_is_watching+0x15/0xb0 [ 190.683946][ T5832] ? trace_contention_end+0x3d/0x150 [ 190.689236][ T5832] ? __mutex_lock+0x319/0x1300 [ 190.694039][ T5832] ? l2cap_recv_acldata+0x2e3/0x13e0 [ 190.699336][ T5832] ? l2cap_recv_acldata+0x30b/0x13e0 [ 190.704650][ T5832] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 190.710376][ T5832] ? __pfx___mutex_lock+0x10/0x10 [ 190.715407][ T5832] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 190.721403][ T5832] ? l2cap_conn_hold_unless_zero+0x179/0x2b0 [ 190.731743][ T5832] ? __pfx_l2cap_conn_hold_unless_zero+0x10/0x10 [ 190.738105][ T5832] ? l2cap_recv_acldata+0x41/0x13e0 [ 190.743331][ T5832] l2cap_recv_acldata+0x7e9/0x13e0 [ 190.748635][ T5832] hci_rx_work+0x4f9/0x1040 [ 190.753337][ T5832] ? process_one_work+0x87c/0x1650 [ 190.758716][ T5832] process_one_work+0x949/0x1650 [ 190.763664][ T5832] ? __pfx_process_one_work+0x10/0x10 [ 190.769035][ T5832] ? do_raw_spin_lock+0x12b/0x2f0 [ 190.774101][ T5832] worker_thread+0xb46/0x1140 [ 190.778790][ T5832] kthread+0x388/0x470 [ 190.782864][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 190.788067][ T5832] ? __pfx_kthread+0x10/0x10 [ 190.792659][ T5832] ret_from_fork+0x51e/0xb90 [ 190.797258][ T5832] ? __pfx_ret_from_fork+0x10/0x10 [ 190.802398][ T5832] ? __switch_to+0xc7d/0x1450 [ 190.807082][ T5832] ? __pfx_kthread+0x10/0x10 [ 190.811672][ T5832] ret_from_fork_asm+0x1a/0x30 [ 190.816449][ T5832] [ 190.819856][ T5832] Kernel Offset: disabled [ 190.824175][ T5832] Rebooting in 86400 seconds..