last executing test programs: 6m3.607885475s ago: executing program 4 (id=4177): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0x18, 0x0, 0xe, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x38}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002001200ff19010005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000080), &(0x7f0000000340)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={r1, &(0x7f0000000300), &(0x7f0000000600)=""/86}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0x2e2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0xffff}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0xdddd0000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) socket$l2tp6(0xa, 0x2, 0x73) 6m3.469806359s ago: executing program 4 (id=4179): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000040000000000000000000000b86b6e0000010001000000000c0015005b073500", @ANYRES64=r0], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0x8001, "00000000020000000000002100", '\x00', "0006008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70ca6403556000"]}) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r4 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='4', 0x1}], 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x3, 0x5, 0x2, @mcast1, @mcast1, 0x700, 0x1, 0x7, 0x3}}) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000002"], 0xfecc, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="00170001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000140)="508c7efb7b1c05e693e2523e706b8316dc059e8bc0e1c106d61fe5b2f080ebcff707eab9d9fb5d134813"}, 0x20) 6m1.675561425s ago: executing program 4 (id=4186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000080) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9, {0x4}, {}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 6m1.484833812s ago: executing program 4 (id=4188): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10008007}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 2) close(r0) 6m1.212083019s ago: executing program 4 (id=4189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000000, 0xfffffffc}, @empty, @private=0xa010101}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03030800030016000c004057006bebe7bf"], 0x92) (fail_nth: 2) 6m0.817818057s ago: executing program 4 (id=4191): socket$netlink(0x10, 0x3, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000040)=0x4e, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000480)="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", 0x11a, 0x4000000, &(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10) syz_usb_connect(0x6, 0x2d, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRES16, @ANYRES64=r0, @ANYRES64=r0, @ANYRES8=r0], 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r2, 0x40305829, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$KVM_CREATE_VM(r3, 0xae01, 0x5) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r4, &(0x7f0000001200)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00', 0x3ff, 0x3}, 0x20) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000400)={&(0x7f0000000280)=[0x0], 0x1, r7}) fsopen(&(0x7f0000000100)='pvfs2\x00', 0x1) setsockopt$inet6_int(r5, 0x29, 0x8, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) r8 = socket$packet(0x11, 0x2, 0x300) bind$packet(r8, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14) syz_emit_ethernet(0x22, &(0x7f0000000340)={@multicast, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@can={0xc, {{0x4, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "b2daaf88c03943dc"}}}}, 0x0) 6m0.638533338s ago: executing program 32 (id=4191): socket$netlink(0x10, 0x3, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000040)=0x4e, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000480)="de512fe2ba1907ce344f4de90bf37432dcaf606755da4179c39bfbfbca9d842d18e7b324294956931bc31c1a3fd9c020aef6ea89c9062157999e43a309e15a916659268a64f98534d70b4b0e3b78fb612678b57b94e08474496f711871ae0ca8fe81ee274aa11d7dcb3b94a49b411562b39bf31f213d621d831dbfa72e3a2e306e171afd6a362308445761db4b31b1d51dbca25275573c3bae6ae68c5c8fb86eedc32485af8d3d8e1ad6f73e07f855f9b5e75bb6bf9edffa0d9cec7edd9e7bb9f649dc721468711a9f2f13ef575608b50bedd069e9f3dad8dc9cd851b0ab4a321cf058fa09c637e15f9a84325a5b7cea28dfd78d552ffba22ec575003741cac8dfeba06355fd3bbe9d64c1ae084ebb2c21978efcc3cf7dcda32c", 0x11a, 0x4000000, &(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10) syz_usb_connect(0x6, 0x2d, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRES16, @ANYRES64=r0, @ANYRES64=r0, @ANYRES8=r0], 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r2, 0x40305829, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$KVM_CREATE_VM(r3, 0xae01, 0x5) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r4, &(0x7f0000001200)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00', 0x3ff, 0x3}, 0x20) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000400)={&(0x7f0000000280)=[0x0], 0x1, r7}) fsopen(&(0x7f0000000100)='pvfs2\x00', 0x1) setsockopt$inet6_int(r5, 0x29, 0x8, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) r8 = socket$packet(0x11, 0x2, 0x300) bind$packet(r8, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14) syz_emit_ethernet(0x22, &(0x7f0000000340)={@multicast, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@can={0xc, {{0x4, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "b2daaf88c03943dc"}}}}, 0x0) 58.555013095s ago: executing program 0 (id=5568): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x76, 0x7, 0x1, 0x0, "3e1438e4248907682fdb6ace8783b7ae8b3259a110c71854e625c48de2aef6bd2b0a0df2d11477ebb7cd07caf18e58442a692abcedc356c1c326872d47aa7ccf1ea017382d25378f7eeaabf82fb84eee3a9feccb68d24776361c6e2b10079fcf399c65796c3d797f7d290ec2b9a7ffa4885c"}]}], {0x14}}, 0xf0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) mknodat$null(r5, &(0x7f0000000080)='.\x00', 0x10, 0x103) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @icmp={{0x18, 0x4, 0x0, 0x2, 0x68, 0x4000, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@timestamp_addr={0x44, 0xc, 0x21, 0x1, 0x9, [{@broadcast}]}, @timestamp={0x44, 0x28, 0x5e, 0x0, 0x0, [0x8, 0x3, 0x1, 0xeec0, 0x7, 0x7, 0x9, 0x7, 0x4]}, @rr={0x7, 0x17, 0xe6, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast, @multicast1]}]}}, @address_reply={0x12, 0x0, 0x0, 0xfff}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "fc79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 57.724184978s ago: executing program 0 (id=5574): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000040000000000000000000000b86b6e0000010001000000000c0015005b073500"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0x8001, "00000000020000000000002100", '\x00', "0006008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70ca6403556000"]}) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r4 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='4', 0x1}], 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x3, 0x5, 0x2, @mcast1, @mcast1, 0x700, 0x1, 0x7, 0x3}}) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000002"], 0xfecc, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="00170001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000140)="508c7efb7b1c05e693e2523e706b8316dc059e8bc0e1c106d61fe5b2f080ebcff707eab9d9fb5d134813"}, 0x20) 55.807588683s ago: executing program 0 (id=5580): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d00000002000001090224000100000000090400000103000000092100000001220500090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r3, 0x3}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000040)={r3, 0x18, "b923ad432353b7b9b56d397020cbbf4918f0f352186cc0ba"}, &(0x7f00000000c0)=0x20) 52.62020332s ago: executing program 0 (id=5593): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10008007}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 3) close(r0) 52.005590947s ago: executing program 0 (id=5597): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xad, 0xb8, 0x8a, 0x20, 0x572, 0x41, 0xa7d5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x75, 0xc0, 0x4, "", [{{0x9, 0x4, 0x55, 0x6, 0x0, 0x22, 0xf2, 0x59, 0xbf}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mkdir(&(0x7f0000000400)='./file0\x00', 0x3f) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x80004, 0x0, 0x24}}, 0x2e) read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x40, 0x3}}, 0x50) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r10, r10) tkill(r10, 0x7) syz_fuse_handle_req(r1, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x8000000000000001, {0x3, 0x0, 0x7, 0x0, 0x80, 0x2, {0x0, 0x49, 0x40004, 0x0, 0xfffffffffffffffc, 0x9, 0xfffffffb, 0xfb, 0x0, 0x2000, 0x0, r7, r8, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000340)='./file0/../file0/file0\x00', 0xa10000, &(0x7f0000000440)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}}, 0x0, 0x0, 0x0) mremap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) mbind(&(0x7f00000c3000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x6, 0x6, 0x3) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d240606000308000000f9a153519a08039e0c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003070005490c240206"], 0x0) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r11, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x120) writev(r11, &(0x7f0000004100)=[{&(0x7f00000001c0)='\f\x00\x00', 0x3}], 0x1) syz_usb_connect$uac2(0x2, 0xd1, &(0x7f00000008c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x414a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0x6, 0x80, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x4, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xac15, 0x9, 0x1b, 0x15}, [@effect_unit={0xb, 0x24, 0x7, 0x4, 0x1, 0x2, [0x2, 0x3]}, @multiply_unit={0x7, 0x24, 0xc, 0x76, 0x6, 0x2, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x0, 0x6, 0x0, "00c1019a"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x0, 0x1, 0x6, 0x1, "dcd5f6", "2c96b6"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0xf, 0x7, 0x77, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xc0, 0x8, 0x7f, {0x8, 0x25, 0x1, 0x0, 0x33, 0x1, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x7, 0x81, 0x2, 0x5, 0x80, 0x6, 0xff}, @as_header={0x10, 0x24, 0x1, 0x4, 0x3, 0x3, 0x4, 0x0, 0xd6, 0xd2}]}, {{0x9, 0x5, 0x82, 0x9, 0x670, 0x7, 0x4, 0x81, {0x8, 0x25, 0x1, 0x0, 0xc, 0x6, 0x3}}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x300, 0xff, 0x8, 0x9, 0xff, 0xa}, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x403}}]}) ioctl$sock_inet_SIOCSIFNETMASK(r9, 0x891c, &(0x7f0000000140)={'wg1\x00', {0x2, 0x4e22, @remote}}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) 51.452707997s ago: executing program 0 (id=5604): r0 = syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240a0001ff23000c2403020703000400070081090401000001022000090001010101022000090501090002030b040825010000400400090402000001022000090402010101022000092402020400cc1c051024010201000400000008b8000000030905820908"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x40) syz_usb_control_io(r0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x40840, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="2012bf000000f0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 51.140670452s ago: executing program 33 (id=5604): r0 = syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240a0001ff23000c2403020703000400070081090401000001022000090001010101022000090501090002030b040825010000400400090402000001022000090402010101022000092402020400cc1c051024010201000400000008b8000000030905820908"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x40) syz_usb_control_io(r0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x40840, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="2012bf000000f0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.35395815s ago: executing program 6 (id=5759): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(0x0, 0x2) socket(0x2, 0x80805, 0x800) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 13.762943154s ago: executing program 6 (id=5765): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x82, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000340)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x40000, 0xffff}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfee00000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x14, 0x0, 0x9, 0x2}, 0x10}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100107010340b804020240000102030109021b000101fbb00c09040025010000010009050102200000"], 0x0) ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000140)=""/97) 9.850654173s ago: executing program 5 (id=5776): openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc1485544, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r4, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040051) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x2217, 0x7721, 0x16, 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000000c0)) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x3232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x58, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000000)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB=' \n,'], 0x0, 0x0, 0x0, 0x0}, 0x0) 9.248902961s ago: executing program 6 (id=5780): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=0xc) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000301, r3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x8c, 0x20, 0x221, 0x0, 0x10000, {0x2}, [@nested={0x76, 0x19, 0x0, 0x1, [@generic="ca291ba85ba94fad706787839e947d8b25827db071d4b927f415dedc8ad24a2c33e143691277b1815c0ff2897d0aa6e05b9f6b9ecbb7e4fa26decf69be24e49ab587fd719907a13a05d94f8b48273cdee206445f21aa63211dfebcc07200fcc6d3c21cf4f14c8152172106eebdcf7433fa31"]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) userfaultfd(0x1) r4 = socket$inet(0x2, 0xa, 0x30) getsockopt$inet_mreqsrc(r4, 0x0, 0x33, 0x0, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000980)={0x5, r2, 'id1\x00'}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000001180)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000180)="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", 0x717, 0xb5f6}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 6.902995448s ago: executing program 6 (id=5790): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = userfaultfd(0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 6.534268867s ago: executing program 5 (id=5792): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES16=r0], 0x64}, 0x1, 0x0, 0x0, 0x8091}, 0x8844) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="130f000000000000f6ff06"], 0x18}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000100)={0xeb, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0x2}]}) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffa000/0x3000)=nil], &(0x7f0000000180)=[0x10], 0x0, 0x2) sendmmsg(r6, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000000180)=0x1, 0x4) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000000240), &(0x7f00000002c0)=0x14) read$FUSE(r1, &(0x7f00000011c0)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r9 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000380)={{{@in=@loopback, @in=@multicast1, 0x4e28, 0x0, 0xfffc, 0x2, 0xa, 0x0, 0x20}, {0x8, 0x8, 0x0, 0x0, 0xf94, 0x0, 0x1000000000a457}, {0x0, 0x6, 0x7}, 0x0, 0x202, 0x2, 0x0, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4002, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff, 0x2, 0x1, 0xfb, 0x0, 0x0, 0x800}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x0, 0x0, 0x4e21, 0xc0, 0x2, 0x0, 0x10}, {}, {0x0, 0xff}, 0x4}, {{@in6=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0x53, 0x40000}}, 0xe8) close(r9) 6.444438404s ago: executing program 3 (id=5793): syz_usb_connect(0x0, 0x91, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d04210800010102030109027f0002010080fa09040000010e0100000d240100013f000000000001010f24020101020000000000000000001a240603820661637050ab49b8ccb3855e8d22560101010101000924030201010003000705810308001009040100010e0200000e2401011700820002000000010009240901000000000007058205000401"], 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x2) syz_open_dev$video(&(0x7f0000000100), 0x1, 0x2) ioctl(r0, 0xc0607520, &(0x7f0000000300)="016d040a7465737400000000000000000000000000000000000000000000000000000000820661637050ab49b8ccb3855e8d225601200000010000000100"/92) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x800) r3 = dup3(r2, r1, 0x80000) read(r3, &(0x7f00000000c0)=""/226, 0xe2) pselect6(0x40, &(0x7f0000000340)={0x7ab5, 0x1, 0x8000000000000000, 0x80000001, 0x3, 0x1ff, 0x9, 0xfffffffffffffffb}, &(0x7f0000000380)={0x7, 0x8, 0x9, 0x80000000, 0x0, 0x20000000000000, 0x3, 0xfcc}, &(0x7f00000003c0)={0x8, 0x8, 0x0, 0xffffffffa8fb74ae, 0x401, 0x80, 0x6, 0x8}, &(0x7f0000000400)={0x77359400}, &(0x7f0000000480)={&(0x7f0000000440)={[0x80000000]}, 0x8}) read$watch_queue(r3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') getgroups(0x3, &(0x7f0000004400)=[0x0, 0x0, 0x0]) syz_fuse_handle_req(r5, &(0x7f0000002080)="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", 0x2000, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}]}, 0x5c}}, 0x0) 5.506563036s ago: executing program 5 (id=5795): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5.354072928s ago: executing program 5 (id=5796): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a070089b4c45a10000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/253], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='veth0_virt_wifi\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x73) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f00000001c0)=0x40008, 0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000340)={'nat\x00', 0x0, 0x4, 0xff, [0x8, 0x401, 0x8001, 0x5, 0x1, 0x6], 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000240)=""/255}, &(0x7f00000003c0)=0x78) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000000d060101000040000000000000000000050005006c6973743a73f103430735aa79cb33ac7b"], 0x34}}, 0x4000000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048881}, 0x8010) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x7, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x2, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 3.869886956s ago: executing program 5 (id=5800): pipe(&(0x7f0000000000)) (async) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000180)=[{0x5, 0x4000, 0x2000, &(0x7f0000000100)="9a6a4dab"}], 0x1}) 3.71218675s ago: executing program 6 (id=5801): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(0x0, 0x2) socket(0x2, 0x80805, 0x800) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[], 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.377749662s ago: executing program 3 (id=5803): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000030429bd7000fedbdf2594e20109", @ANYRES32=r1, @ANYBLOB="202f0100009000002c0012800b00010062726964676500001c0002800500190004000000080005000100"], 0x4c}, 0x1, 0x0, 0x0, 0x4c801}, 0x24008000) 3.25217764s ago: executing program 3 (id=5804): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0x100000003}], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877", 0xd3}], 0x1, 0x0, 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd", 0x32}], 0x1, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.991961579s ago: executing program 3 (id=5805): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = socket(0x840000000002, 0x3, 0x100) getsockopt$inet_pktinfo(r0, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'ipvlan1\x00', 0x0}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect$printer(0xf3bd5b6f1848c383, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES8=r3], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="290326bd7000ffdbdf25080000000c000180c1ed01005c3133d88596c4b57af879259b581b45c6e7bf8714ea0de4babe00feab4848ca62d2e68a6604057e57d5d2541305c38b2083c130d08ec91f9503411e7b23e8adcd9fb467cb905ec2788503bd0e6d612d2401c5b36706cf42d9ec3e3076c4ea4a65741d1c5bce6d08f69e8e4aa7cad061ee98768bf75fa8cf4d74c30858d42809086f7a638969d9cfc93e389484b43d84f137d17583dd7483ba1181b2813c216e46a2759acfe1db5e3c1426a884fb3438cc9cef8e9faa", @ANYRES32=r4, @ANYBLOB="180002801400038010000180040003000800010005000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0xf, 0x1, 0x9, 0x71, @local, @private1={0xfc, 0x1, '\x00', 0x8}, 0x7, 0x1, 0x4000000b, 0xfffffffe}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2, 0x3, 0x4, 0x5, 0x20, @loopback, @mcast1, 0x8020, 0x10, 0xffffff45, 0x4c}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x305100, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2080, 0x10) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) 1.91220713s ago: executing program 1 (id=5806): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x800) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.867983191s ago: executing program 1 (id=5807): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000000c0)={0x40000039}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x4, 0x4, 0x20104, 0x9014, 0xffffffffffffffff, 0x10ffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @value=r2}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.764119513s ago: executing program 1 (id=5808): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffd64) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000020000000a0000000000009c20010000000000000b00000000000000fdffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000001fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6000000000183a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 1.755643934s ago: executing program 1 (id=5809): syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x28}, @l2cap_cid_signaling={{0x24}, [@l2cap_disconn_req={{0x6, 0xc2, 0x4}, {0xff, 0x7fff}}, @l2cap_conn_req={{0x2, 0xfe, 0x4}, {0xfff, 0x1000}}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x2, 0x2}, {0x2}}, @l2cap_conn_req={{0x2, 0x9, 0x4}, {0x4, 0x9}}]}}, 0x2d) r0 = syz_usb_connect$midi(0x2, 0x0, 0x0, &(0x7f0000000740)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x86, 0x9, 0x5, 0xff, 0x8}, 0x10e, &(0x7f0000000280)={0x5, 0xf, 0x10e, 0x4, [@generic={0x95, 0x10, 0x4, "001c400df5f6fd65022aac39e2f3c483063277ec2b4351bdc1a18b038d93f3d5ac9bb281a368e26f80f5638713df601163fa061ca86519e474a781660295a974ac62c4ad7f7457a3e8f508346a87ba513f835d352ab62606477eafca9034455ea7754ab1727419ff7b51f6668a1981fb38581b50a8f7ad8e62b6551cb46184aba5110e7133085940179ad9073532c5894f45"}, @generic={0x7, 0x10, 0xb, "185a6ef2"}, @generic={0x6a, 0x10, 0x3, "fb84ba8306e1c126f3e802e1b5cda3503441dded868cced79168fd2140e90e34caced1988194fdc2e6b576dee461501f199ab0ea0831ef64a9ff6fc39ade91b5456d178862c8afb6e5662aa3524be71f6d5ef4dee74f0dad457e4b9f70aab7d784ce5b2a60922e"}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41e}}, {0xa5, &(0x7f0000000440)=@string={0xa5, 0x3, "18983d05dffb9db813ffac62d71f117ce2a1c5dca146164c99bf50675453f595ae95371534a9923ef8a7bf96d92a7b1d9757fd6f8bf70bae4819c9c28b743f92b4219650e9ec7c2a873d826b0453602e4a873ffc23b4f921ea62f05a672517259c803daa858229e198b318a2c5fda08c573131672ee67d25ab61d01c6729b36207b530a47a12bd7afa432812511319d692948056b0a51216448c13452701a18734c3c4"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc09}}, {0x49, &(0x7f0000000580)=@string={0x49, 0x3, "84f80f8e38f2644cb572705bf6a090861f2eabb371f706306f8b5b0ddce864bb1ffa19030c11c0a4885274da288b6dbc0de84bcfe75a10c376949b23ac9ace50d072eea638d779"}}, {0x47, &(0x7f0000000600)=@string={0x47, 0x3, "4702f632fe730869c5921627aee8b975142a69aad1807bac85d55f25ccf25fbec6d2252d2547bbaa5048c77c4e2f68c514b618a21523ecdafd29b1c7a87f6210d65d87b148"}}, {0x8b, &(0x7f0000000680)=@string={0x8b, 0x3, "09a7d63e7c5f276901bef104283b95cb3ae2e3b4a0bf7ea35d6eb0d74135cd5ed90915d64ce79cff78338859a5da7ec11f5b3117ca78a1f10b8fa46134a059bcf6fed8949d8ec11617aaa75307b0b45ffe189e3c2036101533c8e77ae2c9c2349e2c9fe41b1e7b4348418b96688d9222c6c8d63c3a7e8af9a72a2c748c9d93c079402353b05f71df1e"}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000011c0), 0x8) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001200)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001240)={'nicvf0\x00', 0x1}) syz_open_dev$vbi(&(0x7f0000001280), 0x1, 0x2) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x18c, &(0x7f00000012c0)={[{0x18, 0x4e00, "64b2f48a1033ef24ada1252efef11be322e24c769e4beec0"}, {0x54, 0x4e00, "0c2a9c7b1193dc5528e02851a81ca77e1fedccc9907e4a264ca714df7230a8eeefbdce88ac9d891acdb6d339455ec72580e3a182e30e7d155c8006d9b0664c61c2be36bbc006583c72ad3315428a1613dc5afa7f"}, {0x6e, 0x4e00, "251b376b5873b02fe9c1f00eaa4de8a650415381cbfcda3034979b529a453742051c9a5b89651e563498d8a395454c98f0e4c433a2815abba411fa9bf3680bc7e7cb13ea2a91752423858238e0471e5085e816d54ca4e4a04ebc9bca8cb4c78c5ea8aad2ce35690f720a5a691cb5"}, {0x53, 0x4e00, "61f7bf31f7da2bf4cf15b39d4b7fcd1e11bb965a5a13d41c6ebf83d5faeaf86d0c8e6ad4cf378c1c9d698cbbb96678bf7d20ec44c44a819d564780a0cca0edbdf259db0d5289e42af816e621ccf727aadf002e"}, {0x48, 0x4e00, "3953c3a30a647cfc6a6657f007ae6a88ad5715919f43989ee3f3b0cf462691aeff8d88f561b6fca9a5983ef72ecbb5376622c8b1cfbcd9737fcc443d8444b2c987421d6cbeabcb05"}]}) syz_usb_control_io$uac2(r0, &(0x7f0000001640)={0x14, &(0x7f0000001480)={0x40, 0x21, 0x92, {0x92, 0x6, "9288f1768609a1772914f9854ba5973059283071e58397264b25ad3043cfa58207bd397662679ed2eadaa56737bd1a825d4fb03272c70fb969ff4b069e34f4fbae281f0d2f74ff32b6d89173b5adf158947b90efb1cab0a30a98224f534630a98d1f484cabd0e38197fc6e3694625dc92a1207fa39c81f99c4178145b276f4947a498e70f1dd04d57fcdbcb51f374e1f"}}, &(0x7f0000001540)={0x0, 0x3, 0xf7, @string={0xf7, 0x3, "270745ecc859e5af28fdc384e883b7bfb44f00e849bce5a813b7d351f1bcec79aebcce4b1cfc5762c3d037c59d243b291b90b4eec489ba2143a469012626601dbefa59548513a99966656c0472a3ea9c8bac77949585f1063101ca5a9fcca176514c399efdd7a81ce97ef34ce4f6c5cf9c6c84dddd40022505abfffd42ef3ed848c8d733ea1a51c2be53ca459cb24784c2dd91a67f94d24b7b3bfdf5b7ec233853754820d281f6a98b3fe57e3780e5ca0e1aa9ffa0415022398f7e61cc7e54a507189577027181577ae094d9ef363400ac65a30b155f091b67305b3a03446cd12e09c3c9b54df31fab38a96e0fb355b6d593ac4e8b"}}}, &(0x7f0000001940)={0x44, &(0x7f0000001680)={0x20, 0x13, 0xc3, "218bdc211dacdf6846fae8dbd52313c453c5bae76ba1458258d75805f277438949ebe1b7c87313e8860add0e5a56066a7635c4dc7a784e079581463b7a82aabc5c54db827b14fd50f7f3e5501f7603dfc6507b30f2aac86eaea6583647f40107a8e1faed75f8b59b8978b1b45e41b9eaeb1d91ada6ef427a2cf2da6dec278598162a761c3730f0bbe266200ba10d95213c56ff2e58d606711c5188b91f06308de3974c60792c00f6689aee3f4eb2a369c6823fd49dbec99ede7d7ce19b6ead6913db84"}, &(0x7f0000001780)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000017c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001800)={0x20, 0x81, 0x3, "a97088"}, &(0x7f0000001840)={0x20, 0x82, 0x1, ':'}, &(0x7f0000001880)={0x20, 0x83, 0x1, "b7"}, &(0x7f00000018c0)={0x20, 0x84, 0x2, "b945"}, &(0x7f0000001900)={0x20, 0x85, 0x3, "371874"}}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000019c0)=r3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000001a00), 0x202400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001c00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0xcd721a0044ba43}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000081}, 0x4c0c4) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000001d80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x499, 0x101d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x5, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x1b}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x404, 0x5, 0x77, 0xd, 0xe7, 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x0, 0x1001}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x80, 0x3, 0xf9, 0x0, "02bdc5d16f8aeaf9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0xfc, 0x4, {0x7, 0x25, 0x1, 0xc, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xfa, 0x3, 0xa4, 0x3, "cf9c", 'r'}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xc, 0x7, 0x2, {0x7, 0x25, 0x1, 0xc, 0x0, 0x9548}}}}}}}}]}}, &(0x7f0000002340)={0xa, &(0x7f0000001e40)={0xa, 0x6, 0x201, 0x4, 0x5, 0x3, 0x8, 0xc}, 0x16, &(0x7f0000001e80)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xc, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0xf8, 0x5}]}, 0x7, [{0xce, &(0x7f0000001ec0)=@string={0xce, 0x3, "248683d0a4a1d2b16ad4a50274037484ce42f4340b3f32e920c2ff3f9ef300e1a958dbaa46960af375760a5de853d077fb1d208145ddbb37aa59a44c27fcfd1be7a4323478a1ebd2cef7c1f21384806b97ad4232c6dac868226f56cd10ef4acf8b2268110efc98f6a79fe523de5b23dcd4c4622600ebe63a0abe8ef2de04f780e75d6786c05ee5f448326cd3944a8c425f4c99921069604d4eece53c679826c88cec35295f9e22bbc1fbc1fb7f29d1a43f4fecbc606d32f40b9a85e69e08bb0ee0a46a094a36405eaa9d0388"}}, {0xcc, &(0x7f0000001fc0)=@string={0xcc, 0x3, "90cfc6ed6e6fa8bdc43951b97001f24c3b00f483d5ef5111bfed9b10c51073a610c9046560a98073623fbf09e8b553a8013fc1350f662eacff8c7c679123ebf59fd2a51d0c2ff0688cc25f340afb60befef05b6d1b72ab88cacd188bcd3081fd5470d36414adcffe468590d4fd56f515fb806c1e6265f4bc384576f58f50a78c1e37fcbe0796204942b5bbd7a7e6dedeeca8c93758730a2c36fdb92c3f35859b57700a6bbaf3c43575ded7143bafb409bedf30eb3c523eed6547ab59703b14c69fa16a43852f547f332c"}}, {0x3b, &(0x7f00000020c0)=@string={0x3b, 0x3, "44c8fc5ec371d3961d4149a248ba50ee73956db199f63dd42b237073569cc12290d65a654defc64961845b4b7774c14d255dfd38399e7f96c2"}}, {0x37, &(0x7f0000002100)=@string={0x37, 0x3, "874bd8bd2cf77502e12946090f4ba191d6d1cd11a40dfbf270cd60e07a5522398aa66f8c00e5517bd61a8c29a3bbe9f8b39adec247"}}, {0x82, &(0x7f0000002140)=@string={0x82, 0x3, "106dbb8a70808f950fee133c099191849c1c5848abaab3d5a6ef1887b42fa021a2246ef580aec70d3a15c011a3ab82984bd9037c2086c32a0ac274035c6c4246f2620c8b62ea21752d10efdc9e91b901f5ee452abe4b2cb421d221b308694294cc2c769cac2c21dfde7702b6a175ad693a3fd3c72be4b3aad22a3f240ea774fd"}}, {0xd6, &(0x7f0000002200)=@string={0xd6, 0x3, "568b22b9f9d31a0c2f58fe4c40253f8bc301b96d86fbc2398cd9f505740f5a91938adb11dca67bae31ede47310474fcf7a7895e7f3fd5b503329d007f076394f6ff5a8aa8ce3bd961e93c8c92e8d6caeb0d9e79871503d61d5502f152b4576e4c75962be033a03ac1eae32c922dbf97ef4ddcaf65c4960528370e2b5121042c4a507933f49cc911390f61ae913f595ee2caa7d25dfb400ab793a4f48d66e12b9ac9dff11a7e49c5ca380b1e090bf7ebb91226d1d031926724c2cf5fb8a990c64d5d96c2c4983a913c39bee467edf741d86d51615"}}, {0x4, &(0x7f0000002300)=@lang_id={0x4, 0x3, 0x1407}}]}) 1.628360879s ago: executing program 3 (id=5810): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a070089b4c45a10000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/253], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='veth0_virt_wifi\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x73) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f00000001c0)=0x40008, 0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000340)={'nat\x00', 0x0, 0x4, 0xff, [0x8, 0x401, 0x8001, 0x5, 0x1, 0x6], 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000240)=""/255}, &(0x7f00000003c0)=0x78) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000000d060101000040000000000000000000050005006c6973743a73f103430735aa79cb33ac7b"], 0x34}}, 0x4000000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048881}, 0x8010) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x7, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x2, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 1.237773629s ago: executing program 2 (id=5811): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newqdisc={0x54, 0x12, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xb, 0x7ccb927cbfb630d1}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0xc1}}}, @qdisc_kind_options=@q_choke={{0xa}, {0xc, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x1000002}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004040}, 0x50) 1.14525006s ago: executing program 2 (id=5812): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/258], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRDESCSIZE(r1, 0x4004480d, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r2 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20000010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 941.08288ms ago: executing program 3 (id=5813): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4c090}, 0x40040) syz_usbip_server_init(0x1) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 654.460318ms ago: executing program 5 (id=5814): syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x28}, @l2cap_cid_signaling={{0x24}, [@l2cap_disconn_req={{0x6, 0xc2, 0x4}, {0xff, 0x7fff}}, @l2cap_conn_req={{0x2, 0xfe, 0x4}, {0xfff, 0x1000}}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x4}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x2, 0x2}, {0x2}}, @l2cap_conn_req={{0x2, 0x9, 0x4}, {0x4, 0x9}}]}}, 0x2d) r0 = syz_usb_connect$midi(0x2, 0x0, 0x0, &(0x7f0000000740)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x86, 0x9, 0x5, 0xff, 0x8}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41e}}, {0xa5, &(0x7f0000000440)=@string={0xa5, 0x3, "18983d05dffb9db813ffac62d71f117ce2a1c5dca146164c99bf50675453f595ae95371534a9923ef8a7bf96d92a7b1d9757fd6f8bf70bae4819c9c28b743f92b4219650e9ec7c2a873d826b0453602e4a873ffc23b4f921ea62f05a672517259c803daa858229e198b318a2c5fda08c573131672ee67d25ab61d01c6729b36207b530a47a12bd7afa432812511319d692948056b0a51216448c13452701a18734c3c4"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc09}}, {0x49, &(0x7f0000000580)=@string={0x49, 0x3, "84f80f8e38f2644cb572705bf6a090861f2eabb371f706306f8b5b0ddce864bb1ffa19030c11c0a4885274da288b6dbc0de84bcfe75a10c376949b23ac9ace50d072eea638d779"}}, {0x3d, &(0x7f0000000600)=@string={0x3d, 0x3, "4702f632fe730869c5921627aee8b975142a69aad1807bac85d55f25ccf25fbec6d2252d2547bbaa5048c77c4e2f68c514b618a21523ecdafd29b1"}}, {0x2, &(0x7f0000000680)=@string={0x2}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000011c0), 0x8) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001200)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001240)={'nicvf0\x00', 0x1}) syz_open_dev$vbi(&(0x7f0000001280), 0x1, 0x2) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x18c, &(0x7f00000012c0)={[{0x18, 0x4e00, "64b2f48a1033ef24ada1252efef11be322e24c769e4beec0"}, {0x54, 0x4e00, "0c2a9c7b1193dc5528e02851a81ca77e1fedccc9907e4a264ca714df7230a8eeefbdce88ac9d891acdb6d339455ec72580e3a182e30e7d155c8006d9b0664c61c2be36bbc006583c72ad3315428a1613dc5afa7f"}, {0x6e, 0x4e00, "251b376b5873b02fe9c1f00eaa4de8a650415381cbfcda3034979b529a453742051c9a5b89651e563498d8a395454c98f0e4c433a2815abba411fa9bf3680bc7e7cb13ea2a91752423858238e0471e5085e816d54ca4e4a04ebc9bca8cb4c78c5ea8aad2ce35690f720a5a691cb5"}, {0x53, 0x4e00, "61f7bf31f7da2bf4cf15b39d4b7fcd1e11bb965a5a13d41c6ebf83d5faeaf86d0c8e6ad4cf378c1c9d698cbbb96678bf7d20ec44c44a819d564780a0cca0edbdf259db0d5289e42af816e621ccf727aadf002e"}, {0x48, 0x4e00, "3953c3a30a647cfc6a6657f007ae6a88ad5715919f43989ee3f3b0cf462691aeff8d88f561b6fca9a5983ef72ecbb5376622c8b1cfbcd9737fcc443d8444b2c987421d6cbeabcb05"}]}) syz_usb_control_io$uac2(r0, &(0x7f0000001640)={0x14, &(0x7f0000001480)={0x40, 0x21, 0x92, {0x92, 0x6, "9288f1768609a1772914f9854ba5973059283071e58397264b25ad3043cfa58207bd397662679ed2eadaa56737bd1a825d4fb03272c70fb969ff4b069e34f4fbae281f0d2f74ff32b6d89173b5adf158947b90efb1cab0a30a98224f534630a98d1f484cabd0e38197fc6e3694625dc92a1207fa39c81f99c4178145b276f4947a498e70f1dd04d57fcdbcb51f374e1f"}}, &(0x7f0000001540)={0x0, 0x3, 0xf7, @string={0xf7, 0x3, "270745ecc859e5af28fdc384e883b7bfb44f00e849bce5a813b7d351f1bcec79aebcce4b1cfc5762c3d037c59d243b291b90b4eec489ba2143a469012626601dbefa59548513a99966656c0472a3ea9c8bac77949585f1063101ca5a9fcca176514c399efdd7a81ce97ef34ce4f6c5cf9c6c84dddd40022505abfffd42ef3ed848c8d733ea1a51c2be53ca459cb24784c2dd91a67f94d24b7b3bfdf5b7ec233853754820d281f6a98b3fe57e3780e5ca0e1aa9ffa0415022398f7e61cc7e54a507189577027181577ae094d9ef363400ac65a30b155f091b67305b3a03446cd12e09c3c9b54df31fab38a96e0fb355b6d593ac4e8b"}}}, &(0x7f0000001940)={0x44, &(0x7f0000001680)={0x20, 0x13, 0xc3, "218bdc211dacdf6846fae8dbd52313c453c5bae76ba1458258d75805f277438949ebe1b7c87313e8860add0e5a56066a7635c4dc7a784e079581463b7a82aabc5c54db827b14fd50f7f3e5501f7603dfc6507b30f2aac86eaea6583647f40107a8e1faed75f8b59b8978b1b45e41b9eaeb1d91ada6ef427a2cf2da6dec278598162a761c3730f0bbe266200ba10d95213c56ff2e58d606711c5188b91f06308de3974c60792c00f6689aee3f4eb2a369c6823fd49dbec99ede7d7ce19b6ead6913db84"}, &(0x7f0000001780)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000017c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001800)={0x20, 0x81, 0x3, "a97088"}, &(0x7f0000001840)={0x20, 0x82, 0x1, ':'}, &(0x7f0000001880)={0x20, 0x83, 0x1, "b7"}, &(0x7f00000018c0)={0x20, 0x84, 0x2, "b945"}, &(0x7f0000001900)={0x20, 0x85, 0x3, "371874"}}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000019c0)=r3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000001a00), 0x202400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001c00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0xcd721a0044ba43}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000081}, 0x4c0c4) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000001d80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x499, 0x101d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x5, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x1b}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x404, 0x5, 0x77, 0xd, 0xe7, 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x0, 0x1001}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x80, 0x3, 0xf9, 0x0, "02bdc5d16f8aeaf9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0xfc, 0x4, {0x7, 0x25, 0x1, 0xc, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xfa, 0x3, 0xa4, 0x3, "cf9c", 'r'}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xc, 0x7, 0x2, {0x7, 0x25, 0x1, 0xc, 0x0, 0x9548}}}}}}}}]}}, &(0x7f0000002340)={0xa, &(0x7f0000001e40)={0xa, 0x6, 0x201, 0x4, 0x5, 0x3, 0x8, 0xc}, 0x16, &(0x7f0000001e80)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xc, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0xf8, 0x5}]}, 0x7, [{0xce, &(0x7f0000001ec0)=@string={0xce, 0x3, "248683d0a4a1d2b16ad4a50274037484ce42f4340b3f32e920c2ff3f9ef300e1a958dbaa46960af375760a5de853d077fb1d208145ddbb37aa59a44c27fcfd1be7a4323478a1ebd2cef7c1f21384806b97ad4232c6dac868226f56cd10ef4acf8b2268110efc98f6a79fe523de5b23dcd4c4622600ebe63a0abe8ef2de04f780e75d6786c05ee5f448326cd3944a8c425f4c99921069604d4eece53c679826c88cec35295f9e22bbc1fbc1fb7f29d1a43f4fecbc606d32f40b9a85e69e08bb0ee0a46a094a36405eaa9d0388"}}, {0xcc, &(0x7f0000001fc0)=@string={0xcc, 0x3, "90cfc6ed6e6fa8bdc43951b97001f24c3b00f483d5ef5111bfed9b10c51073a610c9046560a98073623fbf09e8b553a8013fc1350f662eacff8c7c679123ebf59fd2a51d0c2ff0688cc25f340afb60befef05b6d1b72ab88cacd188bcd3081fd5470d36414adcffe468590d4fd56f515fb806c1e6265f4bc384576f58f50a78c1e37fcbe0796204942b5bbd7a7e6dedeeca8c93758730a2c36fdb92c3f35859b57700a6bbaf3c43575ded7143bafb409bedf30eb3c523eed6547ab59703b14c69fa16a43852f547f332c"}}, {0x3b, &(0x7f00000020c0)=@string={0x3b, 0x3, "44c8fc5ec371d3961d4149a248ba50ee73956db199f63dd42b237073569cc12290d65a654defc64961845b4b7774c14d255dfd38399e7f96c2"}}, {0x37, &(0x7f0000002100)=@string={0x37, 0x3, "874bd8bd2cf77502e12946090f4ba191d6d1cd11a40dfbf270cd60e07a5522398aa66f8c00e5517bd61a8c29a3bbe9f8b39adec247"}}, {0x82, &(0x7f0000002140)=@string={0x82, 0x3, "106dbb8a70808f950fee133c099191849c1c5848abaab3d5a6ef1887b42fa021a2246ef580aec70d3a15c011a3ab82984bd9037c2086c32a0ac274035c6c4246f2620c8b62ea21752d10efdc9e91b901f5ee452abe4b2cb421d221b308694294cc2c769cac2c21dfde7702b6a175ad693a3fd3c72be4b3aad22a3f240ea774fd"}}, {0xd6, &(0x7f0000002200)=@string={0xd6, 0x3, "568b22b9f9d31a0c2f58fe4c40253f8bc301b96d86fbc2398cd9f505740f5a91938adb11dca67bae31ede47310474fcf7a7895e7f3fd5b503329d007f076394f6ff5a8aa8ce3bd961e93c8c92e8d6caeb0d9e79871503d61d5502f152b4576e4c75962be033a03ac1eae32c922dbf97ef4ddcaf65c4960528370e2b5121042c4a507933f49cc911390f61ae913f595ee2caa7d25dfb400ab793a4f48d66e12b9ac9dff11a7e49c5ca380b1e090bf7ebb91226d1d031926724c2cf5fb8a990c64d5d96c2c4983a913c39bee467edf741d86d51615"}}, {0x4, &(0x7f0000002300)=@lang_id={0x4, 0x3, 0x1407}}]}) 588.326822ms ago: executing program 6 (id=5815): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xec}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x10, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='root/proc/sys\x00', 0x10000, 0x0) getdents64(r1, &(0x7f00000003c0)=""/31, 0x1f) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000880)=@file={0x0, 'root/proc/sys\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840)=[{{&(0x7f00000002c0)=@file={0x1, 'root/proc/sys\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000680)="fe6b6b38d4eb7a4b51426062fb40dd450090a28b85bf3d409b6e8bfaf5e118e68732a44356f9e6d682606567d62348df37044ef014f8375f0c291345fc2e638e95eb88904670347bb301e7437b558e66b793a54d14a838196af55d976aab4733c0111168a1ba42537d3b2b9181ce1acd5432d7ecca1bbd4473253f79dd568cc645df050a0316af75f4d7c1e4010000000000000000", 0x95}, {&(0x7f0000000580)="d382bfb27d8ac0d38184b65f2940d4b8ed3af80aa2e33fbff8ceaf61c829a2ea80e77036416c035846f5c48b07e29cc1ba477ff755c9777d2b4619f8ff2bec857eb30609d2b9fc1f7ae90ed7af84a915f9d4e572b78c0e7ace8cfa9279505308e6ddebe6fd9833b60546354aeb92cc12b57a4bf9e39a628ef17580ad0b06153f0e0bf58d53c93b2fe756ff683f294174dd277a646e786bf4ac2b", 0x9a}], 0x2, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x804}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x28c2, 0x0) fsopen(&(0x7f0000000200)='adfs\x00', 0x1) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) socket$netlink(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) syz_usb_connect$uac3(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000140392ad43f4000010203010902"], 0x0) cachestat(r4, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) 492.502911ms ago: executing program 2 (id=5816): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x200000) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0x2, 0x7, 0x7}, {0x6, 0xfd, 0xee}]}) write$ppp(r2, &(0x7f00000000c0)="4399b62f7e1008", 0x7) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x15) 312.477922ms ago: executing program 1 (id=5817): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r0 = syz_open_dev$loop(&(0x7f0000000400), 0x761, 0x6205c2) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048090}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xd, 0xc}, {0x0, 0xfff1}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4049080) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)='P', 0x1}], 0x1, 0xb62, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@ipv4_newnexthop={0x20, 0x5e, 0x200, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x1, 0x0, 0x36}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x200444c1}, 0x200000c0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000980)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x8001, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x7a, 0xd]}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x2000000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x806, 0x0) 245.074728ms ago: executing program 2 (id=5818): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001002cbd7000fedbdf25e00000010000000000000000000000000a0101000000000000000000000000004e22000bffff00000a00808000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}}, 0x80c4) 205.238327ms ago: executing program 2 (id=5819): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffd64) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000020000000a0000000000009c20010000000000000b00000000000000fdffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000001fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6000000000183a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 103.334977ms ago: executing program 1 (id=5820): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="06ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x129240, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x91, 0xb7, 0x77, 0x40, 0xeb1, 0x7007, 0x210, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xfa, 0x40, 0xf, "", [{{0x9, 0x4, 0xc6, 0x5, 0x0, 0xb, 0xbf, 0xd9, 0x6a}}]}}]}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a3000000000050001000600000005000500000000000500040000000000140007800800114000000000050015007a8537350d000300686173683a6d6163"], 0x5c}}, 0x4000) r4 = syz_open_dev$vim2m(0x0, 0x3ff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xbd, 0x8, 0x47425247, 0x41495043, [0x3fe], [0x7fff], 0x1}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r5) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000000980)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f00000004c0)={@initdev}, &(0x7f0000000500)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x7800, 0x10, 0xb, 0x5, {{0xd, 0x4, 0x3, 0x8, 0x34, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast2, @rand_addr=0x64010102, {[@end, @timestamp={0x44, 0x8, 0xe1, 0x0, 0xf, [0x6]}, @end, @timestamp={0x44, 0x14, 0x19, 0x0, 0x7, [0xffffffff, 0x3, 0x1, 0xfff]}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 2 (id=5821): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYRES64=r0, @ANYRES16], 0x84}}, 0x20008040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040084) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r12 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r14, 0x720, &(0x7f0000000100)={0x1, 0x8, 0x5, &(0x7f0000000080)={0x27, "7efe711cddad79a8b8935eaefb802b89a61a75b31a1a709cfc0a7c23e83417bcd4"}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) kernel console output (not intermixed with test programs): T5725] pwc: recv_control_msg error -71 req 02 val 2800 [ 1124.829735][ T5725] pwc: recv_control_msg error -71 req 04 val 1100 [ 1124.839149][ T5725] pwc: recv_control_msg error -71 req 04 val 1200 [ 1124.857486][ T5725] pwc: Registered as video103. [ 1124.877592][ T5725] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input236 [ 1124.903687][ T5725] usb 1-1: USB disconnect, device number 50 [ 1125.177151][ T5693] IPVS: starting estimator thread 0... [ 1125.189341][T22610] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1125.274260][T22611] IPVS: using max 38 ests per chain, 91200 per kthread [ 1125.334990][T22613] binder: 22612:22613 ioctl c0306201 0 returned -14 [ 1125.376171][ T5684] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1125.387791][ T5684] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input234 [ 1125.487912][ T5684] usb 4-1: USB disconnect, device number 18 [ 1125.494077][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1125.592759][ T5725] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1125.762444][ T5725] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1125.775032][ T5725] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.786138][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.802495][ T5693] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 1125.802783][ T5725] as10x_usb: device has been detected [ 1125.818962][ T5725] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1125.842542][ T29] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1125.851639][ T5725] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1125.873080][ T5725] as10x_usb: error during firmware upload part1 [ 1125.880006][ T5725] Registered device Abilis Systems DVB-Titan [ 1125.922101][ T188] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1125.963973][ T5693] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1125.973934][ T5693] usb 6-1: not running at top speed; connect to a high speed hub [ 1125.982706][ T5693] usb 6-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= a.1b [ 1125.996403][ T5693] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.021840][ T5693] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 1126.032565][ T29] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1126.034985][ T5693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.053354][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.057026][ T5693] usb 6-1: Product: syz [ 1126.068284][ T5693] usb 6-1: Manufacturer: syz [ 1126.074274][ T5693] usb 6-1: SerialNumber: syz [ 1126.077944][ T29] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1126.097520][ T29] usb 1-1: Manufacturer: syz [ 1126.097689][ T188] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1126.112938][ T29] usb 1-1: config 0 descriptor?? [ 1126.122755][ T188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.135509][ T29] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1126.137292][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.176381][ T188] usb 3-1: config 0 descriptor?? [ 1126.386548][ T188] usbhid 3-1:0.0: can't add hid device: -71 [ 1126.393001][ T188] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1126.401785][ T29] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1126.405387][ T188] usb 3-1: USB disconnect, device number 57 [ 1126.461188][ T5693] usb 6-1: USB disconnect, device number 76 [ 1126.561989][ T29] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 1126.575102][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.584066][ T29] usb 4-1: Product: syz [ 1126.588296][ T29] usb 4-1: Manufacturer: syz [ 1126.605607][ T29] usb 4-1: SerialNumber: syz [ 1126.627704][ T29] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 1126.659762][ T5725] usb 2-1: USB disconnect, device number 2 [ 1126.689800][ T5725] Unregistered device Abilis Systems DVB-Titan [ 1126.691140][ T5725] as10x_usb: device has been disconnected [ 1126.852860][ T188] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1127.033122][ T188] usb 3-1: Using ep0 maxpacket: 32 [ 1127.046149][ T188] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1127.064019][ T188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.096811][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.137875][ T188] usb 3-1: config 0 descriptor?? [ 1127.168250][ T188] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1127.191347][ T188] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1127.308817][T22645] FAULT_INJECTION: forcing a failure. [ 1127.308817][T22645] name failslab, interval 1, probability 0, space 0, times 0 [ 1127.323095][T22645] CPU: 1 UID: 0 PID: 22645 Comm: syz.5.5586 Tainted: G L syzkaller #0 PREEMPT(full) [ 1127.323123][T22645] Tainted: [L]=SOFTLOCKUP [ 1127.323130][T22645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1127.323140][T22645] Call Trace: [ 1127.323147][T22645] [ 1127.323155][T22645] dump_stack_lvl+0xe8/0x150 [ 1127.323182][T22645] should_fail_ex+0x40c/0x560 [ 1127.323207][T22645] should_failslab+0xa8/0x100 [ 1127.323231][T22645] __kmalloc_cache_noprof+0xa8/0x660 [ 1127.323253][T22645] ? vhost_task_create+0x123/0x380 [ 1127.323273][T22645] ? vhost_task_create+0x123/0x380 [ 1127.323300][T22645] vhost_task_create+0x123/0x380 [ 1127.323321][T22645] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1127.323346][T22645] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1127.323370][T22645] ? __pfx_vhost_task_create+0x10/0x10 [ 1127.323400][T22645] ? __pfx_vhost_task_fn+0x10/0x10 [ 1127.323427][T22645] ? __lock_acquire+0x683/0x2cf0 [ 1127.323449][T22645] ? __kasan_slab_free+0x5c/0x80 [ 1127.323466][T22645] ? kfree+0x1c5/0x640 [ 1127.323484][T22645] kvm_mmu_post_init_vm+0x147/0x2b0 [ 1127.323504][T22645] kvm_arch_vcpu_ioctl_run+0x103/0x2010 [ 1127.323533][T22645] ? look_up_lock_class+0x57/0x110 [ 1127.323555][T22645] ? register_lock_class+0x31/0x2e0 [ 1127.323574][T22645] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1127.323594][T22645] ? __lock_acquire+0x683/0x2cf0 [ 1127.323619][T22645] ? __mutex_lock+0x30d/0x1550 [ 1127.323642][T22645] ? kasan_quarantine_put+0xbb/0x1f0 [ 1127.323673][T22645] ? do_raw_write_lock+0x11d/0x260 [ 1127.323703][T22645] kvm_vcpu_ioctl+0xa61/0xfd0 [ 1127.323735][T22645] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1127.323750][T22645] ? hook_file_ioctl+0x1f0/0x5f0 [ 1127.323793][T22645] ? __fget_files+0x2a/0x420 [ 1127.323816][T22645] ? __fget_files+0x2a/0x420 [ 1127.323835][T22645] ? __fget_files+0x3a2/0x420 [ 1127.323853][T22645] ? __fget_files+0x2a/0x420 [ 1127.323876][T22645] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1127.323895][T22645] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1127.323912][T22645] __se_sys_ioctl+0xfc/0x170 [ 1127.323928][T22645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.323947][T22645] do_syscall_64+0x174/0x580 [ 1127.323967][T22645] ? trace_irq_disable+0x3b/0x140 [ 1127.323987][T22645] ? clear_bhb_loop+0x70/0xc0 [ 1127.324007][T22645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.324024][T22645] RIP: 0033:0x7f3a9639e0d9 [ 1127.324040][T22645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1127.324060][T22645] RSP: 002b:00007f3a972d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1127.324078][T22645] RAX: ffffffffffffffda RBX: 00007f3a96625fa0 RCX: 00007f3a9639e0d9 [ 1127.324091][T22645] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d [ 1127.324101][T22645] RBP: 00007f3a972d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1127.324112][T22645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1127.324121][T22645] R13: 00007f3a96626038 R14: 00007f3a96625fa0 R15: 00007f3a9674fa48 [ 1127.324150][T22645] [ 1127.531586][ T188] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1127.793251][ T188] usb 2-1: Using ep0 maxpacket: 8 [ 1127.799569][ T188] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 1127.838112][ T29] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 1127.847323][ T188] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 1127.865872][ T29] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 1127.875795][ T188] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.888448][ T188] usb 2-1: config 3 has no interface number 0 [ 1127.899355][ T188] usb 2-1: config 3 interface 45 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1127.903518][ T29] usb 4-1: USB disconnect, device number 19 [ 1127.923753][ T188] usb 2-1: config 3 interface 45 has no altsetting 0 [ 1127.967455][ T188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.985228][ T188] usb 2-1: Product: syz [ 1127.996922][ T188] usb 2-1: Manufacturer: syz [ 1128.015494][ T188] usb 2-1: SerialNumber: syz [ 1128.068676][ T30] audit: type=1326 audit(1786577692.052:16693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22656 comm="syz.5.5590" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9639e0d9 code=0x7ffc0000 [ 1128.094108][ T30] audit: type=1326 audit(1786577692.052:16694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22656 comm="syz.5.5590" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9639e0d9 code=0x7ffc0000 [ 1128.119528][ T30] audit: type=1326 audit(1786577692.052:16695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22656 comm="syz.5.5590" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f3a9639e0d9 code=0x7ffc0000 [ 1128.145065][ T30] audit: type=1326 audit(1786577692.052:16696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22656 comm="syz.5.5590" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9639e0d9 code=0x7ffc0000 [ 1128.170758][ T30] audit: type=1326 audit(1786577692.052:16697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22656 comm="syz.5.5590" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9639e0d9 code=0x7ffc0000 [ 1128.197241][ T30] audit: type=1326 audit(1786577692.052:16698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22656 comm="syz.5.5590" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a9639e0d9 code=0x7ffc0000 [ 1128.222563][ T30] audit: type=1326 audit(1786577692.052:16699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22656 comm="syz.5.5590" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9639e0d9 code=0x7ffc0000 [ 1128.251214][ T30] audit: type=1326 audit(1786577692.052:16700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22656 comm="syz.5.5590" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9639e0d9 code=0x7ffc0000 [ 1128.276507][ T30] audit: type=1326 audit(1786577692.052:16701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22656 comm="syz.5.5590" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3a9639cf47 code=0x7ffc0000 [ 1128.307353][ T30] audit: type=1326 audit(1786577692.052:16702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22656 comm="syz.5.5590" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3a9639f34a code=0x7ffc0000 [ 1128.627172][ T29] usb 1-1: USB disconnect, device number 51 [ 1128.730496][ T5725] usb 3-1: USB disconnect, device number 58 [ 1128.755287][ T5725] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1128.784615][ T5685] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1128.798541][ T188] usb 2-1: USB disconnect, device number 3 [ 1128.840154][T22669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5595'. [ 1128.940946][T22666] FAULT_INJECTION: forcing a failure. [ 1128.940946][T22666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1128.968768][T22666] CPU: 1 UID: 0 PID: 22666 Comm: syz.0.5593 Tainted: G L syzkaller #0 PREEMPT(full) [ 1128.968796][T22666] Tainted: [L]=SOFTLOCKUP [ 1128.968802][T22666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1128.968811][T22666] Call Trace: [ 1128.968819][T22666] [ 1128.968826][T22666] dump_stack_lvl+0xe8/0x150 [ 1128.968855][T22666] should_fail_ex+0x40c/0x560 [ 1128.968879][T22666] _copy_to_user+0x31/0xb0 [ 1128.968911][T22666] simple_read_from_buffer+0xe1/0x170 [ 1128.968938][T22666] proc_fail_nth_read+0x1bb/0x230 [ 1128.968964][T22666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1128.968987][T22666] ? rw_verify_area+0x24a/0x4c0 [ 1128.969012][T22666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1128.969032][T22666] vfs_read+0x213/0xa80 [ 1128.969056][T22666] ? __pfx___mutex_lock+0x10/0x10 [ 1128.969079][T22666] ? __pfx_vfs_read+0x10/0x10 [ 1128.969102][T22666] ? __fget_files+0x2a/0x420 [ 1128.969126][T22666] ? __fget_files+0x3a2/0x420 [ 1128.969144][T22666] ? __fget_files+0x2a/0x420 [ 1128.969171][T22666] ksys_read+0x150/0x270 [ 1128.969194][T22666] ? __pfx_ksys_read+0x10/0x10 [ 1128.969224][T22666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.969242][T22666] do_syscall_64+0x174/0x580 [ 1128.969263][T22666] ? trace_irq_disable+0x3b/0x140 [ 1128.969282][T22666] ? clear_bhb_loop+0x70/0xc0 [ 1128.969302][T22666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.969319][T22666] RIP: 0033:0x7f63e755e90e [ 1128.969334][T22666] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1128.969348][T22666] RSP: 002b:00007f63e84b4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1128.969366][T22666] RAX: ffffffffffffffda RBX: 00007f63e84b56c0 RCX: 00007f63e755e90e [ 1128.969378][T22666] RDX: 000000000000000f RSI: 00007f63e84b50a0 RDI: 0000000000000006 [ 1128.969389][T22666] RBP: 00007f63e84b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1128.969399][T22666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1128.969409][T22666] R13: 00007f63e7826038 R14: 00007f63e7825fa0 R15: 00007f63e794fa48 [ 1128.969438][T22666] [ 1129.502996][T22682] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1129.509565][T22682] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1129.521040][T22682] vhci_hcd vhci_hcd.0: Device attached [ 1129.762124][ T985] usb 37-1: new low-speed USB device number 13 using vhci_hcd [ 1129.782441][ T5725] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1129.922057][ T5684] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 1129.952370][ T5725] usb 3-1: Using ep0 maxpacket: 32 [ 1129.958692][ T5725] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1129.971163][ T5725] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1129.991222][ T5725] usb 3-1: config 0 has no interface number 0 [ 1130.001869][ T5725] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1130.031576][ T29] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1130.039345][ T5725] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1130.061949][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.070699][ T5725] usb 3-1: Product: syz [ 1130.081693][ T188] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1130.090488][ T5684] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 1130.113472][ T5684] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1130.128170][ T5684] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.169213][ T5684] usb 6-1: config 0 descriptor?? [ 1130.180885][ T5725] usb 3-1: Manufacturer: syz [ 1130.186788][ T29] usb 4-1: device descriptor read/64, error -71 [ 1130.226993][ T5725] usb 3-1: SerialNumber: syz [ 1130.253462][ T188] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1130.269289][ T5725] usb 3-1: config 0 descriptor?? [ 1130.276104][ T188] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.311285][ T188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.326105][ T188] usb 2-1: Product: syz [ 1130.330323][ T188] usb 2-1: Manufacturer: syz [ 1130.338576][ T188] usb 2-1: SerialNumber: syz [ 1130.358297][ T188] usb 2-1: config 0 descriptor?? [ 1130.386435][ T188] ims_pcu 2-1:0.0: Zero length descriptor [ 1130.414843][ T188] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 1130.431582][ T29] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1130.573345][ T29] usb 4-1: device descriptor read/64, error -71 [ 1130.599519][ T5684] ryos 0003:1E7D:3232.0096: unknown main item tag 0x0 [ 1130.634535][ T5684] ryos 0003:1E7D:3232.0096: unknown main item tag 0x0 [ 1130.670316][T17999] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1130.691965][T17999] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1130.692626][ T29] usb usb4-port1: attempt power cycle [ 1130.705078][T17999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1130.720331][T17999] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1130.730349][ T5684] ryos 0003:1E7D:3232.0096: unknown main item tag 0x3 [ 1130.738799][T17999] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1130.751868][ T5684] ryos 0003:1E7D:3232.0096: unknown main item tag 0x0 [ 1130.816238][ T5684] ryos 0003:1E7D:3232.0096: unknown main item tag 0x0 [ 1130.831469][ T5684] ryos 0003:1E7D:3232.0096: unknown main item tag 0x0 [ 1130.838451][ T5684] ryos 0003:1E7D:3232.0096: unknown main item tag 0x0 [ 1130.857109][ T5684] ryos 0003:1E7D:3232.0096: unknown main item tag 0x0 [ 1130.870935][ T5684] ryos 0003:1E7D:3232.0096: unknown main item tag 0x0 [ 1130.888076][ T5684] ryos 0003:1E7D:3232.0096: unknown main item tag 0x0 [ 1130.901822][ T5684] ryos 0003:1E7D:3232.0096: item fetching failed at offset 14/44 [ 1130.912022][ T5725] appletouch 3-1:0.85: Geyser mode initialized. [ 1130.933695][ T5684] ryos 0003:1E7D:3232.0096: parse failed [ 1130.947399][ T5684] ryos 0003:1E7D:3232.0096: probe with driver ryos failed with error -22 [ 1130.981327][ T5725] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input237 [ 1131.153940][ T29] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1131.173905][T22683] vhci_hcd: connection reset by peer [ 1131.176553][ T188] usb 3-1: USB disconnect, device number 59 [ 1131.195852][ T29] usb 4-1: device descriptor read/8, error -71 [ 1131.213473][T20142] vhci_hcd vhci_hcd.2: stop threads [ 1131.228617][T20142] vhci_hcd vhci_hcd.2: release socket [ 1131.247433][T20142] vhci_hcd vhci_hcd.2: disconnect device [ 1131.357118][ T5685] usb 6-1: USB disconnect, device number 77 [ 1131.389743][ T188] appletouch 3-1:0.85: input: appletouch disconnected [ 1131.462553][ T29] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1131.492527][ T29] usb 4-1: device descriptor read/8, error -71 [ 1131.535930][T22711] FAULT_INJECTION: forcing a failure. [ 1131.535930][T22711] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.580505][T22711] CPU: 0 UID: 0 PID: 22711 Comm: syz.5.5606 Tainted: G L syzkaller #0 PREEMPT(full) [ 1131.580535][T22711] Tainted: [L]=SOFTLOCKUP [ 1131.580540][T22711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1131.580549][T22711] Call Trace: [ 1131.580557][T22711] [ 1131.580564][T22711] dump_stack_lvl+0xe8/0x150 [ 1131.580593][T22711] should_fail_ex+0x40c/0x560 [ 1131.580614][T22711] ? io_alloc_cache_init+0x42/0x140 [ 1131.580635][T22711] should_failslab+0xa8/0x100 [ 1131.580660][T22711] __kvmalloc_node_noprof+0x176/0x860 [ 1131.580683][T22711] ? __kvmalloc_node_noprof+0x35c/0x860 [ 1131.580710][T22711] ? io_alloc_cache_init+0x42/0x140 [ 1131.580734][T22711] io_alloc_cache_init+0x42/0x140 [ 1131.580754][T22711] io_rsrc_cache_init+0x43/0x50 [ 1131.580771][T22711] io_ring_ctx_alloc+0x554/0xc40 [ 1131.580801][T22711] io_uring_create+0x50/0x990 [ 1131.580825][T22711] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1131.580846][T22711] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1131.580868][T22711] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1131.580902][T22711] ? __pfx_ksys_write+0x10/0x10 [ 1131.580932][T22711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.580949][T22711] do_syscall_64+0x174/0x580 [ 1131.580968][T22711] ? trace_irq_disable+0x3b/0x140 [ 1131.580985][T22711] ? clear_bhb_loop+0x70/0xc0 [ 1131.581004][T22711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.581020][T22711] RIP: 0033:0x7f3a9639e0d9 [ 1131.581037][T22711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.581049][T22711] RSP: 002b:00007f3a972d3ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1131.581066][T22711] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f3a9639e0d9 [ 1131.581075][T22711] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 0000000000000e26 [ 1131.581086][T22711] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 1131.581095][T22711] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 1131.581105][T22711] R13: 0000200000000890 R14: 00007f3a972d3fd8 R15: 0000000000000000 [ 1131.581128][T22711] [ 1131.642139][ T29] usb usb4-port1: unable to enumerate USB device [ 1132.091469][T14020] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 1132.244737][T14020] usb 3-1: not running at top speed; connect to a high speed hub [ 1132.255238][T14020] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=a7.d5 [ 1132.267076][T22701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.282854][T22701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.292408][T14020] usb 3-1: config 2 has an invalid interface number: 85 but max is 0 [ 1132.304272][T14020] usb 3-1: config 2 has no interface number 0 [ 1132.310463][T22701] bridge_slave_0: entered allmulticast mode [ 1132.318334][T14020] usb 3-1: config 2 interface 85 has no altsetting 0 [ 1132.329021][T22701] bridge_slave_0: entered promiscuous mode [ 1132.345421][T14020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.362824][T14020] usb 3-1: Product: syz [ 1132.371182][T14020] usb 3-1: Manufacturer: syz [ 1132.379272][T22701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.388495][T14020] usb 3-1: SerialNumber: syz [ 1132.395264][T22701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.412171][T22701] bridge_slave_1: entered allmulticast mode [ 1132.427730][T22701] bridge_slave_1: entered promiscuous mode [ 1132.502818][T22701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.519349][T22701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1132.582742][T22701] team0: Port device team_slave_0 added [ 1132.593883][T22701] team0: Port device team_slave_1 added [ 1132.618370][T22719] fuse: Bad value for 'fd' [ 1132.644946][T22701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1132.652992][T22701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.683056][T22701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1132.731745][T22701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1132.740019][T22701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.774938][T22701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1132.877251][T17999] Bluetooth: hci2: command tx timeout [ 1132.947866][ T5685] usb 2-1: USB disconnect, device number 4 [ 1132.978247][T22746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.053390][T22746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.153475][T22719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.164015][ T5685] hid-generic 0000:0000:0004.0097: hidraw0: HID v0.03 Device [syz1] on syz0 [ 1133.182024][T22719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.224563][T14020] gspca_main: conex-2.14.0 probing 0572:0041 [ 1133.291801][ T5693] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1133.348644][T22701] hsr_slave_0: entered promiscuous mode [ 1133.368294][T22701] hsr_slave_1: entered promiscuous mode [ 1133.377343][T22701] debugfs: 'hsr0' already exists in 'hsr' [ 1133.390073][T22758] fido_id[22758]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1133.405042][T22701] Cannot create hsr debugfs directory [ 1133.446508][T14020] usb 3-1: USB disconnect, device number 60 [ 1133.482193][ T5693] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1133.505283][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.527792][ T5693] usb 4-1: Product: syz [ 1133.542231][ T5693] usb 4-1: Manufacturer: syz [ 1133.549947][ T5693] usb 4-1: SerialNumber: syz [ 1133.582587][ T5684] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1133.602050][ T5725] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1133.602088][ T188] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1133.762842][ T5725] usb 2-1: Using ep0 maxpacket: 8 [ 1133.776909][ T5725] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 1133.801767][ T188] usb 6-1: Using ep0 maxpacket: 16 [ 1133.812692][ T5725] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 1133.822527][ T188] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1133.823757][ T5725] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.868088][ T188] usb 6-1: config 0 has no interfaces? [ 1133.876521][ T188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.887643][ T5725] usb 2-1: config 3 has no interface number 0 [ 1133.919546][ T5725] usb 2-1: config 3 interface 45 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1133.923231][ T188] usb 6-1: config 0 descriptor?? [ 1133.969918][ T5725] usb 2-1: config 3 interface 45 has no altsetting 0 [ 1133.999603][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.017668][ T5725] usb 2-1: Product: syz [ 1134.031694][ T5725] usb 2-1: Manufacturer: syz [ 1134.046864][ T5725] usb 2-1: SerialNumber: syz [ 1134.070126][ T10] usb 4-1: USB disconnect, device number 24 [ 1134.274119][ T5693] usb 6-1: USB disconnect, device number 78 [ 1134.310317][T22701] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1134.346822][T22701] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1134.383365][T22701] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1134.427315][T22701] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1134.469752][T22701] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1134.497950][T22701] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1134.518551][T22701] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1134.566948][T22701] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1134.590976][T22784] bond0: entered promiscuous mode [ 1134.602580][T22784] bond_slave_0: entered promiscuous mode [ 1134.608676][T22784] bond_slave_1: entered promiscuous mode [ 1134.616266][T22784] gretap0: entered promiscuous mode [ 1134.642177][T22784] dummy0: entered promiscuous mode [ 1134.671950][T22784] dummy0: left promiscuous mode [ 1134.677373][T22784] bond0: left promiscuous mode [ 1134.691902][T22784] bond_slave_0: left promiscuous mode [ 1134.713551][T22784] bond_slave_1: left promiscuous mode [ 1134.715931][ T5684] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1134.730081][T22784] gretap0: left promiscuous mode [ 1134.738623][ T5684] ath9k_htc: Failed to initialize the device [ 1134.750587][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 1134.871837][ T985] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1134.952029][T17999] Bluetooth: hci2: command tx timeout [ 1135.139928][T22701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.206329][T22701] 8021q: adding VLAN 0 to HW filter on device team0 [ 1135.222860][ T5685] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1135.247609][T22577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.254807][T22577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.303259][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.310460][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.385701][ T5725] usb 2-1: USB disconnect, device number 5 [ 1135.417392][ T29] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1135.427345][ T5685] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1135.446325][ T5685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.474335][ T5685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.489091][ T5685] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1135.519064][ T5685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.535473][ T5685] usb 4-1: config 0 descriptor?? [ 1135.595358][ T29] usb 3-1: not running at top speed; connect to a high speed hub [ 1135.605767][ T29] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=a7.d5 [ 1135.617343][T22701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.627671][ T29] usb 3-1: config 2 has an invalid interface number: 85 but max is 0 [ 1135.636774][ T29] usb 3-1: config 2 has no interface number 0 [ 1135.651764][ T29] usb 3-1: config 2 interface 85 has no altsetting 0 [ 1135.671305][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.685520][ T29] usb 3-1: Product: syz [ 1135.695451][ T29] usb 3-1: Manufacturer: syz [ 1135.711476][ T29] usb 3-1: SerialNumber: syz [ 1135.734142][T22701] veth0_vlan: entered promiscuous mode [ 1135.761019][T22701] veth1_vlan: entered promiscuous mode [ 1135.817445][T22701] veth0_macvtap: entered promiscuous mode [ 1135.827425][T22816] bond0: left promiscuous mode [ 1135.833197][T22816] bond_slave_0: left promiscuous mode [ 1135.839105][T22816] bond_slave_1: left promiscuous mode [ 1135.848255][T22816] gretap0: left promiscuous mode [ 1135.854882][T22816] dummy0: left promiscuous mode [ 1135.869527][T22701] veth1_macvtap: entered promiscuous mode [ 1135.893579][T22817] bond0: entered promiscuous mode [ 1135.905650][T22817] bond_slave_0: entered promiscuous mode [ 1135.914417][T22817] bond_slave_1: entered promiscuous mode [ 1135.926641][T22817] gretap0: entered promiscuous mode [ 1135.935761][T22817] dummy0: entered promiscuous mode [ 1135.936938][T22808] fuse: Bad value for 'fd' [ 1135.947919][T22817] debugfs: 'hsr0' already exists in 'hsr' [ 1135.956300][T22817] Cannot create hsr debugfs directory [ 1135.979499][ T5685] plantronics 0003:047F:FFFF.0098: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1136.100150][T22701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.177749][T22701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1136.203880][T22819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.256131][T22819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.285629][ T985] hid_parser_main: 104 callbacks suppressed [ 1136.285648][ T985] hid-generic 0000:0000:0004.0099: unknown main item tag 0x0 [ 1136.316001][ T985] hid-generic 0000:0000:0004.0099: unknown main item tag 0x0 [ 1136.328812][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.359833][ T985] hid-generic 0000:0000:0004.0099: unknown main item tag 0x0 [ 1136.390871][ T985] hid-generic 0000:0000:0004.0099: unknown main item tag 0x0 [ 1136.421146][ T985] hid-generic 0000:0000:0004.0099: unknown main item tag 0x0 [ 1136.432611][ T77] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.484733][ T985] hid-generic 0000:0000:0004.0099: unknown main item tag 0x0 [ 1136.503409][ T77] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.546278][ T985] hid-generic 0000:0000:0004.0099: unknown main item tag 0x0 [ 1136.595808][ T985] hid-generic 0000:0000:0004.0099: unknown main item tag 0x0 [ 1136.637719][ T5685] usb 4-1: USB disconnect, device number 25 [ 1136.666217][ T985] hid-generic 0000:0000:0004.0099: unknown main item tag 0x0 [ 1136.705551][ T985] hid-generic 0000:0000:0004.0099: unknown main item tag 0x0 [ 1136.719187][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.759856][ T985] hid-generic 0000:0000:0004.0099: hidraw0: HID v0.03 Device [syz1] on syz0 [ 1136.773950][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.823223][ T29] gspca_main: conex-2.14.0 probing 0572:0041 [ 1136.827812][ T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.994712][ T29] usb 3-1: USB disconnect, device number 61 [ 1137.001108][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.027441][T22829] fido_id[22829]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1137.032279][T17999] Bluetooth: hci2: command tx timeout [ 1137.051094][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.331564][ T5685] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1137.533132][ T50] Bluetooth: hci4: hardware error 0x00 [ 1137.681531][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1137.761933][ T5684] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1137.845659][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1137.894154][ T10] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 1137.912754][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.917132][T22846] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1137.930339][T22846] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1137.962043][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.962929][ T5684] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1137.975367][T22846] vhci_hcd vhci_hcd.0: Device attached [ 1138.004573][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1138.037347][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.046895][ T5684] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 1138.063234][T22848] vhci_hcd: connection closed [ 1138.064721][T20142] vhci_hcd vhci_hcd.1: stop threads [ 1138.069669][ T5684] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1138.098950][T20142] vhci_hcd vhci_hcd.1: release socket [ 1138.116887][ T10] usb 4-1: config 0 descriptor?? [ 1138.124268][T20142] vhci_hcd vhci_hcd.1: disconnect device [ 1138.145395][ T5684] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1138.161895][ T29] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1138.166377][ T5684] usb 7-1: Product: syz [ 1138.188484][ T5684] usb 7-1: Manufacturer: syz [ 1138.199791][T22850] fuse: Bad value for 'user_id' [ 1138.222932][ T5684] usb 7-1: SerialNumber: syz [ 1138.226907][T22850] fuse: Bad value for 'user_id' [ 1138.243493][ T5684] usb 7-1: config 0 descriptor?? [ 1138.280065][ T5684] usb 7-1: selecting invalid altsetting 0 [ 1138.503179][T22836] snd-usb-audio 7-1:0.0: Runtime PM usage count underflow! [ 1138.526583][ T5684] usb 7-1: USB disconnect, device number 2 [ 1138.648922][ T10] plantronics 0003:047F:FFFF.009A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1138.656427][T11762] udevd[11762]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1138.892788][T22866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5633'. [ 1139.111581][T17999] Bluetooth: hci2: command tx timeout [ 1139.438767][T22834] syz.3.5625 (22834): drop_caches: 2 [ 1139.469183][T17999] Bluetooth: hci3: hardware error 0x00 [ 1139.592516][ T50] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1139.615915][T22882] syzkaller0: entered promiscuous mode [ 1139.642239][T22882] syzkaller0: entered allmulticast mode [ 1139.656549][T22890] openvswitch: netlink: IP tunnel dst address not specified [ 1139.676062][T22882] tipc: Started in network mode [ 1139.690806][T22882] tipc: Node identity 4e055592e64f, cluster identity 4711 [ 1139.711159][T22892] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1139.717708][T22892] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1139.730825][T22882] tipc: Enabled bearer , priority 0 [ 1139.767165][T22882] tipc: Resetting bearer [ 1139.774670][T22895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5641'. [ 1139.792724][T22892] vhci_hcd vhci_hcd.0: Device attached [ 1139.806251][T22881] tipc: Resetting bearer [ 1139.858836][T22881] tipc: Disabling bearer [ 1139.991577][ T10] usb 4-1: reset high-speed USB device number 26 using dummy_hcd [ 1140.043354][ T5685] usb 37-1: new low-speed USB device number 14 using vhci_hcd [ 1140.051521][ T29] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1140.251521][ T29] usb 3-1: device descriptor read/64, error -71 [ 1140.492543][ T5693] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1140.504024][ T10] usb 4-1: device descriptor read/64, error -71 [ 1140.513625][ T29] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1140.578600][T22907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5646'. [ 1140.599594][T22905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5645'. [ 1140.661854][ T29] usb 3-1: device descriptor read/64, error -71 [ 1140.674094][ T5693] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1140.683964][ T5693] usb 7-1: not running at top speed; connect to a high speed hub [ 1140.694525][ T5693] usb 7-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1140.709410][ T5693] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 1140.737868][ T5693] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.747189][ T5693] usb 7-1: Product: syz [ 1140.752234][ T5693] usb 7-1: Manufacturer: syz [ 1140.758009][ T5693] usb 7-1: SerialNumber: syz [ 1140.766868][ T10] usb 4-1: reset high-speed USB device number 26 using dummy_hcd [ 1140.782134][ T29] usb usb3-port1: attempt power cycle [ 1140.831809][ T5692] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1140.963178][ T10] usb 4-1: device firmware changed [ 1140.972245][ T5684] usb 4-1: USB disconnect, device number 26 [ 1140.991622][ T5692] usb 2-1: Using ep0 maxpacket: 16 [ 1141.001964][ T5692] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1141.017618][ T5693] usb 7-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1141.026663][ T5693] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 1141.040884][ T5692] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1141.057663][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.067369][ T5693] usb 7-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1141.076217][ T5692] usb 2-1: Product: syz [ 1141.080425][ T5693] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 1141.089929][ T5692] usb 2-1: Manufacturer: syz [ 1141.094764][ T5692] usb 2-1: SerialNumber: syz [ 1141.102601][ T5693] usb 7-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1141.112373][ T985] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1141.120069][ T5692] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1141.122771][T22903] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1141.127455][ T5692] r8152-cfgselector 2-1: config 0 descriptor?? [ 1141.161766][ T29] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1141.171739][ T5684] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1141.193170][ T29] usb 3-1: device descriptor read/8, error -71 [ 1141.213355][ T5693] usb 7-1: USB disconnect, device number 3 [ 1141.274223][T11950] udevd[11950]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1141.295111][ T985] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1141.307531][ T985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.322065][ T985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.333826][ T985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.334484][ T5684] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1141.356132][ T985] usb 6-1: config 0 descriptor?? [ 1141.363226][ T5684] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.375138][ T5684] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1141.385845][ T5684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.395574][ T5692] r8152-cfgselector 2-1: Needed 2 retries to read version [ 1141.413777][ T5684] usb 4-1: config 0 descriptor?? [ 1141.452185][ T29] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1141.483635][ T29] usb 3-1: device descriptor read/8, error -71 [ 1141.592596][T17999] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1141.599818][ T29] usb usb3-port1: unable to enumerate USB device [ 1141.716326][ T5684] r8152-cfgselector 2-1: USB disconnect, device number 6 [ 1141.794765][ T985] hid_parser_main: 106 callbacks suppressed [ 1141.794785][ T985] cp2112 0003:10C4:EA90.009B: unknown main item tag 0x0 [ 1141.814742][ T985] cp2112 0003:10C4:EA90.009B: unknown main item tag 0x0 [ 1141.824471][ T985] cp2112 0003:10C4:EA90.009B: unknown main item tag 0x0 [ 1141.833269][ T985] cp2112 0003:10C4:EA90.009B: unknown main item tag 0x0 [ 1141.840398][ T985] cp2112 0003:10C4:EA90.009B: unknown main item tag 0x0 [ 1141.848632][ T985] cp2112 0003:10C4:EA90.009B: unknown main item tag 0x0 [ 1141.858874][ T985] cp2112 0003:10C4:EA90.009B: unknown main item tag 0x0 [ 1141.875709][ T985] cp2112 0003:10C4:EA90.009B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1141.989198][ T985] cp2112 0003:10C4:EA90.009B: Part Number: 0x00 Device Version: 0x00 [ 1142.231722][ T5725] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1142.407480][ T5725] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 1142.428380][ T5725] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1142.452583][ T5725] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.467720][ T5725] usb 7-1: config 0 descriptor?? [ 1142.546699][T22930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5655'. [ 1142.602324][ T985] cp2112 0003:10C4:EA90.009B: error reading lock byte: -71 [ 1142.617867][ T985] usb 6-1: USB disconnect, device number 80 [ 1142.703836][T22893] vhci_hcd: connection reset by peer [ 1142.746191][T22587] vhci_hcd vhci_hcd.2: stop threads [ 1142.760681][T22587] vhci_hcd vhci_hcd.2: release socket [ 1142.776680][T22587] vhci_hcd vhci_hcd.2: disconnect device [ 1142.885099][ T5725] ryos 0003:1E7D:3232.009C: unknown main item tag 0x0 [ 1142.897303][ T5725] ryos 0003:1E7D:3232.009C: unknown main item tag 0x0 [ 1142.913435][ T5725] ryos 0003:1E7D:3232.009C: unknown main item tag 0x3 [ 1142.920665][ T5725] ryos 0003:1E7D:3232.009C: item fetching failed at offset 14/44 [ 1142.930344][ T5725] ryos 0003:1E7D:3232.009C: parse failed [ 1142.931927][T22937] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 1142.937906][ T5725] ryos 0003:1E7D:3232.009C: probe with driver ryos failed with error -22 [ 1142.942590][T22937] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1142.943679][T22937] vhci_hcd vhci_hcd.0: Device attached [ 1143.001543][ T5692] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1143.152335][ T5692] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1143.170574][ T5692] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.210712][ T10] usb 4-1: USB disconnect, device number 27 [ 1143.222274][ T5692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1143.242263][ T5725] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1143.251505][ T5692] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1143.281318][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.290016][ T5692] usb 2-1: Product: syz [ 1143.295003][ T5692] usb 2-1: Manufacturer: syz [ 1143.299712][ T5692] usb 2-1: SerialNumber: syz [ 1143.314531][ T5692] usb 2-1: config 0 descriptor?? [ 1143.391562][ T5725] usb 3-1: device descriptor read/64, error -71 [ 1143.456336][T22949] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5661'. [ 1143.615626][ T985] usb 7-1: USB disconnect, device number 4 [ 1143.632668][ T5725] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1143.711811][ T5708] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1143.722095][ T10] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1143.791474][ T5725] usb 3-1: device descriptor read/64, error -71 [ 1143.892798][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1143.899944][ T10] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1143.915596][ T5708] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1143.916848][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.926106][ T5725] usb usb3-port1: attempt power cycle [ 1143.940124][ T10] usb 6-1: config 0 descriptor?? [ 1143.960410][ T5708] usb 4-1: config index 0 descriptor too short (expected 25183, got 144) [ 1143.970424][ T5708] usb 4-1: config 116 has too many interfaces: 121, using maximum allowed: 32 [ 1143.980905][ T5708] usb 4-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.993986][ T5708] usb 4-1: config 116 has 0 interfaces, different from the descriptor's value: 121 [ 1144.016916][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.026318][ T5708] usb 4-1: Product: syz [ 1144.032959][ T5708] usb 4-1: Manufacturer: syz [ 1144.037866][ T5708] usb 4-1: SerialNumber: syz [ 1144.223591][T22949] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5661'. [ 1144.277923][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1144.301655][ T5725] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1144.319870][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1144.364241][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1144.384266][ T10] usb 6-1: media controller created [ 1144.397867][ T5725] usb 3-1: device descriptor read/8, error -71 [ 1144.408379][T22964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1144.440501][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1144.515190][T22947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5659'. [ 1144.526839][T22949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.540875][T22947] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5659'. [ 1144.551210][T22949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.608770][ T10] az6027: usb out operation failed. (-71) [ 1144.623065][ T10] az6027: usb out operation failed. (-71) [ 1144.650745][ T10] stb0899_attach: Driver disabled by Kconfig [ 1144.661668][ T5725] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1144.681886][ T10] az6027: no front-end attached [ 1144.681886][ T10] [ 1144.698356][ T10] az6027: usb out operation failed. (-71) [ 1144.714312][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1144.740702][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input238 [ 1144.762735][ T5725] usb 3-1: device descriptor read/8, error -71 [ 1144.781261][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 1144.802789][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1144.844926][ T10] usb 6-1: USB disconnect, device number 81 [ 1144.888574][ T5725] usb usb3-port1: unable to enumerate USB device [ 1144.996206][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1145.481571][ T5693] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1145.602878][ T10] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1145.645744][ T5693] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1145.669523][ T5692] usb 2-1: USB disconnect, device number 7 [ 1145.679284][ T5693] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.709077][ T5693] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.747838][ T5693] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.776525][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1145.805315][ T5693] usb 7-1: config 0 descriptor?? [ 1145.811701][ T10] usb 6-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 1145.850409][ T10] usb 6-1: config 160 has an invalid interface number: 168 but max is 0 [ 1145.875223][ T10] usb 6-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.914759][ T10] usb 6-1: config 160 has no interface number 0 [ 1145.935823][ T10] usb 6-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 1145.953961][ T10] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 1024 [ 1145.973836][T22938] vhci_hcd: connection reset by peer [ 1145.976679][ T10] usb 6-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1145.992564][ T10] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x7 has an invalid bInterval 195, changing to 11 [ 1146.012485][ T43] vhci_hcd vhci_hcd.2: stop threads [ 1146.035171][ T43] vhci_hcd vhci_hcd.2: release socket [ 1146.035651][ T10] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1146.074516][ T43] vhci_hcd vhci_hcd.2: disconnect device [ 1146.078320][ T10] usb 6-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 1146.141737][ T5685] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1146.149492][ T10] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x89 has an invalid bInterval 206, changing to 11 [ 1146.178869][ T10] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 1024 [ 1146.207829][ T10] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0xC has invalid wMaxPacketSize 0 [ 1146.231331][ T10] usb 6-1: config 160 interface 168 altsetting 8 bulk endpoint 0xC has invalid maxpacket 0 [ 1146.251869][ T10] usb 6-1: config 160 interface 168 has no altsetting 0 [ 1146.259050][ T5693] cp2112 0003:10C4:EA90.009D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1146.284781][ T10] usb 6-1: string descriptor 0 read error: -22 [ 1146.291636][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.343707][T22970] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1146.356345][T22970] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1146.373387][ T10] io_edgeport 6-1:160.168: EPiC device converter detected [ 1146.392573][ T10] usb 6-1: detected [ 1146.448778][ T5693] cp2112 0003:10C4:EA90.009D: Part Number: 0x00 Device Version: 0x00 [ 1146.538598][ T5708] usb 4-1: USB disconnect, device number 28 [ 1146.584910][T22970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.616480][T22970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.713987][ T10] usb 6-1: error in getting manufacturer descriptor: -32 [ 1146.739561][ T5684] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1146.826352][ T10] usb 6-1: error in getting boot descriptor: -71 [ 1146.836772][ T10] usb 6-1: Device Reported 0 serial ports vs. core thinking we have 1 ports, email greg@kroah.com this information. [ 1146.889237][ T10] usb 6-1: Direct firmware load for edgeport/down.fw failed with error -2 [ 1146.913356][ T5684] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 1146.931771][ T10] usb 6-1: Falling back to sysfs fallback for: edgeport/down.fw [ 1146.940812][ T5684] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1146.949731][ T5684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.973865][ T5684] usb 3-1: config 0 descriptor?? [ 1147.066582][ T5693] cp2112 0003:10C4:EA90.009D: error reading lock byte: -71 [ 1147.096879][ T5693] usb 7-1: USB disconnect, device number 5 [ 1147.358376][T22988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5676'. [ 1147.403780][ T5684] hid_parser_main: 17 callbacks suppressed [ 1147.403801][ T5684] ryos 0003:1E7D:3232.009E: unknown main item tag 0x0 [ 1147.429780][ T5684] ryos 0003:1E7D:3232.009E: unknown main item tag 0x0 [ 1147.446354][ T5684] ryos 0003:1E7D:3232.009E: unknown main item tag 0x3 [ 1147.455131][ T5684] ryos 0003:1E7D:3232.009E: unknown main item tag 0x0 [ 1147.462015][ T5684] ryos 0003:1E7D:3232.009E: unknown main item tag 0x0 [ 1147.468992][ T5684] ryos 0003:1E7D:3232.009E: unknown main item tag 0x0 [ 1147.476092][ T5684] ryos 0003:1E7D:3232.009E: unknown main item tag 0x0 [ 1147.485011][ T5684] ryos 0003:1E7D:3232.009E: unknown main item tag 0x0 [ 1147.492013][ T5684] ryos 0003:1E7D:3232.009E: unknown main item tag 0x0 [ 1147.499062][ T5684] ryos 0003:1E7D:3232.009E: unknown main item tag 0x0 [ 1147.506115][ T5684] ryos 0003:1E7D:3232.009E: item fetching failed at offset 14/44 [ 1147.514789][ T5684] ryos 0003:1E7D:3232.009E: parse failed [ 1147.520525][ T5684] ryos 0003:1E7D:3232.009E: probe with driver ryos failed with error -22 [ 1147.611608][ T5693] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1147.781518][ T5693] usb 4-1: Using ep0 maxpacket: 16 [ 1147.787516][ T5693] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1147.798531][ T5693] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1147.824288][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.841481][ T5693] usb 4-1: Product: syz [ 1147.850696][ T5693] usb 4-1: Manufacturer: syz [ 1147.861636][ T5693] usb 4-1: SerialNumber: syz [ 1147.881058][ T5693] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1147.901486][ T5693] r8152-cfgselector 4-1: config 0 descriptor?? [ 1147.943817][T22994] program syz.6.5678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1148.115796][ T5693] r8152-cfgselector 4-1: Needed 2 retries to read version [ 1148.148899][ T5708] usb 3-1: USB disconnect, device number 70 [ 1148.406172][ T5725] r8152-cfgselector 4-1: USB disconnect, device number 29 [ 1148.521746][ T5708] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1148.605600][T23002] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5680'. [ 1148.692393][ T5708] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1148.705291][ T5708] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.721992][ T5708] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1148.728800][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.742643][ T5708] usb 3-1: config 0 descriptor?? [ 1149.061574][ T5693] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1149.164871][ T5708] ntrig 0003:1B96:0009.009F: item fetching failed at offset 5/7 [ 1149.186753][ T5708] ntrig 0003:1B96:0009.009F: parse failed [ 1149.203094][ T5708] ntrig 0003:1B96:0009.009F: probe with driver ntrig failed with error -22 [ 1149.232221][ T5693] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1149.252841][ T5693] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.275422][ T5693] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1149.301701][ T5693] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1149.326094][ T5693] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.334333][ T5693] usb 7-1: Product: syz [ 1149.338585][ T5693] usb 7-1: Manufacturer: syz [ 1149.343294][ T5693] usb 7-1: SerialNumber: syz [ 1149.357005][ T5693] usb 7-1: config 0 descriptor?? [ 1149.451495][ T5684] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1149.595672][ T5684] usb 4-1: device descriptor read/64, error -71 [ 1149.841684][ T5684] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1149.981653][ T5684] usb 4-1: device descriptor read/64, error -71 [ 1150.093160][ T5684] usb usb4-port1: attempt power cycle [ 1150.431748][ T5684] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1150.475894][ T5684] usb 4-1: device descriptor read/8, error -71 [ 1150.741671][ T5684] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1150.782639][ T5684] usb 4-1: device descriptor read/8, error -71 [ 1150.901797][ T5684] usb usb4-port1: unable to enumerate USB device [ 1151.284274][ T5685] usb 3-1: USB disconnect, device number 71 [ 1151.591584][ T188] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1151.719504][ T5693] usb 7-1: USB disconnect, device number 6 [ 1151.757768][ T188] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 1151.777940][ T188] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1151.785866][ T188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.805786][ T188] usb 2-1: config 0 descriptor?? [ 1151.888529][T23033] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5692'. [ 1152.186421][T23036] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1152.192970][T23036] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1152.203578][T23036] vhci_hcd vhci_hcd.0: Device attached [ 1152.219895][T23037] vhci_hcd: connection closed [ 1152.220293][T22587] vhci_hcd vhci_hcd.2: stop threads [ 1152.257154][T22587] vhci_hcd vhci_hcd.2: release socket [ 1152.265173][ T188] ryos 0003:1E7D:3232.00A0: hidraw0: USB HID v0.08 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0 [ 1152.316415][T22587] vhci_hcd vhci_hcd.2: disconnect device [ 1152.702358][ T5708] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1152.861947][ T5708] usb 4-1: Using ep0 maxpacket: 32 [ 1152.873932][ T5708] usb 4-1: New USB device found, idVendor=0499, idProduct=101d, bcdDevice= 0.40 [ 1152.905636][ T5708] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1152.944467][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.953548][ T5708] usb 4-1: Product: 졄廼燃雓䄝ꉉ멈镳녭퐽⌫獰鱖⋁횐敚䧆葡䭛瑷䷁崥㣽鸹陿 [ 1152.975641][ T5708] usb 4-1: Manufacturer: 쾐潮붨㧄륑Ű䳲;菴ᅑႛჅ꙳줐攄ꥠ玀㽢ি뗨ꡓ㼁㗁昏갮賿杼⎑튟ᶥ⼌棰슌㑟﬊빠浛爛被췊謘ネﶁ灔擓괔ﻏ蕆풐国ᗵ胻Ṭ敢보䔸傏貧㜞뻼阇䤠땂ힻ꣬㟉獘Ⰺﴶⲹ㔿鮅灗權㗄ᓗ꼻঴刼䝥妫㭰옔ꆟ䍪⾅罔ⰳ [ 1153.013950][T23046] netlink: 1010 bytes leftover after parsing attributes in process `syz.6.5696'. [ 1153.015826][ T5693] usb 2-1: USB disconnect, device number 8 [ 1153.023387][T23046] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 1153.026821][ T5708] usb 4-1: SerialNumber: 䮇뷘ɵ⧡ॆ䬏醡퇖ᇍඤ쵰啺㤢Ꚋ豯筑᫖⦌뮣骳싞 [ 1153.342108][ T5708] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1153.370533][ T5708] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1153.392815][ T5708] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1153.404736][ T5708] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1153.443137][ T5708] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1153.547660][T23056] netlink: 5212 bytes leftover after parsing attributes in process `syz.2.5695'. [ 1153.561901][ T5708] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1153.580853][T23056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5695'. [ 1153.598538][ T5708] usb 4-1: USB disconnect, device number 34 [ 1153.692919][T11949] udevd[11949]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1153.723201][ T5693] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1154.002189][ T5693] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1154.067343][ T5693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.169712][ T5693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.249147][ T5693] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1154.309754][ T5693] usb 2-1: Manufacturer: syz [ 1154.419108][ T5693] usb 2-1: config 0 descriptor?? [ 1154.617043][ T188] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1154.691617][T14020] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1154.794004][ T188] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1154.813922][ T188] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1154.840884][ T188] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1154.857602][ T188] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1154.869434][ T188] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1154.885243][T14020] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1154.902121][ T188] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1154.912352][ T188] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1154.923599][T14020] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.923753][ T188] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1154.940422][T14020] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1154.952871][T14020] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1154.953716][ T188] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1154.972540][T14020] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.975389][ T188] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1154.985827][T14020] usb 7-1: Product: syz [ 1154.994429][ T188] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1154.998208][T14020] usb 7-1: Manufacturer: syz [ 1155.016852][T14020] usb 7-1: SerialNumber: syz [ 1155.036602][T14020] usb 7-1: config 0 descriptor?? [ 1155.055228][ T188] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1155.064467][ T188] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1155.076065][ T188] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1155.086197][ T188] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1155.091593][ T5708] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1155.095647][ T188] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1155.115247][ T188] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1155.124218][ T188] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1155.134154][ T188] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1155.146261][ T188] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1155.154598][ T188] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1155.164132][ T188] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1155.175173][ T188] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1155.183771][ T188] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1155.193446][ T188] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1155.204513][ T188] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1155.217022][ T188] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1155.225700][ T188] usb 4-1: Product: syz [ 1155.229909][ T188] usb 4-1: Manufacturer: syz [ 1155.237400][ T188] usb 4-1: SerialNumber: syz [ 1155.245210][ T188] usb 4-1: config 0 descriptor?? [ 1155.255208][ T5708] usb 3-1: device descriptor read/64, error -71 [ 1155.265003][ T5693] input: syz Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00A1/input/input239 [ 1155.280434][ T188] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1155.303864][ T5693] input: syz Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00A1/input/input240 [ 1155.330388][ T5693] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00A1/input/input241 [ 1155.349120][ T5693] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00A1/input/input242 [ 1155.379027][ T5693] uclogic 0003:256C:006D.00A1: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 1155.502488][ T5708] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1155.536456][ T5725] usb 2-1: USB disconnect, device number 9 [ 1155.707966][ T5685] usb 4-1: USB disconnect, device number 35 [ 1155.716792][ T5708] usb 3-1: device descriptor read/64, error -71 [ 1155.718084][T23075] fido_id[23075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1155.783529][ T5685] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1155.832504][ T5708] usb usb3-port1: attempt power cycle [ 1156.195062][ T5708] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1156.223855][ T5708] usb 3-1: device descriptor read/8, error -71 [ 1156.481709][ T5708] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1156.522965][ T5708] usb 3-1: device descriptor read/8, error -71 [ 1156.602508][ T5725] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1156.633682][ T5708] usb usb3-port1: unable to enumerate USB device [ 1156.758287][ T5725] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1156.796034][ T5725] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.812917][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.822497][ T5725] usb 2-1: Product: syz [ 1156.827042][ T5725] usb 2-1: Manufacturer: syz [ 1156.833391][ T5725] usb 2-1: SerialNumber: syz [ 1156.845373][ T5725] usb 2-1: config 0 descriptor?? [ 1156.864057][ T5725] ims_pcu 2-1:0.0: Zero length descriptor [ 1156.869959][ T5725] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 1157.329723][T14020] usb 7-1: USB disconnect, device number 7 [ 1157.822234][T14020] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1157.993257][T14020] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1158.004305][T14020] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.016532][T14020] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.028504][T14020] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.041726][T14020] usb 7-1: config 0 descriptor?? [ 1158.217644][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1158.217680][ T30] audit: type=1326 audit(1786577722.202:16706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23093 comm="syz.2.5712" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1019e0d9 code=0x7ffc0000 [ 1158.252521][ T30] audit: type=1326 audit(1786577722.202:16707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23093 comm="syz.2.5712" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1019e0d9 code=0x7ffc0000 [ 1158.279656][ T30] audit: type=1326 audit(1786577722.242:16708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23093 comm="syz.2.5712" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1019e0d9 code=0x7ffc0000 [ 1158.306846][ T30] audit: type=1326 audit(1786577722.242:16709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23093 comm="syz.2.5712" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1019e0d9 code=0x7ffc0000 [ 1158.331941][ T30] audit: type=1326 audit(1786577722.242:16710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23093 comm="syz.2.5712" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c1019e0d9 code=0x7ffc0000 [ 1158.357542][ T30] audit: type=1326 audit(1786577722.242:16711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23093 comm="syz.2.5712" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1019e0d9 code=0x7ffc0000 [ 1158.382860][ T30] audit: type=1326 audit(1786577722.242:16712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23093 comm="syz.2.5712" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1019e0d9 code=0x7ffc0000 [ 1158.409797][ T30] audit: type=1326 audit(1786577722.242:16713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23093 comm="syz.2.5712" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1019e0d9 code=0x7ffc0000 [ 1158.443295][ T30] audit: type=1326 audit(1786577722.242:16714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23093 comm="syz.2.5712" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3c1019e0d9 code=0x7ffc0000 [ 1158.468792][ T30] audit: type=1326 audit(1786577722.242:16715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23093 comm="syz.2.5712" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1019e0d9 code=0x7ffc0000 [ 1158.509245][T14020] hid_parser_main: 47 callbacks suppressed [ 1158.509268][T14020] cp2112 0003:10C4:EA90.00A2: unknown main item tag 0x0 [ 1158.524282][T14020] cp2112 0003:10C4:EA90.00A2: unknown main item tag 0x0 [ 1158.537664][T14020] cp2112 0003:10C4:EA90.00A2: unknown main item tag 0x0 [ 1158.556060][T14020] cp2112 0003:10C4:EA90.00A2: unknown main item tag 0x0 [ 1158.564117][T14020] cp2112 0003:10C4:EA90.00A2: unknown main item tag 0x0 [ 1158.572124][T14020] cp2112 0003:10C4:EA90.00A2: unknown main item tag 0x0 [ 1158.580114][T14020] cp2112 0003:10C4:EA90.00A2: unknown main item tag 0x0 [ 1158.600293][T14020] cp2112 0003:10C4:EA90.00A2: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1158.707646][T14020] cp2112 0003:10C4:EA90.00A2: Part Number: 0x00 Device Version: 0x00 [ 1158.750633][T23101] FAULT_INJECTION: forcing a failure. [ 1158.750633][T23101] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.764313][T23101] CPU: 1 UID: 0 PID: 23101 Comm: syz.2.5714 Tainted: G L syzkaller #0 PREEMPT(full) [ 1158.764340][T23101] Tainted: [L]=SOFTLOCKUP [ 1158.764346][T23101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1158.764356][T23101] Call Trace: [ 1158.764365][T23101] [ 1158.764372][T23101] dump_stack_lvl+0xe8/0x150 [ 1158.764398][T23101] should_fail_ex+0x40c/0x560 [ 1158.764423][T23101] should_failslab+0xa8/0x100 [ 1158.764446][T23101] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1158.764464][T23101] ? local_lock_release+0x9c/0x160 [ 1158.764488][T23101] ? __alloc_skb+0x1d7/0x7a0 [ 1158.764502][T23101] ? __alloc_skb+0x1d7/0x7a0 [ 1158.764523][T23101] __alloc_skb+0x1d7/0x7a0 [ 1158.764542][T23101] _sctp_make_chunk+0x59/0x290 [ 1158.764564][T23101] sctp_make_datafrag_empty+0x12a/0x240 [ 1158.764581][T23101] ? __kasan_kmalloc+0x93/0xb0 [ 1158.764603][T23101] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 1158.764619][T23101] ? skb_put+0x112/0x210 [ 1158.764638][T23101] ? sctp_user_addto_chunk+0x9c/0x230 [ 1158.764661][T23101] sctp_datamsg_from_user+0x735/0xef0 [ 1158.764695][T23101] sctp_sendmsg_to_asoc+0x13cf/0x1880 [ 1158.764724][T23101] ? sctp_assoc_add_peer+0xd57/0x1430 [ 1158.764756][T23101] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1158.764777][T23101] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1158.764799][T23101] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1158.764820][T23101] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1158.764838][T23101] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1158.764858][T23101] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1158.764876][T23101] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1158.764906][T23101] sctp_sendmsg+0x1bb5/0x2d00 [ 1158.764939][T23101] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1158.764962][T23101] ? aa_sk_perm+0x6d5/0x900 [ 1158.764995][T23101] ? sock_rps_record_flow+0x19/0x350 [ 1158.765015][T23101] ? inet_sendmsg+0x298/0x320 [ 1158.765034][T23101] ? __pfx_inet_sendmsg+0x10/0x10 [ 1158.765049][T23101] sock_sendmsg_nosec+0x10e/0x180 [ 1158.765070][T23101] ____sys_sendmsg+0x54e/0x850 [ 1158.765091][T23101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1158.765113][T23101] ? import_iovec+0x73/0xa0 [ 1158.765136][T23101] ___sys_sendmsg+0x2a5/0x360 [ 1158.765152][T23101] ? __lock_acquire+0x683/0x2cf0 [ 1158.765174][T23101] ? __pfx____sys_sendmsg+0x10/0x10 [ 1158.765221][T23101] ? __fget_files+0x2a/0x420 [ 1158.765241][T23101] ? __fget_files+0x3a2/0x420 [ 1158.765269][T23101] __x64_sys_sendmsg+0x1b1/0x290 [ 1158.765287][T23101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1158.765318][T23101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.765335][T23101] do_syscall_64+0x174/0x580 [ 1158.765355][T23101] ? trace_irq_disable+0x3b/0x140 [ 1158.765374][T23101] ? clear_bhb_loop+0x70/0xc0 [ 1158.765393][T23101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.765408][T23101] RIP: 0033:0x7f3c1019e0d9 [ 1158.765424][T23101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1158.765438][T23101] RSP: 002b:00007f3c1108f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1158.765456][T23101] RAX: ffffffffffffffda RBX: 00007f3c10425fa0 RCX: 00007f3c1019e0d9 [ 1158.765469][T23101] RDX: 000000000000c851 RSI: 0000200000000700 RDI: 0000000000000003 [ 1158.765480][T23101] RBP: 00007f3c1108f090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.765490][T23101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1158.765500][T23101] R13: 00007f3c10426038 R14: 00007f3c10425fa0 R15: 00007f3c1054fa48 [ 1158.765528][T23101] [ 1159.220435][ T188] usb 2-1: USB disconnect, device number 10 [ 1159.321739][T14020] cp2112 0003:10C4:EA90.00A2: error setting SMBus config [ 1159.334680][T14020] cp2112 0003:10C4:EA90.00A2: probe with driver cp2112 failed with error -71 [ 1159.350644][T14020] usb 7-1: USB disconnect, device number 8 [ 1159.411647][ T5693] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1159.566772][ T5693] usb 3-1: not running at top speed; connect to a high speed hub [ 1159.574773][ T5693] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=a7.d5 [ 1159.584150][ T188] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1159.592874][ T5693] usb 3-1: config 2 has an invalid interface number: 85 but max is 0 [ 1159.603743][ T5693] usb 3-1: config 2 has no interface number 0 [ 1159.609850][ T5693] usb 3-1: config 2 interface 85 has no altsetting 0 [ 1159.618501][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.627461][ T5693] usb 3-1: Product: syz [ 1159.631849][ T5693] usb 3-1: Manufacturer: syz [ 1159.636586][ T5693] usb 3-1: SerialNumber: syz [ 1159.751755][ T188] usb 2-1: Using ep0 maxpacket: 32 [ 1159.758463][ T188] usb 2-1: New USB device found, idVendor=0499, idProduct=101d, bcdDevice= 0.40 [ 1159.768797][ T188] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1159.781120][ T188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.790359][ T188] usb 2-1: Product: 졄廼燃雓䄝ꉉ멈镳녭퐽⌫獰鱖⋁횐敚䧆葡䭛瑷䷁崥㣽鸹陿 [ 1159.801840][ T188] usb 2-1: Manufacturer: 쾐潮붨㧄륑Ű䳲;菴ᅑႛჅ꙳줐攄ꥠ玀㽢ি뗨ꡓ㼁㗁昏갮賿杼⎑튟ᶥ⼌棰슌㑟﬊빠浛爛被췊謘ネﶁ灔擓괔ﻏ蕆풐国ᗵ胻Ṭ敢보䔸傏貧㜞뻼阇䤠땂ힻ꣬㟉獘Ⰺﴶⲹ㔿鮅灗權㗄ᓗ꼻঴刼䝥妫㭰옔ꆟ䍪⾅罔ⰳ [ 1159.832583][ T188] usb 2-1: SerialNumber: 䮇뷘ɵ⧡ॆ䬏醡퇖ᇍඤ쵰啺㤢Ꚋ豯筑᫖⦌뮣骳싞 [ 1159.859148][T23104] fuse: Bad value for 'fd' [ 1159.981620][ T5725] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1160.030397][T23104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.039162][T23104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.054216][T23104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.064611][ T5707] hid-generic 0000:0000:0004.00A3: unknown main item tag 0x0 [ 1160.068006][T23104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.082764][ T188] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1160.095105][ T5707] hid-generic 0000:0000:0004.00A3: unknown main item tag 0x0 [ 1160.103061][ T188] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1160.113234][ T5707] hid-generic 0000:0000:0004.00A3: unknown main item tag 0x0 [ 1160.127256][ T188] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1160.136434][ T5707] hid-generic 0000:0000:0004.00A3: hidraw0: HID v0.03 Device [syz1] on syz0 [ 1160.146586][ T188] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1160.162491][ T5725] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1160.167766][ T188] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1160.178920][ T5684] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1160.185264][ T5725] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.194243][ T5693] gspca_main: conex-2.14.0 probing 0572:0041 [ 1160.210385][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1160.235828][ T5725] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1160.254540][T23113] fido_id[23113]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1160.271911][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.282806][ T5725] usb 4-1: Product: syz [ 1160.292238][ T5725] usb 4-1: Manufacturer: syz [ 1160.301774][ T5725] usb 4-1: SerialNumber: syz [ 1160.317328][ T5725] usb 4-1: config 0 descriptor?? [ 1160.340780][ T5693] usb 3-1: USB disconnect, device number 76 [ 1160.353649][ T5684] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 1160.367306][ T188] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1160.388982][ T5684] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1160.402839][ T188] usb 2-1: USB disconnect, device number 11 [ 1160.408844][ T5684] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.427471][ T5684] usb 7-1: config 0 descriptor?? [ 1160.481159][ T8622] udevd[8622]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1160.807683][T23122] IPVS: length: 197 != 8 [ 1160.845184][ T5684] ryos 0003:1E7D:3232.00A4: item fetching failed at offset 14/44 [ 1160.855256][ T5684] ryos 0003:1E7D:3232.00A4: parse failed [ 1160.861064][ T5684] ryos 0003:1E7D:3232.00A4: probe with driver ryos failed with error -22 [ 1160.932359][ T188] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1161.051762][T14020] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1161.104537][ T188] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1161.114944][ T188] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.126395][ T188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.158312][ T188] as10x_usb: device has been detected [ 1161.168415][ T188] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1161.200133][ T188] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1161.228738][ T188] as10x_usb: error during firmware upload part1 [ 1161.237335][ T188] Registered device Abilis Systems DVB-Titan [ 1161.242082][T14020] usb 3-1: Using ep0 maxpacket: 8 [ 1161.262277][T14020] usb 3-1: New USB device found, idVendor=056a, idProduct=dbdc, bcdDevice=a1.9d [ 1161.278305][T14020] usb 3-1: too many configurations: 203, using maximum allowed: 8 [ 1161.288397][T14020] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 114, changing to 10 [ 1161.300371][T14020] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1161.312337][T14020] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 114, changing to 10 [ 1161.324313][T14020] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1161.342896][T14020] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 114, changing to 10 [ 1161.375812][T14020] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1161.378580][T23132] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5726'. [ 1161.393068][T23132] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5726'. [ 1161.395160][T14020] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 114, changing to 10 [ 1161.414229][T14020] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1161.424285][T14020] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 114, changing to 10 [ 1161.448956][T14020] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1161.468545][T14020] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 114, changing to 10 [ 1161.490937][T14020] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1161.514723][T14020] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 114, changing to 10 [ 1161.536647][T14020] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1161.547687][T14020] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 114, changing to 10 [ 1161.566489][T14020] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1161.587823][T14020] usb 3-1: New USB device strings: Mfr=238, Product=153, SerialNumber=102 [ 1161.598695][ T5685] usb 7-1: USB disconnect, device number 9 [ 1161.628917][T14020] usb 3-1: Product: syz [ 1161.645097][T14020] usb 3-1: Manufacturer: syz [ 1161.655161][T14020] usb 3-1: SerialNumber: syz [ 1161.726451][T17999] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 1161.733806][T17999] Bluetooth: Wrong link type (-22) [ 1161.896511][T14020] usbhid 3-1:1.0: fixing wrong optional hid class descriptors count [ 1161.908259][T14020] usbhid 3-1:1.0: can't add hid device: -71 [ 1161.924688][T14020] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1161.939129][T14020] usb 3-1: USB disconnect, device number 77 [ 1162.018608][ T188] usb 2-1: USB disconnect, device number 12 [ 1162.054867][ T188] Unregistered device Abilis Systems DVB-Titan [ 1162.057139][ T188] as10x_usb: device has been disconnected [ 1162.072183][ T5685] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1162.231840][ T5685] usb 7-1: Using ep0 maxpacket: 32 [ 1162.239096][ T5685] usb 7-1: New USB device found, idVendor=0499, idProduct=101d, bcdDevice= 0.40 [ 1162.250012][ T5685] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1162.267111][ T5685] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.275251][ T5685] usb 7-1: Product: 졄廼燃雓䄝ꉉ멈镳녭퐽⌫獰鱖⋁횐敚䧆葡䭛瑷䷁崥㣽鸹陿 [ 1162.287049][ T5685] usb 7-1: Manufacturer: 쾐潮붨㧄륑Ű䳲;菴ᅑႛჅ꙳줐攄ꥠ玀㽢ি뗨ꡓ㼁㗁昏갮賿杼⎑튟ᶥ⼌棰슌㑟﬊빠浛爛被췊謘ネﶁ灔擓괔ﻏ蕆풐国ᗵ胻Ṭ敢보䔸傏貧㜞뻼阇䤠땂ힻ꣬㟉獘Ⰺﴶⲹ㔿鮅灗權㗄ᓗ꼻঴刼䝥妫㭰옔ꆟ䍪⾅罔ⰳ [ 1162.318367][ T5685] usb 7-1: SerialNumber: 䮇뷘ɵ⧡ॆ䬏醡퇖ᇍඤ쵰啺㤢Ꚋ豯筑᫖⦌뮣骳싞 [ 1162.693492][ T5685] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1162.714489][ T5725] usb 4-1: USB disconnect, device number 36 [ 1162.729542][ T5685] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1162.815057][ T8603] udevd[8603]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1162.890125][ T5685] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1162.905417][ T5685] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1162.949722][ T5685] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1162.961668][T14020] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1163.088442][ T5685] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1163.129582][ T5685] usb 7-1: USB disconnect, device number 10 [ 1163.145710][T14020] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1163.186548][T14020] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.230215][T11949] udevd[11949]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1163.251810][T14020] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.260248][ T5725] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1163.283295][ T188] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1163.307837][T14020] as10x_usb: device has been detected [ 1163.332399][T14020] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1163.396826][T14020] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1163.447086][T14020] as10x_usb: error during firmware upload part1 [ 1163.455458][ T5725] usb 4-1: Using ep0 maxpacket: 32 [ 1163.461353][ T5725] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1163.471548][ T188] usb 2-1: Using ep0 maxpacket: 32 [ 1163.471593][T14020] Registered device Abilis Systems DVB-Titan [ 1163.485543][ T5725] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1163.490808][ T188] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1163.496881][ T5725] usb 4-1: config 0 has no interface number 0 [ 1163.516729][ T5725] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1163.527885][ T5725] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1163.537699][ T188] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1163.537865][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.555446][ T5725] usb 4-1: Product: syz [ 1163.559711][ T5725] usb 4-1: Manufacturer: syz [ 1163.565690][ T5725] usb 4-1: SerialNumber: syz [ 1163.565798][ T188] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1163.586434][ T5725] usb 4-1: config 0 descriptor?? [ 1163.590535][ T188] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1163.602024][ T188] usb 2-1: config 14 has no interface number 0 [ 1163.608236][ T188] usb 2-1: config 14 has no interface number 1 [ 1163.618758][ T188] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1163.634482][ T188] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1163.647775][ T188] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1163.667629][ T188] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1163.680401][ T188] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1163.692720][ T188] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1163.706350][ T188] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1163.718443][ T188] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1163.733873][ T188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.744676][ T188] usb 2-1: Product: syz [ 1163.748890][ T188] usb 2-1: Manufacturer: syz [ 1163.755089][ T188] usb 2-1: SerialNumber: syz [ 1163.970253][T17999] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 1163.977026][T17999] Bluetooth: Wrong link type (-22) [ 1164.200450][ T5725] appletouch 4-1:0.85: Geyser mode initialized. [ 1164.201288][ T188] legousbtower 2-1:14.57: interrupt endpoints not found [ 1164.210827][ T5725] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input243 [ 1164.225703][T14020] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1164.238095][ T5708] usb 3-1: USB disconnect, device number 78 [ 1164.284796][ T5708] Unregistered device Abilis Systems DVB-Titan [ 1164.288240][ T5708] as10x_usb: device has been disconnected [ 1164.393769][T14020] usb 7-1: Using ep0 maxpacket: 32 [ 1164.401000][T14020] usb 7-1: New USB device found, idVendor=0499, idProduct=101d, bcdDevice= 0.40 [ 1164.417693][T14020] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1164.430101][ T5707] usb 4-1: USB disconnect, device number 37 [ 1164.431032][T14020] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.446782][T14020] usb 7-1: Product: 졄廼燃雓䄝ꉉ멈镳녭퐽⌫獰鱖⋁횐敚䧆葡䭛瑷䷁崥㣽鸹陿 [ 1164.463670][T14020] usb 7-1: Manufacturer: 쾐潮붨㧄륑Ű䳲;菴ᅑႛჅ꙳줐攄ꥠ玀㽢ি뗨ꡓ㼁㗁昏갮賿杼⎑튟ᶥ⼌棰슌㑟﬊빠浛爛被췊謘ネﶁ灔擓괔ﻏ蕆풐国ᗵ胻Ṭ敢보䔸傏貧㜞뻼阇䤠땂ힻ꣬㟉獘Ⰺﴶⲹ㔿鮅灗權㗄ᓗ꼻঴刼䝥妫㭰옔ꆟ䍪⾅罔ⰳ [ 1164.498519][ T5707] appletouch 4-1:0.85: input: appletouch disconnected [ 1164.504383][T14020] usb 7-1: SerialNumber: 䮇뷘ɵ⧡ॆ䬏醡퇖ᇍඤ쵰啺㤢Ꚋ豯筑᫖⦌뮣骳싞 [ 1164.603894][ T188] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 230.166 build 40507 [ 1164.615218][ T188] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1164.737932][T14020] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1164.747313][T14020] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1164.758566][T14020] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1164.766179][T14020] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1164.779853][T14020] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1164.887232][T23171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5742'. [ 1164.900441][T14020] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1164.917432][T23171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5742'. [ 1164.941622][T14020] usb 7-1: USB disconnect, device number 11 [ 1164.988186][T11949] udevd[11949]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1165.287330][T23185] usb 2-1: LEGO USB Tower reset control request failed [ 1165.302601][ T5707] usb 2-1: USB disconnect, device number 13 [ 1165.347165][ T5707] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 1165.403000][T17999] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 1165.410539][T17999] Bluetooth: Wrong link type (-22) [ 1165.461668][T14020] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1165.612745][T14020] usb 4-1: Using ep0 maxpacket: 8 [ 1165.626511][T14020] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1165.638969][T14020] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1165.651039][T14020] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1165.663981][T14020] usb 4-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 1165.678882][ T5708] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1165.686777][T14020] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1165.696036][T14020] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1165.709059][T14020] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1165.720618][T14020] usb 4-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 1165.735239][T14020] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1165.744243][T14020] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1165.757152][T14020] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1165.770196][T14020] usb 4-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 1165.783902][T14020] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1165.796330][T14020] usb 4-1: string descriptor 0 read error: -22 [ 1165.806659][T14020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.837282][T14020] adutux 4-1:168.0: interrupt endpoints not found [ 1165.844126][ T5708] usb 7-1: Using ep0 maxpacket: 32 [ 1165.856085][ T5708] usb 7-1: New USB device found, idVendor=0499, idProduct=101d, bcdDevice= 0.40 [ 1165.877360][ T5708] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1165.890083][ T5708] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.899204][ T5708] usb 7-1: Product: 졄廼燃雓䄝ꉉ멈镳녭퐽⌫獰鱖⋁횐敚䧆葡䭛瑷䷁崥㣽鸹陿 [ 1165.911299][ T5708] usb 7-1: Manufacturer: 쾐潮붨㧄륑Ű䳲;菴ᅑႛჅ꙳줐攄ꥠ玀㽢ি뗨ꡓ㼁㗁昏갮賿杼⎑튟ᶥ⼌棰슌㑟﬊빠浛爛被췊謘ネﶁ灔擓괔ﻏ蕆풐国ᗵ胻Ṭ敢보䔸傏貧㜞뻼阇䤠땂ힻ꣬㟉獘Ⰺﴶⲹ㔿鮅灗權㗄ᓗ꼻঴刼䝥妫㭰옔ꆟ䍪⾅罔ⰳ [ 1165.947113][ T5708] usb 7-1: SerialNumber: 䮇뷘ɵ⧡ॆ䬏醡퇖ᇍඤ쵰啺㤢Ꚋ豯筑᫖⦌뮣骳싞 [ 1166.060739][T23182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.076319][T23182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.113291][ T5685] usb 4-1: USB disconnect, device number 38 [ 1166.142212][ T188] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1166.178689][ T5708] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1166.186607][ T5708] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1166.198654][ T5708] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1166.206113][ T5708] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1166.217420][ T5708] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1166.249983][ T5708] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1166.263047][ T5708] usb 7-1: USB disconnect, device number 12 [ 1166.295078][ T9535] udevd[9535]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1166.319222][ T188] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1166.334797][ T188] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.345708][ T188] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1166.357204][ T188] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1166.367544][ T188] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1166.388260][ T188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.398683][ T188] usb 3-1: Product: syz [ 1166.403155][ T188] usb 3-1: Manufacturer: syz [ 1166.407827][ T188] usb 3-1: SerialNumber: syz [ 1166.411483][T14020] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1166.572316][T14020] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1166.583716][T14020] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.594088][T14020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.617084][T14020] as10x_usb: device has been detected [ 1166.624565][T14020] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1166.648894][T14020] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1166.666631][ T188] usb 3-1: Cannot retrieve CPort count: 0 [ 1166.674966][ T188] usb 3-1: Cannot retrieve CPort count: -5 [ 1166.690709][ T188] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -5 [ 1166.693239][T14020] as10x_usb: error during firmware upload part1 [ 1166.718671][T23201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5754'. [ 1166.735380][T14020] Registered device Abilis Systems DVB-Titan [ 1166.884515][T23209] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5758'. [ 1166.885312][T23207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5757'. [ 1167.051099][T14020] usb 3-1: USB disconnect, device number 79 [ 1167.346860][T23228] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5764'. [ 1167.438123][ T5708] usb 2-1: USB disconnect, device number 14 [ 1167.473470][ T5708] Unregistered device Abilis Systems DVB-Titan [ 1167.476849][ T5708] as10x_usb: device has been disconnected [ 1167.611687][T14020] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1167.781817][T14020] usb 4-1: Using ep0 maxpacket: 32 [ 1167.787766][T14020] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1167.798386][T14020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.811905][T14020] usb 4-1: config 0 descriptor?? [ 1167.941628][ T5708] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1168.021610][ T188] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1168.085649][T14020] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1168.104365][ T5708] usb 3-1: Using ep0 maxpacket: 32 [ 1168.114137][ T5708] usb 3-1: New USB device found, idVendor=0499, idProduct=101d, bcdDevice= 0.40 [ 1168.130829][T14020] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1168.169546][T23240] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5768'. [ 1168.184499][T14020] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1168.203957][T14020] usb 4-1: media controller created [ 1168.230477][ T5708] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1168.288333][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.317158][T23228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.330942][T14020] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1168.345000][ T5708] usb 3-1: Product: 졄廼燃雓䄝ꉉ멈镳녭퐽⌫獰鱖⋁횐敚䧆葡䭛瑷䷁崥㣽鸹陿 [ 1168.366056][T23228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.381306][ T5708] usb 3-1: Manufacturer: 쾐潮붨㧄륑Ű䳲;菴ᅑႛჅ꙳줐攄ꥠ玀㽢ি뗨ꡓ㼁㗁昏갮賿杼⎑튟ᶥ⼌棰슌㑟﬊빠浛爛被췊謘ネﶁ灔擓괔ﻏ蕆풐国ᗵ胻Ṭ敢보䔸傏貧㜞뻼阇䤠땂ힻ꣬㟉獘Ⰺﴶⲹ㔿鮅灗權㗄ᓗ꼻঴刼䝥妫㭰옔ꆟ䍪⾅罔ⰳ [ 1168.438228][ T188] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1168.456584][ T5708] usb 3-1: SerialNumber: 䮇뷘ɵ⧡ॆ䬏醡퇖ᇍඤ쵰啺㤢Ꚋ豯筑᫖⦌뮣骳싞 [ 1168.477540][ T188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.495091][ T188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.507497][ T188] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1168.554733][T14020] az6027: usb out operation failed. (-71) [ 1168.563836][ T188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.580637][T14020] az6027: usb out operation failed. (-71) [ 1168.609157][T14020] stb0899_attach: Driver disabled by Kconfig [ 1168.612439][ T188] usb 7-1: config 0 descriptor?? [ 1168.621586][T14020] az6027: no front-end attached [ 1168.621586][T14020] [ 1168.650377][T14020] az6027: usb out operation failed. (-71) [ 1168.691023][T14020] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1168.720465][T14020] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input244 [ 1168.782602][T14020] dvb-usb: schedule remote query interval to 400 msecs. [ 1168.806388][T23248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5770'. [ 1168.811751][ T5684] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1168.829013][T14020] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1168.853691][ T5708] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1168.878496][T14020] usb 4-1: USB disconnect, device number 39 [ 1168.890812][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.905363][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.917391][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.930770][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.943926][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.955582][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.967278][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.979038][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.990789][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.002453][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.052475][ T5708] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1169.783422][ T5708] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1170.244612][T23251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.349179][ T5708] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1170.889477][ C0] bridge0: topology change detected, propagating [ 1170.898450][ C0] bridge0: port 4(veth1) entered blocking state [ 1170.994406][ T188] plantronics 0003:047F:FFFF.00A5: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1171.016184][ T5684] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1171.049861][T23251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.055804][ T5684] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.101315][ T5684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.118446][ T5708] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1171.141820][ T5684] usb 2-1: Product: syz [ 1171.148600][T14020] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1171.157122][ T5684] usb 2-1: Manufacturer: syz [ 1171.157142][ T5684] usb 2-1: SerialNumber: syz [ 1171.187838][ T5684] usb 2-1: config 0 descriptor?? [ 1171.298506][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5773'. [ 1171.395793][ T9] usb 7-1: USB disconnect, device number 13 [ 1171.519238][ T5708] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1171.609252][ T5708] usb 3-1: USB disconnect, device number 80 [ 1171.706417][T11949] udevd[11949]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1171.881002][T23272] IPVS: length: 197 != 8 [ 1171.971529][ T5692] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1172.098372][ T5684] usb 2-1: can't set config #0, error -71 [ 1172.111722][ T5692] usb 4-1: device descriptor read/64, error -71 [ 1172.133569][ T5684] usb 2-1: USB disconnect, device number 15 [ 1172.288095][T23281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5782'. [ 1172.331254][T23281] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1172.337441][T23279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5779'. [ 1172.349794][T23283] netlink: 'syz.1.5782': attribute type 6 has an invalid length. [ 1172.377922][T23281] bond1 (unregistering): Released all slaves [ 1172.381688][ T5692] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1172.411464][ T188] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1172.522084][ T5692] usb 4-1: device descriptor read/64, error -71 [ 1172.572130][ T188] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1172.580276][T23285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5783'. [ 1172.591526][ T188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.611921][ T188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.633229][ T188] usb 7-1: config 0 descriptor?? [ 1172.654699][ T5692] usb usb4-port1: attempt power cycle [ 1172.778778][T23292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5786'. [ 1172.881865][T23296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5788'. [ 1173.001524][ T5692] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1173.022475][ T5692] usb 4-1: device descriptor read/8, error -71 [ 1173.073673][ T188] keytouch 0003:0926:3333.00A6: fixing up Keytouch IEC report descriptor [ 1173.085163][ T188] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.00A6/input/input245 [ 1173.161571][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1173.176605][ T188] keytouch 0003:0926:3333.00A6: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1173.262158][ T5692] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1173.284706][ T5692] usb 4-1: device descriptor read/8, error -71 [ 1173.289248][T23276] netlink: 112 bytes leftover after parsing attributes in process `syz.6.5780'. [ 1173.321846][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1173.329571][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1173.380407][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.402412][ T5692] usb usb4-port1: unable to enumerate USB device [ 1173.416075][ T9] usb 2-1: Product: syz [ 1173.424150][ T9] usb 2-1: Manufacturer: syz [ 1173.429258][ T9] usb 2-1: SerialNumber: syz [ 1173.457320][ T9] usb 2-1: config 0 descriptor?? [ 1173.665783][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1173.798940][ T5692] usb 7-1: USB disconnect, device number 14 [ 1174.080048][T14020] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1174.232271][T14020] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1174.247754][T14020] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.271883][T14020] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.293073][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1174.314236][T14020] as10x_usb: device has been detected [ 1174.330788][T14020] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1174.335848][ T9] usb 2-1: USB disconnect, device number 16 [ 1174.387184][T14020] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1174.438111][T14020] as10x_usb: error during firmware upload part1 Stopping sshd: stopped /usr/sbin/sshd (pid 5362) OK Stopping crond: stopped /usr/sbin/crond (pid 5350) OK [ 1174.463771][T14020] Registered device Abilis Systems DVB-Titan [ 1174.681547][ T5693] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1174.841511][ T5693] usb 7-1: device descriptor read/64, error -71 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5274) [ 1175.091863][ T5693] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1175.104431][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a1ce000: rx timeout, send abort [ 1175.116075][T14020] usb 4-1: new high-speed USB device number 44 using dummy_hcd Stopping network: [ 1175.241803][ T5693] usb 7-1: device descriptor read/64, error -71 [ 1175.292619][T14020] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 1175.327439][T14020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.338455][T14020] usb 4-1: Product: syz [ 1175.351565][T14020] usb 4-1: Manufacturer: syz [ 1175.369014][T14020] usb 4-1: SerialNumber: syz [ 1175.372130][ T5693] usb usb7-port1: attempt power cycle [ 1175.394242][ T9] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1175.432190][T14020] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 1175.562460][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 1175.594799][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1175.604644][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880223bb400: rx timeout, send abort [ 1175.615055][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a1ce000: abort rx timeout. Force session deactivation [ 1175.616723][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.670536][ T9] usb 2-1: config 0 descriptor?? [ 1175.722455][ T5693] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1175.752541][ T5693] usb 7-1: device descriptor read/8, error -71 [ 1176.001987][ T5693] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1176.052526][ T5693] usb 7-1: device descriptor read/8, error -71 [ 1176.096519][ T9] hid_parser_main: 111 callbacks suppressed [ 1176.098158][ T9] ryos 0003:1E7D:3232.00A7: unknown main item tag 0x0 [ 1176.112920][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880223bb400: abort rx timeout. Force session deactivation [ 1176.167085][ T9] ryos 0003:1E7D:3232.00A7: unknown main item tag 0x0 [ 1176.175289][ T5693] usb usb7-port1: unable to enumerate USB device [ 1176.210223][ T9] ryos 0003:1E7D:3232.00A7: unknown main item tag 0x3 OK [ 1176.256441][ T9] ryos 0003:1E7D:3232.00A7: unknown main item tag 0x0 [ 1176.281293][ T9] ryos 0003:1E7D:3232.00A7: unknown main item tag 0x0 [ 1176.290445][ T9] ryos 0003:1E7D:3232.00A7: unknown main item tag 0x0 [ 1176.309379][ T9] ryos 0003:1E7D:3232.00A7: unknown main item tag 0x0 [ 1176.335158][ T9] ryos 0003:1E7D:3232.00A7: unknown main item tag 0x0 [ 1176.357745][ T9] ryos 0003:1E7D:3232.00A7: unknown main item tag 0x0 [ 1176.377304][ T9] ryos 0003:1E7D:3232.00A7: unknown main item tag 0x0 [ 1176.394969][ T9] ryos 0003:1E7D:3232.00A7: item fetching failed at offset 14/44 [ 1176.407031][T23352] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5796'. [ 1176.418561][ T9] ryos 0003:1E7D:3232.00A7: parse failed Stopping iptables: [ 1176.429347][ T9] ryos 0003:1E7D:3232.00A7: probe with driver ryos failed with error -22 OK Stopping system message bus: [ 1176.880521][ T9] usb 2-1: USB disconnect, device number 17 [ 1177.272959][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.279372][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 done [ 1177.884841][T14020] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 1177.893758][ T5692] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1177.900290][T14020] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 1177.914083][ T9] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1177.959061][T14020] usb 4-1: USB disconnect, device number 44 [ 1178.061854][ T9] usb 7-1: device descriptor read/64, error -71 [ 1178.083201][ T5692] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 1178.103150][ T5692] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1178.116231][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.146035][ T5692] usb 2-1: config 0 descriptor?? [ 1178.311796][ T9] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 1178.461759][ T9] usb 7-1: device descriptor read/64, error -71 [ 1178.575928][T14020] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1178.579862][ T9] usb usb7-port1: attempt power cycle [ 1178.598151][ T5692] ryos 0003:1E7D:3232.00A8: item fetching failed at offset 14/44 [ 1178.643672][ T5692] ryos 0003:1E7D:3232.00A8: parse failed [ 1178.650662][ T5692] ryos 0003:1E7D:3232.00A8: probe with driver ryos failed with error -22 [ 1178.762262][T14020] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1178.775828][T14020] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1178.785353][T14020] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config Stopping klogd: [ 1178.798206][T14020] usb 4-1: config 220 has no interface number 2 [ 1178.810770][T14020] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1178.821565][ T5692] usb 2-1: USB disconnect, device number 18 [ 1178.825083][T14020] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1178.839696][T14020] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1178.855641][T14020] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1178.868361][T14020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.878758][T14020] usb 4-1: Product: syz [ 1178.883423][T14020] usb 4-1: Manufacturer: syz [ 1178.891253][T14020] usb 4-1: SerialNumber: syz OK [ 1178.981531][ T9] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1179.002015][ T9] usb 7-1: device descriptor read/8, error -71 Stopping acpid: [ 1179.138570][T14020] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1179.151428][T14020] uvcvideo 4-1:220.0: No valid video chain found. [ 1179.157951][T14020] usb 4-1: selecting invalid altsetting 0 [ 1179.198784][T14020] usb 4-1: selecting invalid altsetting 0 [ 1179.204751][T14020] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1179.215636][T14020] usb 4-1: USB disconnect, device number 45 [ 1179.241775][ T9] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 1179.264299][ T9] usb 7-1: device descriptor read/8, error -71 [ 1179.371981][ T9] usb usb7-port1: unable to enumerate USB device [ 1179.792317][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1179.877209][T23406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5810'. [ 1179.951524][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1179.965628][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=101d, bcdDevice= 0.40 [ 1179.995732][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1180.015816][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.017754][ T5685] usb 3-1: USB disconnect, device number 81 [ 1180.034287][ T9] usb 2-1: Product: 졄廼燃雓䄝ꉉ멈镳녭퐽⌫獰鱖⋁횐敚䧆葡䭛瑷䷁崥㣽鸹陿 [ 1180.058472][ T5685] Unregistered device Abilis Systems DVB-Titan [ 1180.060890][ T5685] as10x_usb: device has been disconnected [ 1180.082239][ T9] usb 2-1: Manufacturer: 쾐潮붨㧄륑Ű䳲;菴ᅑႛჅ꙳줐攄ꥠ玀㽢ি뗨ꡓ㼁㗁昏갮賿杼⎑튟ᶥ⼌棰슌㑟﬊빠浛爛被췊謘ネﶁ灔擓괔ﻏ蕆풐国ᗵ胻Ṭ敢보䔸傏貧㜞뻼阇䤠땂ힻ꣬㟉獘Ⰺﴶⲹ㔿鮅灗權㗄ᓗ꼻঴刼䝥妫㭰옔ꆟ䍪⾅罔ⰳ OK [ 1180.158960][ T9] usb 2-1: SerialNumber: 䮇뷘ɵ⧡ॆ䬏醡퇖ᇍඤ쵰啺㤢Ꚋ豯筑᫖⦌뮣骳싞 Stopping syslogd: [ 1180.368474][T23414] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1180.375121][T23414] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1180.384994][T23414] vhci_hcd vhci_hcd.0: Device attached stopped /sbin/syslogd (pid 4962) [ 1180.424251][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 OK [ 1180.433977][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1180.450952][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1180.464464][ T9] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1180.490808][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1180.619172][ T9] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1180.631849][ T5685] usb 39-1: new low-speed USB device number 8 using vhci_hcd [ 1180.641438][ T5725] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1180.660662][T17999] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1180.677141][ T9] usb 2-1: USB disconnect, device number 19 [ 1180.803995][ T5725] usb 4-1: Using ep0 maxpacket: 32 [ 1180.815055][ T5725] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1180.840334][ T5725] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.854789][ T5725] usb 4-1: config 0 has no interfaces? [ 1180.870567][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.887057][ T5725] usb 4-1: Product: syz [ 1180.896525][ T5725] usb 4-1: Manufacturer: syz [ 1180.901750][ T5725] usb 4-1: SerialNumber: syz [ 1180.924029][ T5725] usb 4-1: config 0 descriptor?? umount: can't remount debugfs read-only [ 1181.028447][T23432] netlink: 324 bytes leftover after parsing attributes in process `syz.2.5818'. [ 1181.151627][T14020] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1181.289796][T23439] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5821'. [ 1181.322138][T14020] usb 7-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1181.345705][T14020] usb 7-1: config index 0 descriptor too short (expected 25183, got 144) [ 1181.361562][T14020] usb 7-1: config 116 has too many interfaces: 121, using maximum allowed: 32 [ 1181.372721][T14020] usb 7-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.384351][T14020] usb 7-1: config 116 has 0 interfaces, different from the descriptor's value: 121 [ 1181.465409][T14020] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.479137][T14020] usb 7-1: Product: syz [ 1181.483469][T14020] usb 7-1: Manufacturer: syz [ 1181.488269][T14020] usb 7-1: SerialNumber: syz [ 1181.551641][ T5725] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1181.714751][ T5725] usb 3-1: Using ep0 maxpacket: 32 [ 1181.731128][ T5725] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1181.750558][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.761735][ T5708] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1181.787524][ T5725] usb 3-1: config 0 descriptor?? umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 1182.019993][T14020] usb 7-1: USB disconnect, device number 23 [ 1182.076860][ T5725] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware Connection to 10.128.1.180 closed by remote host. [ 1182.125205][ T5692] usb 4-1: USB disconnect, device number 46 [ 1182.134552][T23415] vhci_hcd: connection reset by peer [ 1182.148628][ T5708] usb 2-1: device descriptor read/all, error -71 [ 1182.162995][ T5725] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1182.190120][ T77] vhci_hcd vhci_hcd.3: stop threads [ 1182.229921][ T5725] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1182.239925][ T77] vhci_hcd vhci_hcd.3: release socket [ 1182.275295][ T77] vhci_hcd vhci_hcd.3: disconnect device Sent SIGKILL to all processes Requesting system poweroff [ 1183.566209][ T77] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.730511][ T77] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.836585][ T77] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.930016][ T77] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.038169][ T77] bridge_slave_1: left allmulticast mode [ 1184.044528][ T77] bridge_slave_1: left promiscuous mode [ 1184.054038][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.062892][ T77] bridge_slave_0: left allmulticast mode [ 1184.068528][ T77] bridge_slave_0: left promiscuous mode [ 1184.075224][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.295358][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1184.309113][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1184.323731][ T77] bond0 (unregistering): Released all slaves [ 1184.337169][ T77] bond1 (unregistering): Released all slaves [ 1184.353976][ T77] bond2 (unregistering): (slave veth3): Releasing active interface [ 1184.364557][ T77] bond2 (unregistering): Released all slaves [ 1184.378853][ T77] bond3 (unregistering): (slave lo): Releasing backup interface [ 1184.388000][ T77] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1184.401153][ T77] bond3 (unregistering): Released all slaves [ 1184.417643][ T77] bond4 (unregistering): (slave veth5): Releasing active interface [ 1184.428090][ T77] bond4 (unregistering): Released all slaves [ 1184.443565][ T77] bond5 (unregistering): (slave veth7): Releasing active interface [ 1184.455077][ T77] bond5 (unregistering): Released all slaves [ 1184.486222][ T77] bond6 (unregistering): (slave veth9): Releasing active interface [ 1184.492569][T23443] smc: removing smcd device lo [ 1184.503368][ T10] usb 6-1: Failed to load image "edgeport/down.fw" err -2 [ 1184.503908][ T5725] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1184.517249][ T10] usb 6-1: Direct firmware load for edgeport/boot.fw failed with error -2 [ 1184.539729][ T5725] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1184.547408][ T10] usb 6-1: Falling back to sysfs fallback for: edgeport/boot.fw [ 1184.550435][ T77] bond6 (unregistering): Released all slaves [ 1184.587786][ T10] ------------[ cut here ]------------ [ 1184.593566][ T10] ret [ 1184.593595][ T10] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x755/0xa40, CPU#0: kworker/0:1/10 [ 1184.609091][ T10] Modules linked in: [ 1184.613995][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1184.616985][ T5725] usb 3-1: USB disconnect, device number 82 [ 1184.625083][ T10] Tainted: [L]=SOFTLOCKUP [ 1184.635761][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1184.646117][ T10] Workqueue: usb_hub_wq hub_event [ 1184.651210][ T10] RIP: 0010:firmware_fallback_sysfs+0x755/0xa40 [ 1184.657530][ T10] Code: 9b fb e9 48 fc ff ff e8 99 e1 9b fb c6 05 55 aa 15 0a 01 48 c7 c7 40 ea 75 8c e8 96 99 fc fa e9 70 fc ff ff e8 7c e1 9b fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 40 eb 75 8c 4c 89 e2 e8 86 12 01 fb e9 [ 1184.677268][ T10] RSP: 0018:ffffc900000f6920 EFLAGS: 00010287 [ 1184.683453][ T10] RAX: ffffffff862b1fe4 RBX: dffffc0000000000 RCX: 0000000000100000 [ 1184.691687][ T10] RDX: ffffc9001a0fb000 RSI: 00000000000faab6 RDI: 00000000000faab7 [ 1184.699678][ T10] RBP: 0000000000000001 R08: ffffffff90574837 R09: 1ffffffff20ae906 [ 1184.708137][ T10] R10: dffffc0000000000 R11: fffffbfff20ae907 R12: ffffffff8cab0160 [ 1184.716781][ T10] R13: 0000000000001770 R14: ffff88805077f0b0 R15: 00000000fffffff5 [ 1184.724964][ T10] FS: 0000000000000000(0000) GS:ffff888124f55000(0000) knlGS:0000000000000000 [ 1184.734040][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1184.740634][ T10] CR2: 0000200000aed000 CR3: 0000000036410000 CR4: 00000000003526f0 [ 1184.748658][ T10] Call Trace: [ 1184.752065][ T10] [ 1184.755089][ T10] ? kfree+0x1c5/0x640 [ 1184.759153][ T10] _request_firmware+0x1049/0x1780 [ 1184.764335][ T10] ? __pfx__request_firmware+0x10/0x10 [ 1184.769810][ T10] ? kfree+0x1c5/0x640 [ 1184.774043][ T10] ? rom_read+0x19e/0x1c0 [ 1184.778376][ T10] request_firmware+0x36/0x50 [ 1184.783086][ T10] edge_startup+0x262b/0x6730 [ 1184.787771][ T10] ? __pfx_edge_startup+0x10/0x10 [ 1184.792941][ T10] ? __kmalloc_noprof+0x1ad/0x720 [ 1184.798088][ T10] ? setup_port_interrupt_in+0x143/0x560 [ 1184.803803][ T10] ? __pfx_edge_interrupt_callback+0x10/0x10 [ 1184.810298][ T10] usb_serial_probe+0x2523/0x2e50 [ 1184.815722][ T10] ? __pfx_edge_bulk_out_data_callback+0x10/0x10 [ 1184.822366][ T10] ? __pfx_edge_bulk_out_data_callback+0x10/0x10 [ 1184.828760][ T10] usb_probe_interface+0x653/0xc60 [ 1184.834066][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 1184.839735][ T10] really_probe+0x254/0xae0 [ 1184.844307][ T10] __driver_probe_device+0x1e8/0x360 [ 1184.849609][ T10] driver_probe_device+0x4f/0x240 [ 1184.854683][ T10] __device_attach_driver+0x270/0x410 [ 1184.860046][ T10] bus_for_each_drv+0x258/0x2f0 [ 1184.864979][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 1184.870886][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1184.876615][ T10] ? lockdep_hardirqs_on+0x7a/0x110 [ 1184.882328][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1184.888156][ T10] __device_attach+0x2c4/0x450 [ 1184.893111][ T10] ? __pfx___device_attach+0x10/0x10 [ 1184.898419][ T10] ? do_raw_spin_unlock+0xf5/0x210 [ 1184.903604][ T10] ? _raw_spin_unlock+0x28/0x50 [ 1184.908454][ T10] device_initial_probe+0xa1/0xd0 [ 1184.914136][ T10] bus_probe_device+0x12a/0x220 [ 1184.919023][ T10] device_add+0x7d7/0xb80 [ 1184.923767][ T10] usb_set_configuration+0x1ad8/0x2180 [ 1184.929379][ T10] usb_generic_driver_probe+0x8d/0x150 [ 1184.934893][ T10] usb_probe_device+0x1c3/0x3b0 [ 1184.939766][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 1184.945261][ T10] really_probe+0x254/0xae0 [ 1184.949763][ T10] __driver_probe_device+0x1e8/0x360 [ 1184.955307][ T10] driver_probe_device+0x4f/0x240 [ 1184.960419][ T10] __device_attach_driver+0x270/0x410 [ 1184.965945][ T10] bus_for_each_drv+0x258/0x2f0 [ 1184.970795][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 1184.976732][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1184.982315][ T10] ? lockdep_hardirqs_on+0x7a/0x110 [ 1184.987542][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1184.993399][ T10] __device_attach+0x2c4/0x450 [ 1184.998161][ T10] ? __pfx___device_attach+0x10/0x10 [ 1185.003501][ T10] ? do_raw_spin_unlock+0xf5/0x210 [ 1185.008644][ T10] ? _raw_spin_unlock+0x28/0x50 [ 1185.013542][ T10] device_initial_probe+0xa1/0xd0 [ 1185.018897][ T10] bus_probe_device+0x12a/0x220 [ 1185.024181][ T10] device_add+0x7d7/0xb80 [ 1185.028537][ T10] usb_new_device+0x9aa/0x1690 [ 1185.033382][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 1185.038578][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 1185.043860][ T10] hub_event+0x28e8/0x4d30 [ 1185.048293][ T10] ? do_raw_spin_unlock+0xf5/0x210 [ 1185.053552][ T10] ? __pfx_hub_event+0x10/0x10 [ 1185.058352][ T10] ? process_scheduled_works+0xa20/0x14e0 [ 1185.064164][ T10] ? rcu_is_watching+0x15/0xb0 [ 1185.068970][ T10] ? process_scheduled_works+0xa20/0x14e0 [ 1185.074720][ T10] process_scheduled_works+0xa8e/0x14e0 [ 1185.080284][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 1185.086338][ T10] ? assign_work+0x3cf/0x5d0 [ 1185.090956][ T10] worker_thread+0xa47/0xfb0 [ 1185.095575][ T10] ? __kthread_parkme+0x71/0x1f0 [ 1185.100604][ T10] kthread+0x388/0x470 [ 1185.104709][ T10] ? __pfx_worker_thread+0x10/0x10 [ 1185.109821][ T10] ? __pfx_kthread+0x10/0x10 [ 1185.114560][ T10] ret_from_fork+0x514/0xb70 [ 1185.119495][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 1185.124987][ T10] ? __switch_to+0xc89/0x1420 [ 1185.129700][ T10] ? __pfx_kthread+0x10/0x10 [ 1185.134335][ T10] ret_from_fork_asm+0x1a/0x30 [ 1185.139139][ T10] [ 1185.142292][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1185.149574][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1185.160323][ T10] Tainted: [L]=SOFTLOCKUP [ 1185.164633][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1185.174699][ T10] Workqueue: usb_hub_wq hub_event [ 1185.179717][ T10] Call Trace: [ 1185.182981][ T10] [ 1185.185918][ T10] vpanic+0x56c/0xa60 [ 1185.189972][ T10] ? __pfx__printk+0x10/0x10 [ 1185.194555][ T10] ? __pfx_vpanic+0x10/0x10 [ 1185.199062][ T10] ? is_bpf_text_address+0x292/0x2b0 [ 1185.204341][ T10] ? is_bpf_text_address+0x26/0x2b0 [ 1185.209581][ T10] panic+0xc5/0xd0 [ 1185.213317][ T10] ? __pfx_panic+0x10/0x10 [ 1185.217816][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 1185.222748][ T10] __warn+0x315/0x4c0 [ 1185.226719][ T10] ? firmware_fallback_sysfs+0x755/0xa40 [ 1185.232339][ T10] ? firmware_fallback_sysfs+0x755/0xa40 [ 1185.237961][ T10] __report_bug+0x276/0x570 [ 1185.242456][ T10] ? firmware_fallback_sysfs+0x755/0xa40 [ 1185.248073][ T10] ? __pfx___report_bug+0x10/0x10 [ 1185.253089][ T10] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1185.258515][ T10] ? __up_read+0x29c/0x930 [ 1185.262946][ T10] ? firmware_fallback_sysfs+0x755/0xa40 [ 1185.268573][ T10] report_bug+0x16a/0x220 [ 1185.272890][ T10] ? firmware_fallback_sysfs+0x755/0xa40 [ 1185.278506][ T10] ? firmware_fallback_sysfs+0x757/0xa40 [ 1185.284142][ T10] handle_bug+0x9c/0x200 [ 1185.288377][ T10] exc_invalid_op+0x1a/0x50 [ 1185.292862][ T10] asm_exc_invalid_op+0x1a/0x20 [ 1185.297693][ T10] RIP: 0010:firmware_fallback_sysfs+0x755/0xa40 [ 1185.303927][ T10] Code: 9b fb e9 48 fc ff ff e8 99 e1 9b fb c6 05 55 aa 15 0a 01 48 c7 c7 40 ea 75 8c e8 96 99 fc fa e9 70 fc ff ff e8 7c e1 9b fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 40 eb 75 8c 4c 89 e2 e8 86 12 01 fb e9 [ 1185.323562][ T10] RSP: 0018:ffffc900000f6920 EFLAGS: 00010287 [ 1185.329619][ T10] RAX: ffffffff862b1fe4 RBX: dffffc0000000000 RCX: 0000000000100000 [ 1185.337573][ T10] RDX: ffffc9001a0fb000 RSI: 00000000000faab6 RDI: 00000000000faab7 [ 1185.345567][ T10] RBP: 0000000000000001 R08: ffffffff90574837 R09: 1ffffffff20ae906 [ 1185.353543][ T10] R10: dffffc0000000000 R11: fffffbfff20ae907 R12: ffffffff8cab0160 [ 1185.361527][ T10] R13: 0000000000001770 R14: ffff88805077f0b0 R15: 00000000fffffff5 [ 1185.369500][ T10] ? firmware_fallback_sysfs+0x754/0xa40 [ 1185.375144][ T10] ? kfree+0x1c5/0x640 [ 1185.379235][ T10] _request_firmware+0x1049/0x1780 [ 1185.384700][ T10] ? __pfx__request_firmware+0x10/0x10 [ 1185.390233][ T10] ? kfree+0x1c5/0x640 [ 1185.394391][ T10] ? rom_read+0x19e/0x1c0 [ 1185.398728][ T10] request_firmware+0x36/0x50 [ 1185.403423][ T10] edge_startup+0x262b/0x6730 [ 1185.408526][ T10] ? __pfx_edge_startup+0x10/0x10 [ 1185.413587][ T10] ? __kmalloc_noprof+0x1ad/0x720 [ 1185.418712][ T10] ? setup_port_interrupt_in+0x143/0x560 [ 1185.424356][ T10] ? __pfx_edge_interrupt_callback+0x10/0x10 [ 1185.430354][ T10] usb_serial_probe+0x2523/0x2e50 [ 1185.435380][ T10] ? __pfx_edge_bulk_out_data_callback+0x10/0x10 [ 1185.441725][ T10] ? __pfx_edge_bulk_out_data_callback+0x10/0x10 [ 1185.448080][ T10] usb_probe_interface+0x653/0xc60 [ 1185.453218][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 1185.458874][ T10] really_probe+0x254/0xae0 [ 1185.463400][ T10] __driver_probe_device+0x1e8/0x360 [ 1185.468681][ T10] driver_probe_device+0x4f/0x240 [ 1185.473723][ T10] __device_attach_driver+0x270/0x410 [ 1185.479082][ T10] bus_for_each_drv+0x258/0x2f0 [ 1185.483919][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 1185.489821][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1185.495232][ T10] ? lockdep_hardirqs_on+0x7a/0x110 [ 1185.500424][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1185.506234][ T10] __device_attach+0x2c4/0x450 [ 1185.511039][ T10] ? __pfx___device_attach+0x10/0x10 [ 1185.516334][ T10] ? do_raw_spin_unlock+0xf5/0x210 [ 1185.521457][ T10] ? _raw_spin_unlock+0x28/0x50 [ 1185.526315][ T10] device_initial_probe+0xa1/0xd0 [ 1185.531357][ T10] bus_probe_device+0x12a/0x220 [ 1185.536233][ T10] device_add+0x7d7/0xb80 [ 1185.540581][ T10] usb_set_configuration+0x1ad8/0x2180 [ 1185.546053][ T10] usb_generic_driver_probe+0x8d/0x150 [ 1185.551597][ T10] usb_probe_device+0x1c3/0x3b0 [ 1185.556494][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 1185.561882][ T10] really_probe+0x254/0xae0 [ 1185.566395][ T10] __driver_probe_device+0x1e8/0x360 [ 1185.571755][ T10] driver_probe_device+0x4f/0x240 [ 1185.576782][ T10] __device_attach_driver+0x270/0x410 [ 1185.582168][ T10] bus_for_each_drv+0x258/0x2f0 [ 1185.587007][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 1185.592883][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1185.598268][ T10] ? lockdep_hardirqs_on+0x7a/0x110 [ 1185.603467][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1185.609550][ T10] __device_attach+0x2c4/0x450 [ 1185.614328][ T10] ? __pfx___device_attach+0x10/0x10 [ 1185.619604][ T10] ? do_raw_spin_unlock+0xf5/0x210 [ 1185.624704][ T10] ? _raw_spin_unlock+0x28/0x50 [ 1185.629551][ T10] device_initial_probe+0xa1/0xd0 [ 1185.634587][ T10] bus_probe_device+0x12a/0x220 [ 1185.639456][ T10] device_add+0x7d7/0xb80 [ 1185.643766][ T10] usb_new_device+0x9aa/0x1690 [ 1185.648524][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 1185.653718][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 1185.658936][ T10] hub_event+0x28e8/0x4d30 [ 1185.663347][ T10] ? do_raw_spin_unlock+0xf5/0x210 [ 1185.668470][ T10] ? __pfx_hub_event+0x10/0x10 [ 1185.673218][ T10] ? process_scheduled_works+0xa20/0x14e0 [ 1185.678926][ T10] ? rcu_is_watching+0x15/0xb0 [ 1185.683678][ T10] ? process_scheduled_works+0xa20/0x14e0 [ 1185.689382][ T10] process_scheduled_works+0xa8e/0x14e0 [ 1185.694959][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 1185.700937][ T10] ? assign_work+0x3cf/0x5d0 [ 1185.705527][ T10] worker_thread+0xa47/0xfb0 [ 1185.710153][ T10] ? __kthread_parkme+0x71/0x1f0 [ 1185.715118][ T10] kthread+0x388/0x470 [ 1185.719197][ T10] ? __pfx_worker_thread+0x10/0x10 [ 1185.724295][ T10] ? __pfx_kthread+0x10/0x10 [ 1185.728870][ T10] ret_from_fork+0x514/0xb70 [ 1185.733448][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 1185.738547][ T10] ? __switch_to+0xc89/0x1420 [ 1185.743234][ T10] ? __pfx_kthread+0x10/0x10 [ 1185.747810][ T10] ret_from_fork_asm+0x1a/0x30 [ 1185.752596][ T10] [ 1185.755921][ T10] Kernel Offset: disabled [ 1185.760242][ T10] Rebooting in 86400 seconds..