last executing test programs: 6m23.407518295s ago: executing program 4 (id=367): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000380)=""/187, 0xbb}], 0x3, &(0x7f0000000540)=""/246, 0xf6}, 0x7}, {{&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000940)=[{&(0x7f00000011c0)=""/160, 0xa0}, {&(0x7f0000000480)=""/46, 0x2e}, {&(0x7f0000000780)=""/63, 0x3f}, {&(0x7f00000007c0)=""/171, 0xab}, {&(0x7f0000000880)=""/74, 0x4a}, {&(0x7f0000000900)=""/46, 0x2e}], 0x6, &(0x7f00000009c0)=""/71, 0x47}, 0x10}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000a40)=""/7, 0x7}], 0x1}, 0x5}, {{&(0x7f0000000ac0)=@isdn, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000b40)=""/62, 0x3e}, {&(0x7f0000000b80)=""/222, 0xde}, {&(0x7f0000000c80)=""/15, 0xf}, {&(0x7f00000006c0)=""/25, 0x19}, {&(0x7f0000000d00)=""/79, 0x4f}, {&(0x7f0000000d80)=""/206, 0xce}, {&(0x7f0000000e80)=""/57, 0x39}, {&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000000f80)=""/12, 0xc}], 0x9, &(0x7f0000001080)}, 0x261}], 0x4, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x189000, 0x0) unshare(0x6a040000) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x234}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_open_dev$video(&(0x7f00000004c0), 0x7fffffff, 0x1) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000500)=@mmap={0x9, 0xd, 0x4, 0x2000, 0x3, {0x77359400}, {0x4, 0x1, 0x4, 0x80, 0xfd, 0x3, '\f69k'}, 0x2, 0x1, {}, 0x11a81d2f}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00'}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PPPIOCSCOMPRESS(r6, 0x4010744d) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 6m20.215783502s ago: executing program 4 (id=375): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getitimer(0x1, &(0x7f0000000080)) ioctl$GIO_UNISCRNMAP(r2, 0x4b48, &(0x7f0000003d40)=""/175) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000001c0)=0x2001) openat$vimc2(0xffffff9c, &(0x7f0000003d00), 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x3, 0xdddd0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg(r5, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0, 0x700}, {&(0x7f0000000480)="ed6ec87c55f245", 0x7}], 0x2}}], 0x1, 0x4008) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10021, &(0x7f0000000380)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x4}}, 0x80) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {0x6, 0x4}, {0x0, 0x6}, @result={0x401, 0x1}}, {0x0, 0x0, 0x3, 0x3, @tick=0xf27, {0x1, 0x81}, {0x0, 0x4}, @addr={0x2a, 0x5}}], 0x38) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m16.158728375s ago: executing program 4 (id=389): userfaultfd(0x80001) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x8000000000000000, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x3, 0x0, 0x0, 0xf, 0xfffffffffffffffe, 0xa6}, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x80}}, 0x4814) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r4, 0x1000000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6m14.016110817s ago: executing program 4 (id=392): r0 = userfaultfd(0x40800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fcntl$getown(r0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x701}) socket(0x6, 0x80805, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@int=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000100)='./file0\x00', 0x245) socket(0x11, 0xa, 0x0) memfd_create(&(0x7f0000000140)='\\/{[\x00', 0x2) socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000080)) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = epoll_create(0x80) r9 = socket$kcm(0x10, 0x2, 0x10) copy_file_range(r9, 0x0, r9, 0x0, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x40000000}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64) 6m10.525291815s ago: executing program 4 (id=401): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x28000, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x44000, 0xe) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000300)={0x8, r5, 0x1}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0x8e2c, 0xa400, 0xdc, &(0x7f0000000380)="9c2177a74a249cad191e9df6a7c8c4a09d1f0b7b5d19870d52429f5ae030ddde26a296b68a9eb158228bf4467730796bb6d137c443b99fec0d50fc992dea96f715f57f82fd9b8c5c751f4f0003ff73c211c3f845cebac4d1447979e16a4c11372a95d8423b1ea1dbfd53e48f566f93ac8f2d366809789b2adb50ac58efd52fd3ff2e670b869d531cc9750aa9d9471af1cf71a8646e82626e8bf69ba2bf368b55338cdaa520dfd269522c1a67accf8b247b9375c469116e242229e3496023505eb48e8e409b34ccf3bf81e06d37f2ab6cc306d460cf449275746223d6"}], 0x1}) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x42}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c040}, 0x400c010) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) futex(0x0, 0x3, 0x800001, 0x0, 0x0, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 6m10.068860147s ago: executing program 4 (id=402): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="ac00000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000840012800c0001006d6163766c616e007400028006000200000000000600020001000000280005800a000400aaaaaaaaaac20000090004"], 0xac}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r4, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a"], 0x94}}, 0x20008841) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r4, 0x0, 0x8001, 0xd) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='blkio.reset_stats\x00', 0x2, 0x0) write$FUSE_INIT(r5, &(0x7f0000002340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0xffff, 0xe, 0x0, 0x0, 0x0, 0x40}}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000260000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f000090b000/0x3000)=nil) 6m9.265835392s ago: executing program 32 (id=402): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="ac00000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000840012800c0001006d6163766c616e007400028006000200000000000600020001000000280005800a000400aaaaaaaaaac20000090004"], 0xac}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r4, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a"], 0x94}}, 0x20008841) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r4, 0x0, 0x8001, 0xd) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='blkio.reset_stats\x00', 0x2, 0x0) write$FUSE_INIT(r5, &(0x7f0000002340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0xffff, 0xe, 0x0, 0x0, 0x0, 0x40}}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000260000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f000090b000/0x3000)=nil) 3m33.445365953s ago: executing program 0 (id=950): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async, rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x0) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x24) (async, rerun: 64) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) (rerun: 64) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) (async, rerun: 64) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) (async, rerun: 64) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20048050}, 0x5f3a1e12030bf48f) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000001c0)="d93c69fb382b904579532f21c0152328a251d72dd5d095a855dada44f5dc2bafb9ec51f45cab37c064cf4c174f9aa265cdcea1462a76004e6fd555660f79637ef4579ddf3e64bc66f25416ad002c584c38e1123475bd6d9263b4b247", 0x5c, 0xfffffffffffffffe) (rerun: 64) keyctl$reject(0x13, r5, 0xfffffffffffffff7, 0x7, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20002, 0x600a8}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x101}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x5c}}, 0x24008040) 3m33.320297738s ago: executing program 0 (id=951): r0 = socket$alg(0x26, 0x5, 0x0) sendto(r0, &(0x7f0000000000)="ddade7ffbb479570e596dc52e4ad3d60a05a62122f8f23e369388257080d90c5f9", 0x21, 0x40000, &(0x7f0000000040)=@sco={0x1f, @none}, 0x80) recvmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/213, 0xd5}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x7}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e22, 0x400, @private1={0xfc, 0x1, '\x00', 0x1}, 0x81}}, 0x3, 0xf, 0x0, 0x5, 0x92, 0x6, 0xe}, 0x9c) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000440)=0x7) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000480)={0xc6fd, r0, 0x80000}) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000500)={r4, r6}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20802800}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x108, r7, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x7c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ab852e8f626a9ffbd7a1475098"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7b8c3eb926375c3d84196849b5"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6eef27cb9b"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "29522848c16b259c70f4905b61"}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x108}, 0x1, 0x0, 0x0, 0x4004005}, 0x2000c000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r10 = accept4$tipc(r4, &(0x7f0000000ec0)=@id, &(0x7f0000000f00)=0x10, 0x80000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) r12 = syz_clone(0xa0204a80, &(0x7f0000000f80)="4c9f1af835e216745663dd849a00f0c9048c96dbbb803977e7ec98f9997e4d5c59986a46696f219283521e1e3226d0c8953cc985b486733aad0121f43de99986bc22d155178ebd6cc04a5b211ae77f39eb73a12bab6cc17f32490745b710f82ff05b66a9edcf5eac7559a4205e867f43fecaaa0913ea9aa6ff025748f80e9c6b66a5396aa610af5f95ee5394327fbc34f8d558d04713be133567", 0x9a, &(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)="424cc2b90b55781bcd6edda4cf33e048369ca34a8957d8c39ca73e701fd90209bc209bfa62cab94824aac2b1fdd25b106b7203f634685312835a15") getgroups(0x6, &(0x7f0000001100)=[0xee01, 0xee00, 0xee00, 0x0, 0x0, 0x0]) r14 = syz_clone(0x51010000, &(0x7f0000001700)="a2231763bc77f9dc1bc1313fe7e83da023ba25dbeb397e5ce3e2a178462693c1810c11ddd2ab9758ca6cb19cb0e760bb4f5f76cd4d5e9c0dec5b23efe547afd24517390494c70a134a1f204b3c669de25dc7f46f046e03bc53b1a74ecfff23b74037b4ca00bfdfaf0fa15de171301aca2b", 0x71, &(0x7f0000001780), &(0x7f00000017c0), &(0x7f0000001800)="7d3bdeabd75b9c7db832459189615244cdd81c8f7dbf8bfb7ee03c9856a3d1589d178df555d14a9f68ca9f84eabec17dcc1166370f649e5d182e9b59621bf03fe3e025") fstat(r2, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001900)={0x0, 0x0, 0x0}, &(0x7f0000001940)=0xc) r17 = syz_clone(0x40000, &(0x7f0000001980)="608650747ddd99faeb44ade5aa0b1fe0f143bd6946060e86c405696f672b87b12801f81231fc8c0d95ae36f609ab9ab8cf23ecf28fef79acb5b66233a9", 0x3d, &(0x7f00000019c0), &(0x7f0000001a00), &(0x7f0000001a40)="c31204c3a36fe9de4f900a79f3dd1695fe5fba90e15aca2d94b832200f36d8b9f29299ea5bba5d2003d7a47cddb15291f5eefac2c8639bd05b42969f82814c07720b5f7e40cd16dab4c226881d94ca2ae19f7ba0bb2d702ed83c6b5e1bd9dd647edeb3a8edae41434cb4b15eb232269c97459e79e1ac1f793dc112c7e0800bb0cbfefaac3b87083cfc6a3ac2f520e2214aae00e60a88c84a1aff056e23525f00049bb22dccb50753ac9093") getresuid(&(0x7f0000001b00), &(0x7f0000001b40)=0x0, &(0x7f0000001b80)) stat(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = getpgrp(0x0) getgroups(0x5, &(0x7f0000001c80)=[0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) r22 = getpgid(0x0) sendmmsg$unix(r5, &(0x7f00000057c0)=[{{&(0x7f0000000800)=@abs={0x0, 0x0, 0x5}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000880)="64aed6251c", 0x5}, {&(0x7f00000008c0)="db91678eb8d5db1e6738a5aea02b1a54fbc31b307ca15c004a71d8ed70861186317b2ee7d0c437871ecb26bb9d3352349f96cb59aa15a8ec314f3128d1c159c144c9e6cf174473b67c64952e684184d58a08aef6f950e119b76dbecb9a0ca7209abaa969e247b4dda0300c2f451c42a7fab0defe262a04b298a10f30e14c66b9f7b110", 0x83}, {&(0x7f0000000980)="04e0f7fca45ad653fa6029234effffdf95df0e2d4fc22713249dc84f62035ba0681b14abf8a8554719130be6c36ef9474c599b2437274d67b52e3a6659023b502f2e835a384dbb9ca967b23be7ab32dd8d9b239db4d9cd1081bedc8b52b02444899ed43b9e895d37f1be3248381489ce09fd4356c4e137e52e60e98f3ae0aceb9ee3b6bdd0b3b989ba69170563a75d75e3c14f5ae456bc7cff07af27f312f8c8362fe533", 0xa4}, {&(0x7f0000000a40)="9e1674f1d17606891814d0e8c769c7f372441277661900f85a6e24796f0857602efedddaad129b5a5aaca283942da4d2a9296cb22083b3a90670d9819436b19cd34bb86d1b64826f92b5a3046bcb8a01b567956e362010200f351d483d4738830a9428241c4e818484ff66ab78577692e338ed", 0x73}, {&(0x7f0000000ac0)="7b406f679b25905f29708dd6a7538350cec9514fda149c594f6c22066d76c593d2be06dea78e8c4d31bd917c38d67d2e8f647f89052431", 0x37}, {&(0x7f0000000b00)="3e3051ee38098b8e1a91102d701dde49f9b3c5b34fa26d0c081ac693a52ed4eda4bdeb8a436d33890f5628a0ab5d1b61c03b69d76cce3f4ea0e1c038a0f695fc2d270e43bca1715ea5aca1a6190e8023aacbdc7784bf696c3292781b70169efedd32863ae98467c489084ca6b902023d963cef3e4cf46bf1da5fd3d25094244cbdb1d96f423bca71357914da2942cecfecfe252fcd5000", 0x97}, {&(0x7f0000000bc0)="bb4a5981a737", 0x6}, {&(0x7f0000000c00)="339c033546a719d46e2a2769bd53e9072c3a90ca26c9fc676c7a6519fadccbd8f10aec65c6f83a7cca41a6c0b816b8c2f5b30030cb21881e09e45cf93517ae7061fced32157d2ef00b20cc9e6baec9001d55c3b9fdc2b877499dbd2f7d234a73eae70d223369608002c98c461b919e5a753c37086b23f99f3d7d3345f2", 0x7d}, {&(0x7f0000000c80)="151652fd0d75242f728b4e831b06b7c9d14eb1677ad669f14cd7d3aa8216ef76d0306f098f7ece641b70eeb232a594d9492a68d34feb40cf3e5af2db91a469a768ca34e3aef5d167b4b9f973d6f09b64cf73fd0e36ce864ca36b9b3ae76cf7267f792ca0578fbd1691a3044eae0627c9dfd3e9994054f6c86ebe80ff", 0x7c}, {&(0x7f0000000d00)="ad4d23e048c88b36eceea5def5454d224c4ea9a28c4e5b77029bd8f21adb0166616d453a882595ed75d675d1c547f8baa68604a546c0739abe10f8e57969e2826ae37966a9373cfb09b24095f8cd80d01b8cc67e5cc5cb21325cd7abcd53d34437373e66e4c933e001b491d64139114c6e90386892a633d00bf85a401f29537ea263acb87878d2bf1f2f9ca6a3d2c815eaff65e41b4f5d5038cbccdabaa521742e8e65216f6e587ef77e9a08903bff4fc5f3fec0d4891983f2968b3985f062f7831253b6f6ede0fb6d405c393cd545691cf70a3741ecc8bc640ce38ee61794db26a83da6871d8df626f70086fcfa23d6ce934d", 0xf3}], 0xa, &(0x7f0000001140)=[@rights={{0x18, 0x1, 0x1, [r6, r4]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r4, r9, r1, r10, 0xffffffffffffffff, r1, r11, r1, r6, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee00, r13}}}], 0xa0, 0x40050}}, {{&(0x7f0000001200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001280)="93c7280df492e0fc42fba99531201978c2d3f3da07", 0x15}, {&(0x7f00000012c0)="1774f3c157c0e4166457a20848c3fbca150ccb61feed1296c91278dd7efddd065be60963b08ea5c0d6e1617c0132f69f2a2acd9d94c1b24be441742eedfc9031122e15b12fb51e6ca9dc04ffb1cf9c993b90b0a89585e175bbfed52cc39b4b1053d2e67276d1bed85442410c1652819bca351e3a15483143199afc6010e573730bfd282fc548616366f79e4a3786ec301f", 0x91}, {&(0x7f0000001380)="25a91ebfc231a0c9999dd8447f4f325a2e4caa68d9b2b38b5b02dc5c6b63eb9b03933212353f9a2a9a88135ae67fece26b852d6777bd53b8db6ed7f0672b8b5a905455392c4e3d644b0e2d736c88fbf51e1920d977e5aeec60a39f043c9b07823e6d7f12451da9d7a84032fbf478debf0a8784f6fd5cd4e3a30b3b6c6dd3f52d383fad7c10fed5ef64a25c65117f7cedf3814030b5fb3949a5133aa78c0f6d7c9d5d8fc6b414cafb02bd55c8f441b88a0a540c0d6cff29f368d870325cbd9bd63062fe26b260edfc2ea12a034329600e550adf859519855570c166f61a67bd811875d316204c51de787cf7bb057145", 0xef}], 0x3, 0x0, 0x0, 0x4000000}}, {{&(0x7f00000014c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001540)="654bed6b8393f4ddff07f8cd441423f4b0071bf770cb4d26ac7195d34e85becc95a4900ead4d01668e22a0b29d20cef1666d6ad90237429ea9aabda47ea0c7b0011d83f4fea63dae70824dc91f9eb45dcb8ed6109a3dd5c670079980e95d22f080f60574b2f3818c4272e74249973c724b80cf302bb9f843920bbdf2df86aca5c1d0c95f91f276a5f7dad5b9869997a6c2242b2d2346c46b7719070e61ceff7fb7a92410617f1172228edd22bf8de3ba97c39dd7e9ab23cdcee160d930a23e6a88a7507ff2971478637d546835c0296c400f0e8a5efc67a1a8980ef7", 0xdc}, {&(0x7f0000001640)="c8c1dd23ca6d0fbe35aaf782c953116e1b22e5d20ed98f4bf51bc74b7b07b52639cdfa5a043f9d6167592fa3a8f6309fdc18f6fc950009756a99fddd2591df5f334883ee8e6d4189257aefb3a2e9", 0x4e}], 0x2, &(0x7f0000003e40)=[@cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {r20, 0xee01, r21}}}, @cred={{0x1c, 0x1, 0x2, {r22}}}, @cred={{0x1c}}], 0xa0, 0x400}}, {{&(0x7f0000003f00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004540)=[{&(0x7f0000003f80)="d87d11e2791ee9047d58455da509c0901e468e2f19bc082663bca72b2bb2169a95f0118a55b6c71b0e36862c73364e1c3a3e4a3f74397678d2451625538ce108aaed602d638925f84fc6f2f34442765257aa761ae4b273d9f921adfbc069267410ea173adbb46cc80117fd8defc394d0", 0x70}, {&(0x7f0000004000)="0a088953306fcabd63faa578b5c7c08c1727afdb0cdaf0684e53555b333dc56c53ba56771a7ff74be30b160aa28e793b19bbcd8e44e905631680e087817f6e318ed7a7700fca92b96fd96037087c858e2659ef7f85acef2ba5b32c849b1561b3bc00d761339484cbc9b2f3d6eff94e6a20f8aefa7c4fb385d19c3d6148c2c5c9d3f0934b46027d319055a95a442a49ec6a8ee3f79d61e7978de3365878eab92a315cb6e0fccc5ed9510e7107bb3c5ace976b152642e958dd894c76611780a079dad470b6", 0xc4}, {&(0x7f0000004100)="89e62d78d2004906f4519220c909877ccc9c096e93147a249ce0937d48bcc0e15a957dc5fc1f836e9497c9a8fb4041416d", 0x31}, {&(0x7f0000004140)="748155669e327adc0887af57f3d838ebbc7c10df2f148581a91513fecb05eeb59f25a54e41ff9ed938606db2d0120147a5f519f4dbf2c2788355f0e4ed77a9f9d7813decbbf59b4021c1986ad645b90dafe5fe8269341d02accb650206adbf8d2fe662971f306db79379e54ea9c831c37d567879a25d7e64f424d546e41fc151bfabbb292be81e321e0d024f9e67f9632cee1f866fdc8bce3dcdca9a9d9f35c43c8417f381d8126e120917b409cf228489f1c80be9a550f9ace14649095a1c9deb155846", 0xc4}, {&(0x7f0000004240)="c2dcbc33f0ca394b19986bb3e36234e8b01417263b21b362bdfa2e3e72518a957e23fe6eedc36aafe2de6b918b0715ff7d81c615063e009e3d551b66129eae53d2cf5efce96c99ecd05e0a7167f0f4e842f817bd3683670f8707f6ba5a1ea44efcf97c5a29231e91cfbe4912067ca489c3d1882760a614547899fd9f900fbfa536527c779ddfaee1cf6ee86b542696aa080823d896f7c5094ddd3babc38d72be71321b95236501523842f7a6eeaf46df48c36d6a4d9dfd1e8cf6ba1be4cd5cb4f57f731c2129f036ccf44d24f643e7", 0xcf}, {&(0x7f0000004340)="071365651e4881e4ac5c51154783fbde0860830977006dccb809a51adbc892f4bef8425abcfba71f9f537cc8ea7cb12d40661212bc4ef28ce564c2677076ca3e2c6fb9c16777ac625a317db653c733f6169457cc765dbd0225772bdddf6e8d1b84e5067ba7a0075bc925bbbd63cbdf794d24ee574d71a6", 0x77}, {&(0x7f00000043c0)="35a909c37a15b9b7da72b80f4ee7dfaaeb41c5649e0f8148471db1dfe18851fcafacb1c4170680f826c52c8d25e4386eafe60f22d180916981f623da51971d6c3427d868a07693bde5d799735550c34e0a86a173b28fb87acc6f30b1c5caee1bdbd813f36886451a602854b6f25de845e7ee4d1f17a9", 0x76}, {&(0x7f0000004440)="609e44c4810faef7d78fd4374b6f570a98d2e90d4d3139e0ecde27d76e0f72e9ab1e2bf766e32fc586334930c6430a6731c90430532f5029d687", 0x3a}, {&(0x7f0000004480)="d90da20b8b7f78fd9719f5d9", 0xc}, {&(0x7f00000044c0)="d502874a32d40e0d9e480f8fab85a394d7407b0e20bacaa49a82e1a05a42210501c1b032f7013b99411919f904f04e80963339efd59e2c2af923d40f610d5d78c1c0972e4973ea5dbc52d9effd79cba03748a98214bed2a8ba9bc20d1f2a7579b635bd6afb7f6eda0fc6c44e39412fe8", 0x70}], 0xa, 0x0, 0x0, 0xa4}}, {{&(0x7f0000004600)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004a40)=[{&(0x7f0000004680)="fe6fe36cca4deffe337eb8b9bb84493a7f260fece4e16e3d7fba23753c70eec28c7711f19fd091c64fb416ddc121a0bdb67cc626b3c30c37b879a157f5b986", 0x3f}, {&(0x7f00000046c0)="e730fa47a66aaeb46c093312a7bc3744a47b4c5c67706883014727f91e0070b5d056c97627aa9f29187633197ce7518d3ccfe4f223b03a68a0025ac33e527761321a9ceaa6e02c693caf50f6d3f6e8de3dff0e6244baa9f86e08524bbf33d4cc82423f8f7594abd0454bca4ca09cfadebe8ab927d3a9eb976677422014406073430acca6016ae98c6a3502eb187960e75e6c8f4b8d89", 0x96}, {&(0x7f0000004780)="71ff86f2a12da7cf4b6dfc7be964327c6b35b73181d990c406f2bc84eef5f43b5ac3e333d813a6f5c0f1b54defe28e1251b10bad6c04630df3ed12940c", 0x3d}, {&(0x7f00000047c0)="400ab833f5eb443e156ddd07346a0cdf08aeaa1fd4d1af499282095288ea2a06aefb2d56c8961e1c3cba70a8e3d12ccff21b44c30c02ea4876e87413159b5f7a36f74eed7fcf2aad2ac066bc8fc41f755f2f6de10d4e90cd7987e9b18749e3", 0x5f}, {&(0x7f0000004840)="e211537725c5883e3cfcbc832476ee3494a32a319f38a12a0ed352fe5861a39380bc592a310e044319c97683ae28c138a37595ba67288e1c4d31811f2a4943e3e44179e3494f948d4071057efaa404bf51b0c0c603081b4b47b52225b43004b7e38c72bb81ed602d407d858a1df27e8b187ff6927b28657ea7eb5187905c758f0ac6938f3708", 0x86}, {&(0x7f0000004900)="ebcd61e051f7ac9cd33051df462c099a3761adb436ccec7318cd9679dcc429aa7d8f8c1eed6f06cf066d371a2c548adb9998a97978717e7221e4ba5e53e1281ab1d51d4b5a73ac2a37394342561bb0369a27a73bfe30b44583c17be55613c3d8734794531936bb41886da6de17910b2fa33c49e894b2cf1e2f6e855f816d4a19b0003c60c1afbc26a0", 0x89}, {&(0x7f00000049c0)="4b784b4b74b536247c6ca7baf51ac018cf33e8d07882076b6194b53a3cf39ecead5a61aa8932f985f54fbb56a3e54b8abdf10543f8d0ab38a17c5d5fcb", 0x3d}, {&(0x7f0000004a00)="183486b1f0ac6e1ffdffc7fea42721f81da406f127e18c626381fb8bda7450f9", 0x20}], 0x8, 0x0, 0x0, 0x4008050}}, {{&(0x7f0000004ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004b80)=[{&(0x7f0000004b40)="c1dd33a495e912d30b0521ed18ea39b705ec78b4f4e66b10", 0x18}], 0x1, 0x0, 0x0, 0x850}}, {{&(0x7f0000004bc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000005000)=[{&(0x7f0000004c40)="4be038", 0x3}, {&(0x7f0000004c80)="fd267cb5b98caf3b61b1872489d9442558e4225af39323efef3773b2e4f4856e13640d4829f0425ceff3011dcef204769da19a2a420ebcdd13ee37e6ec7a05e9f42e45e1061697b06bc7f705098fb8a8fce613e281a159e2a3ba0b1e4bf96dc01e3a4e516fe425bc9d64f175190445dbb6ca41b499d2275f6eb242b8cca85770836e73d1e40d31936b29d6c7599a47b2da442639ed05f701b7e505a65ffec5148ce87fd5a5bb5de73fe106bbeba3dab526755bc16b0fbf0b03a88a0ac1e24f011f9fb1d109cc17e6c881a336acb1355a", 0xd0}, {&(0x7f0000004d80)="d51e1da11d4377a8faa25413ac8d3cbf7cda481a0476ef03af3e6ce5403c574d8f279b74b8ef4383327d05", 0x2b}, {&(0x7f0000004dc0)="7a6b861b5052ba2b10542b26650ce3085ed431ec867923542e4801004e02efa3e7714047639af3f55d6e8edf397f6108ac0d87c19a6eb57dd3ad6070b01a1e2772bee685b6bbe7154c31793d072a3c831bd680df36cbdd332c43dd5b1c52901b447a66fbb85d9b6a1060ea36dd059d645a8337e621b443ec0be951f7864e5f8bb706a275488e4dff3582", 0x8a}, {&(0x7f0000004e80)="f4a2e538a4984d50b5ec8985eaef968d83182b5c4b919b81ba313eab83d453b95f709ebee204caf577b48b242c9079dda81eaef6209363e86c1ed696b0ab23f56800f2cb0d", 0x45}, {&(0x7f0000004f00)="94158aefa39c5450", 0x8}, {&(0x7f0000004f40)="6aba8d399f182cf8b8c8a17c9d1786a7b4bab8a11f126550cab2186ea661d97cd3791a6b4e5da35fb0b5d1f43fb3c60061df33deaf6814985eb4ea15393917e92a4cec1b253d7e10cce33de86c5eb92302cf3ad033599364297375f5788a86260677326c70c31faa78482dc5b54fc627cd3b178ca20e9bea602d6a7c85d8276300", 0x81}], 0x7, &(0x7f00000053c0)=[@cred={{0x1c}}], 0x20, 0x80}}, {{&(0x7f0000005400)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000005500)=[{&(0x7f0000005480)="b6621b08e5435a3d4166d50bb58975bf11134fb72441f19ad798090f07", 0x1d}, {&(0x7f00000054c0)="d82de04e4ba9b2d536b88853a751f09ec31486537b568d62e6a05a", 0x1b}], 0x2, &(0x7f0000005780)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r9, 0xffffffffffffffff, r4]}}], 0x40, 0x30000004}}], 0x8, 0x2000c011) 3m32.914200984s ago: executing program 0 (id=954): r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x7, 0x5, 0x7, 0x1, 0x3, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xc2, 0x5, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x8}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x200, 0x8, 0x1, 0x2d, 0x8, 0x9}, 0x4e, &(0x7f00000007c0)={0x5, 0xf, 0x4e, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x1, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x4, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x3c, 0x2, 0xfff8}, @ssp_cap={0x20, 0x10, 0xa, 0x10, 0x5, 0x7fffff0, 0xff00, 0x8, [0xc0c0, 0x18, 0x0, 0xff0000, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x4, 0x0, 0x1}]}}) syz_usb_connect$uac1(0x2, 0xac, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109029a00030100007f0904000000010100000a24010000000201020c24020000000000000000000c24020400000000001000000d2407000000004336d88b1a56090401000001020000090401010101020000090501094000000000072501800000020904020000010200000904020101010200000f2402028000000002000000000000072401fe80000009058209200000000007"], 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000980)={0x2, 0x4e24, @empty}, 0x10) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xc3, 0xa0, 0x94, [{{0x9, 0x4, 0x0, 0xe, 0x1, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x8, 0x1, 0x1}}}}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x110, 0x7, 0xe, 0x5, 0x8, 0xfc}, 0x2a, &(0x7f0000000d00)={0x5, 0xf, 0x2a, 0x4, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x0, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x0, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "43f2018deb8f1e2bdb086cd9441bc597"}]}, 0x1, [{0xf3, &(0x7f0000001140)=@string={0xf3, 0x3, "bbd6c1c8c143359c38818c1f42f3bd2ef444c7a7c416f5d1de532c166df0c71c959e48560239ed0f0dc2903b447a46c96abb6950d038c76b159d7a9f909965571dd95b11e41a7d82f2f84ee16e1c0bd84591542d4558eec8509b9f65d92d3c68e00d4b7f4faed5644a9cff167465c5554c31259bd1a4fa8cbd3156805786051595b2bf799c847a3875903832c77358f440146c7d8428cc661ad08beb0d365f1a621d6412127cae35c81c80a490883f91faf12ce78cc0e65731fb7fb74509d67abc04983c07419e63ee0ff8c017473665ebf9fefc29829959f04f7da30e386b463b9289e74c4f03bbba344309a03f825190"}}]}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x8001) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000500)={{0xe}, 0x1, 0x0, 0xcf, {0x8, 0x80}, 0x1e, 0x6}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000980)=[@text64={0x40, &(0x7f00000009c0)="1858b036410f017d0048b8dc4b13b61e0b813a66b820000f00d00f21f835c00000a00f23f8660f2263c4c17c773666420f3a428ce80c0000000066baa00066b8000066ef3e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x5b}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_connect(0x6, 0x3b8, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0xff, 0x10, 0xf8, 0x0, 0x6}, 0x121, &(0x7f0000000040)={0x5, 0xf, 0x121, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xc3, 0x53, 0xff80}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x6, 0xe, 0x157}, @generic={0x101, 0x10, 0x4, "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"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x9, 0x0, 0x18}]}, 0x5, [{0xd5, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r6]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x416}}, {0xc0, &(0x7f0000000d80)=ANY=[@ANYBLOB="c0037e87e1bd5e2ff40c7e0c0c921fad6b1830c600d7795044c1b36a299d62fe50028d57f56d87467bd628d1c4077bf8d32f7f6e9fef9d71fc5dd9fd29b80b61ad7e6ac0728508bb08a6529803bbbb8bc1e6d0a67a38952add28d62ca73705efa3da879a5680a30786091bf215bb1d14284952a72d82567a98ebee9a06a39c3c66de2084a6ec0667edca3dfe13dce8b4fee86a350d3dbde64be82f38f9cf5add8b12b50bc4caf01e073da1a90000000022cebd982843ca61885a589b52b623ba", @ANYRESOCT=r2, @ANYRESHEX=r0, @ANYRES8=0x0]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2001}}, {0x101, &(0x7f0000001280)=@string={0x101, 0x3, "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"}}]}) syz_usb_connect$cdc_ncm(0x5, 0xa1, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x2, 0x1, 0xb, 0x80, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '\x00'}, {0x5, 0x24, 0x0, 0xfffa}, {0xd, 0x24, 0xf, 0x1, 0x699, 0x81, 0x6, 0x5}, {0x6, 0x24, 0x1a, 0x27, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0xfff9}, @network_terminal={0x7, 0x24, 0xa, 0x5e, 0x8, 0x4, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x3, 0x4, 0x38, 0xb, 0xfa}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7c, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7f, 0x8, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xff, 0x5, 0x1}}}}}}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0xe, 0x81, 0xfd, 0x8, 0x9}, 0x5, &(0x7f0000000780)={0x5, 0xf, 0x5}, 0x2, [{0xcc, &(0x7f0000001040)=@string={0xcc, 0x3, "7a89a4c55a09ce54ae64d4539aefecae5949b8ff907e4428d3bcb8edd7cd0a31af220d8517c6eba0e102bc6e885386358a0f6078bb69f04b954ee8774765bf5c41771b8ec193999a70068a405b7ffc1d0f90cbcd122140c01a4818a9e467daae3097a9635dd34e7acadf9e94a79c84634e2914392a5051edd86b737e699c31916af1560585c77c075490cea54f0fd92940be497109098a3cb7db64b83b1f12597212c66f98fa2f724ca8f17647fb5f43b9dbc6d2a179afaa0840eb06f2a58d1e99fb21f09307a336c3a7"}}, {0x44, &(0x7f0000000c40)=@string={0x44, 0x3, "f351b4661eaf527b1385f3cfd4826a0b75f0b0f6055b61409ef4c488bbb01125ea442bdcb9f2dcc55106664eff9b6db73a377e83d0cf9dea18492a56bd06f3f74986"}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) 3m30.141501874s ago: executing program 0 (id=960): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$kvm(0xffffffffffffff9c, 0x0, 0x42102, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f00000190c0), 0x0, 0x1, 0x0, 0x0, r4}) 3m28.866073549s ago: executing program 0 (id=967): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5c000000000000000000000007000000072b2900000000ac14141c00000000e000000264010100e0000001ac1e0101ffffffffac1e01010000000083130aac1414aaac1414bbac1414bbac141440440ccc2000000003000000030000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa0a01010000000000540000000000000000000000070000004444b023ac1e0001000000097f00000100009600ffffffff000000090a010101000000050a010101000000130a010100000007ffac1e000100000fffe000000200"], 0xd8}, 0x200000a5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r3, &(0x7f0000000340)=""/222, 0xde) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000400)=@multiplanar_userptr={0x9, 0x3, 0x4, 0x1000, 0x9, {}, {0x4, 0x8, 0x4, 0x0, 0xf7, 0x0, "a5ac9909"}, 0x7fff, 0x2, {0x0}, 0x8}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) listen(r5, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000002c0)=0x400, 0x4) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000040), 0x0, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090264000201000000090400000102020000052406000105240000000d240f0100000000000000000006241a00000008241c0000007a0b09058103000200000009040191d90a"], 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000300)={{&(0x7f0000a92000/0x1000)=nil, 0x1000}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c750", 0x113}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) 3m28.593375765s ago: executing program 0 (id=970): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/243, 0x0, 0x80a0000}) r1 = openat$kvm(0x0, &(0x7f00000001c0), 0x681, 0x0) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f00000003c0)={{}, {}, 0x14, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)="8eb114d2734af668037bc4ace6c4c99d6fd1b0d3d87bd57423cfc2becfcad0709d5def0994b61d0a0095c8384732e75afc090ec8ef311a818313458dd66fd1d94f728a5e9d0cb504c96f2bd1bec01773b9c3c6fa7be7e2f02ee6988da799111b97295a9d9fa2e4186a3d2d63793d9d26ad7b8e7ba1ce053abbd00f792cd8aca0b4565c91865fe1c8eb6721e424fca82d97e996ec91fee086f242fa30b9a16da0bd51817be6ab53300c1b39c5eac1ea5f29d8279bb7a03a371ddad2c53c50bc2f7d4b8fae1aa4c2e33a203c1c207fa976a665433d46bfcbe4c285e796fc963b0e6f1ea242c3c83437498fd20f5326322238913710fc498e69db8cd515339705558afe5f28e83e8d1582b0c46bb267835546aa48d1c8f076694776987d2d6acda6b7488669ba0873ed272ff02ca20bbefa74a9acc9a1221fd2be05a3302ae2f2a631e0abfa47bc03347573cac2c1f5d5fb5b92cab6709ae5bc57b59f99da3ab4b576571233ede49979a5a7d413f9236b6e1d5451425d19b3ac510baf0e8613765078f85bb9ceb8a4c4961f3ea9a4a8236ed1261406eef8da1b042659059a45e1af49bfb608461d77aa2894ba90b3d22112ae81b788fd3ad01848d584d9871680c5282859248eeaee71c9c8245bf07f4e9379aac7dbb311c558c8ac8415", 0x1dc, 0x0, &(0x7f0000000240)={0x2, 0xac, {0x1, 0xc, 0x4b, "ec4ba351973a59a4e61372309d42cc659d83f75a8c43f9136abf51d32e75c8b1376ea0823e32402270baae734fda929bb664aa0e05b334ac78963b646419b2f756b105105c9e54d8ff00b7", 0x54, "ca70bf60f0eb777bb2fa0d7b771b04325fd660d71e83d1e525db4c7ba616d877776b0778875ed67bb669e3e248fac264ac70643d006602e8381c62855da4d72386262aeaaec258bc496865a4deca9408cb0c5de6"}, 0x7b, "23b3421944f7406d6d725a86c04bebe83a28d8dcad1518768172e05b85b213a4fca48b30f718c6b1b99b730fb932f0280ea691c022622ac5eeb93c091f562be1533a567638fe17253c2d41b7a3fbf39424aa42d84250339c1f02ead53c4e3a94dab1bfea90a9126d58fd6e5b94ddeb2b2a43da348a5d878112eeee"}, 0x133}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) mmap$KVM_VCPU(&(0x7f0000c56000/0x2000)=nil, r2, 0x100000a, 0x11, r4, 0x0) r6 = dup2(r0, r0) write$vhost_msg_v2(r6, &(0x7f0000000600)={0x2, 0x0, {&(0x7f00000001c0)=""/128, 0x80, 0x0, 0x2, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000380)=0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x0) 3m27.787902375s ago: executing program 33 (id=970): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/243, 0x0, 0x80a0000}) r1 = openat$kvm(0x0, &(0x7f00000001c0), 0x681, 0x0) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd7, 0x80000001}) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f00000003c0)={{}, {}, 0x14, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)="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", 0x1dc, 0x0, &(0x7f0000000240)={0x2, 0xac, {0x1, 0xc, 0x4b, "ec4ba351973a59a4e61372309d42cc659d83f75a8c43f9136abf51d32e75c8b1376ea0823e32402270baae734fda929bb664aa0e05b334ac78963b646419b2f756b105105c9e54d8ff00b7", 0x54, "ca70bf60f0eb777bb2fa0d7b771b04325fd660d71e83d1e525db4c7ba616d877776b0778875ed67bb669e3e248fac264ac70643d006602e8381c62855da4d72386262aeaaec258bc496865a4deca9408cb0c5de6"}, 0x7b, "23b3421944f7406d6d725a86c04bebe83a28d8dcad1518768172e05b85b213a4fca48b30f718c6b1b99b730fb932f0280ea691c022622ac5eeb93c091f562be1533a567638fe17253c2d41b7a3fbf39424aa42d84250339c1f02ead53c4e3a94dab1bfea90a9126d58fd6e5b94ddeb2b2a43da348a5d878112eeee"}, 0x133}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) mmap$KVM_VCPU(&(0x7f0000c56000/0x2000)=nil, r2, 0x100000a, 0x11, r4, 0x0) r6 = dup2(r0, r0) write$vhost_msg_v2(r6, &(0x7f0000000600)={0x2, 0x0, {&(0x7f00000001c0)=""/128, 0x80, 0x0, 0x2, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000380)=0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x0) 9.793288907s ago: executing program 3 (id=1767): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x80000000}]}, 0x34}}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f0000000100)={0x5f, 0x0, 0x1, 0x0, 0x1000000, 0x6}) (async) syz_usb_connect(0x2, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="05010000b1f203401e0903003bd70102030109024d00010000000009040000050095c20009050000000000000007058433"], 0x0) 9.228610846s ago: executing program 2 (id=1771): r0 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000069047d08bf0a70330e030000000109021200be000000000904e0"], 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x5, 0x0, 0xffffffff, 0x0, 0x20, 0x0, 0x2}, 0x9c) r1 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x74, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf, 0x0, 0xfffd, 0x5, 0x6, 0x8}, {0x74, 0x2, 0x8, 0x576, 0x5d7, 0x2}, 0xa, 0xc0000, 0xc58}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PBURST={0x8, 0x7, 0x19df}, @TCA_TBF_PRATE64={0xc, 0x5, 0x67eb6bf12151d490}]}}]}, 0x74}}, 0x44080) 8.354661207s ago: executing program 5 (id=1772): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x40000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000001c0)={{r0}, r3, 0x12, @unused=[0x8560, 0x4, 0x4, 0x94000000000], @name="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"}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendto$inet(r4, &(0x7f0000000080)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) 8.201959063s ago: executing program 5 (id=1773): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x0, 'team_slave_1\x00', {0x4}, 0x5}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc0106442, &(0x7f0000000080)) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x5ffe, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10) syz_emit_ethernet(0x8f, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv4={0x800, @tipc={{0x17, 0x4, 0x2, 0x22, 0x81, 0x65, 0x0, 0xe, 0x6, 0x0, @multicast1, @empty, {[@timestamp={0x44, 0x10, 0x7c, 0x0, 0xe, [0x6, 0x9, 0x8]}, @timestamp_addr={0x44, 0x24, 0x4d, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x30}, 0xa21}, {@remote, 0x5}, {@broadcast, 0x3}, {@loopback, 0x4}]}, @generic={0x82, 0x2}, @rr={0x7, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @loopback]}]}}, @payload_direct={{{{0x25, 0x0, 0x1, 0x1, 0x1, 0x8, 0x0, 0x2, 0xfff, 0x0, 0x3, 0x6, 0x0, 0x3, 0x6d, 0x5, 0x1, 0x4e22, 0x4e21}, 0x3}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x10, 0x42, 0x44, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r7}, 0x38) semget(0x2, 0x2, 0x4) r8 = epoll_create1(0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000380)={0xc0000001}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) pread64(r3, &(0x7f0000000480)=""/236, 0xec, 0xd) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000080), 0x100000001, 0x42000) 8.065267422s ago: executing program 3 (id=1774): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x17e0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x97d, 0x7, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x2000}) socket$inet6(0xa, 0x200000000003, 0x87) syz_open_dev$vim2m(&(0x7f0000000080), 0x68, 0x2) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f00000001c0)=[0x0], 0x1}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0xff05, 0x0, 0x40000, {0x0, 0x0, 0x4a00, 0x0, 0x8001, 0x74000}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4008840) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x6d1b, &(0x7f0000000140)={0x0, 0xfada, 0x0, 0x0, 0x1d6}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r3], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x1a912, 0xffffffffffffffff, 0xeac10000) r5 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000a49000/0x1000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4004, r0, 0x2}) mmap$dsp(&(0x7f00005d0000/0x7000)=nil, 0x7000, 0x0, 0x40010, r7, 0x0) 7.771341919s ago: executing program 2 (id=1775): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r7 = dup3(r6, r5, 0x0) recvmmsg(r7, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x12001, 0x0) splice(r4, &(0x7f0000000080)=0xa3, r0, &(0x7f00000000c0)=0x4, 0x258a, 0xa) syz_usb_connect(0x0, 0x8a, &(0x7f0000000d80)=ANY=[@ANYBLOB="1201000074a19a083328010206d80102030109027800010009100009049100000e010000292406"], 0x0) 6.209432505s ago: executing program 3 (id=1777): set_mempolicy(0x2, 0x0, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="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", 0x1d4}, {&(0x7f0000000580)}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x7) syz_open_dev$vim2m(&(0x7f0000000080), 0xa, 0x2) read$alg(r2, &(0x7f0000003780)=""/4096, 0x1000) 5.057397815s ago: executing program 2 (id=1780): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8010, 0x0, 0x3, 0x0, 0x0) (async) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0/file0\x00', &(0x7f00000001c0)={0x40040, 0x32, 0x10}, 0x18) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) (async, rerun: 64) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="687372e3470002810500030008000100050003000500000005000307fd0000000800f0d68988000000", @ANYRES32=r2, @ANYRES8=r0, @ANYRES32=r3], 0x90}}, 0x0) (async) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@bridge_newneigh={0x24, 0x1c, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x80, 0x2, 0xf}, [@NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x24}}, 0x0) (async) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 4.831187155s ago: executing program 2 (id=1781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000000)={0x1, 0x1, 0x1f9, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0xb8, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x6c, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x40, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x4, 0xc9, 0x3}}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x4, 0xc9, 0x3}}}, 0x7) 4.69635581s ago: executing program 5 (id=1782): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000000c0)=[{0x6}]}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000002d40)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0x8, 0x28d662, 0x1096e}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x1, 0x3b6126, 0x1962c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000240)={0x18, r1}) 4.601192051s ago: executing program 2 (id=1783): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x4b48, &(0x7f0000003d40)=""/175) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000080)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000001c0)={0x1, 0x3, 0x0, 0x0}) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000001c0)=0x2001) openat$vimc2(0xffffff9c, &(0x7f0000003d00), 0x2, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x3, 0xdddd0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg(r7, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0, 0x700}, {&(0x7f0000000480)="ed6ec87c55f245", 0x7}], 0x2}}], 0x1, 0x4008) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0xa042, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10021, &(0x7f0000000380)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x4}}, 0x80) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {0x6, 0x4}, {0x0, 0x6}, @result={0x401, 0x1}}, {0x0, 0x0, 0x3, 0x3, @tick=0xf27, {0x1, 0x81}, {0x0, 0x4}, @addr={0x2a, 0x5}}], 0x38) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.798381673s ago: executing program 3 (id=1785): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4a64, 0x8001, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffb4e3}, 0x1c) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000140)='net/udp\x00') r3 = socket$packet(0x11, 0x3, 0x300) r4 = io_uring_setup(0x18f, &(0x7f0000000300)={0x0, 0x93aa, 0x4, 0x8000006, 0x800003d5, 0x0, r2}) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000980)=@abs, &(0x7f0000000880)=0x6e, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x58c4, 0x0, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0x7fffffff40001c06, &(0x7f0000000840)=@filename='./file0\x00', r6, &(0x7f0000000a00)={0x5, 0x4, 0x2, 0x400000008, 0x0, 0x7f, 0x29, 0x5b, 0x3}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) recvfrom(r8, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYRES16=r5, @ANYRES16=0x0, @ANYBLOB="08002dbd7000fddbdf25270000000800", @ANYRES32=0x0, @ANYBLOB="0c0099000100010019000000142489d88c3a6c75ab89f5b32c8251937ade750af6ca5396c46ad7d4959123341bca8a09323fb3810aa1bf245080148dd130b467b75999677d018c0e8b7b6bb0022d022a33bf7d3e00705b20af6cd1874accafb9eb8467a2c0b3803a7d6a60f8c768aa154d20d927b5f22d2f8d75fc9fd09106a00ea4e39dabe85afe68c4dcabdd3570a8"], 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x8040) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x690, 0xd0, 0xd0, 0x448, 0x300, 0x1b8, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x44}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, 0x0) sched_setattr(r1, &(0x7f0000000000)={0x38, 0x0, 0x7a, 0xc0a, 0x8, 0x4, 0x100000001, 0x8, 0x7, 0x1}, 0x0) r10 = socket$inet6(0xa, 0x3, 0x6) r11 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r11, 0x119, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f00000008c0)={0xa, 0x4e23, 0x14, @loopback, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="18efffffffffffff28000000370000002bae068236573897a700000000ebffff200000003eba3a97debff23c3c2315abc035cd959ae4d06079d1cc57da8c923f62f63aeafda80fc9ae689e79348a15c0ed5e068fc25b568685f58560f15461939f6ffd502f82eac25bb06d9d6d67422e10ff489d103095"], 0x30}}], 0x1, 0x0) 3.637291588s ago: executing program 5 (id=1786): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x64010101, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @common=@inet=@multiport={{0x50}, {0x40, 0x0, [0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x3, 0x0, [0x6, 0x25, 0xd, 0x13, 0x39, 0x3f, 0x38, 0x8, 0x3b, 0x5, 0x15, 0x8, 0x4, 0x20, 0x13, 0x3], 0x1, 0x8, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000540)={r6, 0x1, 0xe3}, &(0x7f0000000580)=0x10) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_PROTOCOL={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) 3.45619755s ago: executing program 1 (id=1787): unshare(0xa000200) r0 = socket(0x10, 0x3, 0x0) setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0xea60}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x40, 0x1800}, {0x2, 0xed6, 0x800}, {0x3, 0x8000}, {0x1, 0x6, 0x1000}, {0x2, 0x100, 0x1400}, {0x3, 0x1, 0x1800}, {0x4d632f675fd46b46, 0x10, 0x800}], 0x7, 0x0) unshare(0x20060400) 3.376809532s ago: executing program 3 (id=1788): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_usb_connect$uac1(0x5, 0x13e, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12c, 0x3, 0x1, 0x40, 0x9ecfe509cdbe2c8d, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x95d, 0xfd}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x307, 0x6, 0x1, 0xf9}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x4, 0x5, [0x9, 0xa, 0x5, 0x7, 0x9], 0x3}, @feature_unit={0xf, 0x24, 0x6, 0x4, 0x5, 0x4, [0x7, 0x3, 0xa, 0x1], 0x5}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x3, 0x6, [0x7, 0x5, 0x5, 0x5, 0xa, 0x9]}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x3, 0x4, [0x3, 0x9, 0x6, 0x2], 0x3}, @feature_unit={0xd, 0x24, 0x6, 0x1, 0x6, 0x3, [0x7, 0x0, 0x7], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xc, 0x2, 0x8, 0x2, "b7d6", "43cb02"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2, 0x3, 0x9, 0x5, "a8650794cd"}, @as_header={0x7, 0x24, 0x1, 0xcb, 0x7, 0x1}, @as_header={0x7, 0x24, 0x1, 0x4, 0x10, 0x2}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x8, 0x6, 0x7, "e6bf1ab437e658d1"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xb0, 0x1, 0xc0, 0x2, "", "73e1bf"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x68, 0x9, 0x7f, {0x7, 0x25, 0x1, 0x82, 0x8, 0x5a8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x10, 0xbb0, 0xff, "907fd8f9"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x6, 0x2c, "ad", "ca072a"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x1, 0x9, 0x6, "7bd1", "3bd813"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0x4, "d96bff"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xe, 0x7, 0x7, {0x7, 0x25, 0x1, 0x0, 0xff, 0x9}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x300, 0x0, 0xd4, 0xfd, 0x20, 0x34}, 0x23, &(0x7f00000006c0)={0x5, 0xf, 0x23, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xd2, "1687c59606045d77c5e391abb2e50546"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x5, 0x9}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x447}}, {0x76, &(0x7f00000007c0)=@string={0x76, 0x3, "a9ec8c17245e81a0b3b60c364d52c8e3acb67af7deb064ad5d4773d64b3c106e8fec011c17a4c2afdbf4cab895d8c0b21a2fbb10f3f37695f5b85deeb86ba9d2f916d992578b283aac12923ec02c00b24a978903b0bcf0584703474a45c4fc2faf2cfc3f9f4cb834f1b66595b7cc230726933bcc"}}, {0xe6, &(0x7f0000000840)=@string={0xe6, 0x3, "569e313b88dbe437694cc3fab29c86174aa2ff464b8776d4e4d6e2903dc57ac389d12cec461a2adaafdd6a5511d466560d4141577d45256947e20ceef9a74b6b89869175ac3a60e71af060b60e2262523d0881b22fe723563e03e196eff82ba263c0eb1fbd1e77f02933d644fd6f0e3f0bbb421f0cf022f9c0c0e3dec4783b5162ab1253dce04b59125f363ee738413c5de10c269e96c946ff2f4c47976d83b0cb5ae232797e1d86a57eedd89e40d47611391b8767670d2fcae477d800c5fe54ccd748a90fe3fde55a55b979f7ffb41817600c16096ade24272811f5980dc758d8546e3d"}}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) (async) read$FUSE(r3, 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, &(0x7f0000000340)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x7, 0x0, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) recvmsg$unix(r1, &(0x7f0000000500)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000000240)=""/10, 0xa}, {&(0x7f0000000380)=""/169, 0xa9}], 0x3, &(0x7f0000000480)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}, 0x12000) (async) recvmsg$unix(r1, &(0x7f0000000500)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000000240)=""/10, 0xa}, {&(0x7f0000000380)=""/169, 0xa9}], 0x3, &(0x7f0000000480)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}, 0x12000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f00009058803", @ANYRESOCT], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f00000000c0)=0x3, 0x4) recvfrom(r4, 0x0, 0x0, 0x4043, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x6}]}}, 0x0}, 0x0) 1.998016862s ago: executing program 1 (id=1790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[@ANYBLOB="bb"], 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8240, 0x0) read$alg(r3, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800000000000000000000b7080000000000007baa00fe000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.944250033s ago: executing program 6 (id=1791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0x80000001, 0x8, 0x6, 0x1, 0x7, 0x4, 0x9}, {0xd, 0x8001, 0x5, 0xfffffffb, 0xbc, 0xbf, 0xffff}]}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffbfffbb9b"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000005500)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x401, @remote, 0x6}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000180)="5bf6c7e6d3", 0x5}], 0x1}}, {{&(0x7f0000000740)={0xa, 0x4e24, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c, &(0x7f0000001a40)=[{&(0x7f0000000780)="598092e4ae8583", 0x7}], 0x1}}], 0x2, 0x0) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000980)={0x0, 0x2}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f0000000240)={0x37, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xb, 0xdc}, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f0000000300)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r10, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.721295108s ago: executing program 5 (id=1792): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a0001"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_open_dev$vim2m(0x0, 0x33c, 0x2) r1 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r2, 0x0, 0xfd, 0x9, 0xbc0000, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0xff00000000000000, 0x460c6}, 0x8000, 0x40, 0x6}}) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x123200, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r5 = socket(0x10, 0x80003, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'sit0\x00'}) clock_adjtime(0x0, &(0x7f0000000700)={0x8001}) close_range(r3, 0xffffffffffffffff, 0x0) futimesat(r4, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={{}, {0x0, 0x2710}}) syz_clone(0x11010080, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) 1.553490715s ago: executing program 3 (id=1793): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000000)=0x7fff) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r3, &(0x7f0000001600)=""/4103, 0x1007, 0x99) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) (async) fcntl$notify(r1, 0x402, 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000000)=0x7fff) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') (async) pread64(r3, &(0x7f0000001600)=""/4103, 0x1007, 0x99) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1.351102115s ago: executing program 6 (id=1794): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000780)=[@code={0x1, 0x50, {"440f20c0350300000066400fae7e0fc403c1480549000000003e26d9ebb968090000c90f933693362040dfdb0f01180f2b29c422791e905e230000420f2051"}}], 0x50}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x10002, 0x3, 0xeeee8000, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_uring_setup(0x4a28, &(0x7f0000000100)={0x0, 0x49b8, 0x20, 0x0, 0x35c}) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000040)=0xffff1000) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x35, 0x7, 0x0, 0x180, 0x7, 0x10, 0xf1, 0x0, 0x7fffffffffffc, 0x5, 0x0, 0x9, 0xffffffffffffffff, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.265358923s ago: executing program 2 (id=1795): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="010000f42ebf67c7f78d2c00000004000180"], 0x18}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r4, @ANYRES64=r1, @ANYBLOB="ed"], 0x20) 1.239494118s ago: executing program 5 (id=1796): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) (async) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000086e051c0140000102030109022d000101000904002501"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="27be19c647fe04d8b54be29bc8b50925dbcb2f804adc7155e32a63a3b4611c6c934908ab4492da3b8bbda748f3d62a0d61acf8bc22cf964d88f98d8c"], 0x0) 1.144515887s ago: executing program 1 (id=1797): r0 = socket$inet(0x2, 0x4, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xcc0}) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xcc0}) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000005c0)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x66, {"c4c195c60f08b8010000000f01d966baf80cb86254e786ef66bafc0c66ed410f2a858000c0fe3e400f608d0000000066ba4300b000ee0f20e035020000000f22e0f30f320f20e035000200000f22e0c4825108566a"}}, @code={0x1, 0x66, {"0fc730b911060000b808000000ba000000000f30c4e1745f5d9766b8a2008ec8b9000000000f320f013666b814018ee048b800800000000000000f23c00f21f835000007000f23f866660f38174b15c481fd5a1c9e"}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x1}, @cpuid={0x2, 0x18, {0xff, 0x6}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x10}, @code={0x1, 0x90, {"400f001484400ff2bf8000c0fe0f01cf8f094001770040f73ce948b8f200c0fe000000000f23d80f21f835800000e00f23f848b81ed597f0c5c8af5a0f23d00f21f8351000000b0f23f8c744240047000000c74424020d000000ff1c24c74424000c000000c7442402f27f0000c7442406000000000f01142466410f71f00d"}}, @code={0x1, 0x4b, {"430f32e731f3acf30f0966baf80cb897be288bef66bafc0cb0ceee660f3880a8b900000045a6b97f0a00000f32c44125f8212666460f38824e05"}}, @code={0x1, 0x65, {"420f01b006c0a028b92a0b00000f32640f0766baf80cb8f0c66989ef66bafc0c66ed430f01cf4201bc5500000000420f78c53e2ef3470faec80f01cf48b83052f1c2e5c2e7790f23c00f21f835010007000f23f8"}}, @cpuid={0x2, 0x18, {0x7, 0xbd}}, @code={0x1, 0x98, {"440f3048b8e7000000000000000f23c00f21f83502000c000f23f866baf80cb800bf178cef66bafc0cb8f1ff0000efc4a1365d543b59450f01db66660f3a1429f8c744240012010000c74424024b000000ff1c240f0d13c7442400b6aa9658c7442402deb40000c7442406000000000f01142466baf80cb8b494e881ef66bafc0cb801000000ef"}}, @cpuid={0x2, 0x18, {0x6, 0x5}}, @uexit={0x0, 0x18, 0x7f}, @code={0x1, 0x8c, {"c4035d4c1d00200000d0c74424008b7f0000c744240236000000c7442406000000000f011424366467470f0748b80d000000000000000f23c00f21f835000006000f23f8c4017e105f00c1f70066b864008ec0c74424002f010000c744240206000000ff2c24440f79500266baf80cb84eb2298eef66bafc0c66ed"}}, @cpuid={0x2, 0x18, {0x7af8, 0x80000001}}, @cpuid={0x2, 0x18, {0x184, 0x7}}, @code={0x1, 0x61, {"b8010000000f01c1f4660f38821cb7c4033d491500280000b1c421f97e4600c443750293b0e39288030f20c035200000000f22c0b960000000b80369c230bafecdfe250f30660f3815bc3000380000f4"}}, @uexit={0x0, 0x18, 0x20}, @uexit={0x0, 0x18, 0x7000000000000000}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0xa06d}], 0x4e1}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000600)=0x7) (async) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000600)=0x7) r3 = timerfd_create(0x8, 0x800) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000640)=0x1) syz_clone3(&(0x7f0000000840)={0x96000, &(0x7f0000000680)=0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000700)=0x0, {0x2b}, &(0x7f0000000740)=""/29, 0x1d, &(0x7f0000000780)=""/115, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x4, r5, 0x1, &(0x7f00000008c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000900)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000900)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000940)={0x0, 0x4}, &(0x7f0000000980)=0x8) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000940)={0x0, 0x4}, &(0x7f0000000980)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000009c0)=r6, 0x4) (async) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000009c0)=r6, 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f0000000a00), 0x60280, 0x0) (async) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a00), 0x60280, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r9 = signalfd(r4, &(0x7f0000000a80)={[0xffffffffffffff00]}, 0x8) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000ac0)={r8, 0x2, {0x0, 0x0, 0x0, 0x4, 0x40, 0x0, 0x1, 0x1d, 0x10, "d9b99aa5f782199aaacf2a0f689fe8a8b8f7f1d750e7d75a4d8a9ac766b8f59b7158d87b8674f8e0838ff455e7a16f5db571cf1e84aab2f53cad57d101ae0ad1", "efc5f93cc81e1b224fd9513a6ab8c6c13f55e36a5d6c03f72e70b57ec533f47a329529ac6e048da2681b91ca6efaf4daf5236b0a4de14743897acd674b5c75fd", "b35fc0324aabfd9656dec6a636fd4c38013223c928964a4e8dda35feb026244d", [0x2, 0x8]}}) r10 = syz_create_resource$binfmt(&(0x7f0000000c00)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r10, &(0x7f0000000d80)={[&(0x7f0000000c40)='/dev/autofs\x00', &(0x7f0000000c80)='.-+#{$,!\'+(\x00', &(0x7f0000000cc0)='\':+$\x00', &(0x7f0000000d00)='\x00', &(0x7f0000000d40)='/dev/autofs\x00']}, &(0x7f0000000dc0), 0x400) connect$inet6(r8, &(0x7f0000000e00)={0xa, 0x4e24, 0x80000000, @empty, 0x40}, 0x1c) (async) connect$inet6(r8, &(0x7f0000000e00)={0xa, 0x4e24, 0x80000000, @empty, 0x40}, 0x1c) ioctl$TIOCSERGETLSR(r8, 0x5459, &(0x7f0000000e40)) (async) ioctl$TIOCSERGETLSR(r8, 0x5459, &(0x7f0000000e40)) sendmsg$AUDIT_GET(r8, &(0x7f0000000f40)={&(0x7f0000000e80), 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x10, 0x3e8, 0x4, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc010}, 0x20008000) r11 = open_tree(r9, &(0x7f0000000f80)='./file0\x00', 0xc9db7f1358169c97) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, &(0x7f0000000fc0), &(0x7f0000001000)=0x4) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r8, 0x3ba0, &(0x7f00000010c0)={0x48, 0x3, 0x0, 0x0, 0x6, 0x60, &(0x7f0000001040)="1d7da26ae2095f3463f014a8094780d870007e639f23b1a11cb895a5cd7b933ffd54e9f1e75ddde06b799ec99ec7c58824302ab3a13ce8ba7059078c90df4f1303f229ee5f6d9d0eb1a39cf33741a87969284654eb927ec3d23be9cbea865a81"}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000001140)={0x4, [0x0, 0x8, 0xbf, 0x7]}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000001180)=r8, 0x4) (async) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000001180)=r8, 0x4) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000011c0)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001200), 0x57, 0x0, &(0x7f0000001240)="ff12360df2cddbcad53e72f89774f0e7c1c2cf868d4769a5f94218c5871792dcacc1242c3c3b94b5ad70f552405ae57615f2258fdc7252d4a9bd729a440cf637afa7d0d8f3c3248cf192c32109eb5297a7f91cd86f5ff6"}) 773.355821ms ago: executing program 6 (id=1798): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000280)={0x4, 0x59565955, 0x0, @discrete={0x266, 0x7fffffff}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100100000001a00"]) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x1000, 0xfffffffb, 0xfff, 0x49, 0x0, [{0x8, 0x6, 0xe, '\x00', 0x6}, {0x0, 0xa, 0x5, '\x00', 0x4}, {0x1, 0x7, 0x1}, {0xc7, 0x3, 0x5}, {0x0, 0x5, 0x13}, {0x9, 0x9, 0x7f, '\x00', 0x10}, {0x6, 0xfe, 0x8, '\x00', 0x38}, {0x6, 0xfe, 0x4, '\x00', 0x5}, {0x3, 0x4, 0xfa, '\x00', 0x6}, {0x60, 0x4, 0x6, '\x00', 0x5}, {0x5, 0x7, 0x8}, {0x5, 0xb7, 0x7, '\x00', 0x74}, {0x6, 0xf, 0x0, '\x00', 0xd2}, {0x9, 0x80, 0x7f, '\x00', 0x5}, {0x5c, 0x1f, 0x9, '\x00', 0x7f}, {0x8, 0x40, 0x7}, {0x7f, 0xc, 0xf3, '\x00', 0xfe}, {0x0, 0x1, 0x3, '\x00', 0xff}, {0xb3, 0x2, 0x7f, '\x00', 0x4}, {0x1, 0x9, 0x6, '\x00', 0xd}, {0x1, 0x2, 0x1, '\x00', 0x4}, {0x7, 0x4f, 0xf9, '\x00', 0x40}, {0x4, 0x8, 0xe0, '\x00', 0x40}, {0x54, 0x6, 0x98, '\x00', 0xf}]}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x5, 0x26a, 0x8, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket(0x840000000002, 0xa, 0xff) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = open(&(0x7f0000000040)='./file0\x00', 0x2240, 0x9d186d3e222f530a) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r8 = openat$cgroup_ro(r4, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r5], 0x4}}, 0x24000000) bind$unix(r4, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) sendfile(r9, r8, 0x0, 0x100000002) 681.317139ms ago: executing program 1 (id=1799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x5, 0xb, 0x4, 0x0, 0x0, 0x4]}}]}]}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYRES32=r5, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) 497.661301ms ago: executing program 1 (id=1800): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000) fremovexattr(r0, &(0x7f0000000040)=@known='user.incfs.size\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x4, 0x1, 0x1f63cedb, 0xe, 0x7fffffff}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "643adbc5e2dff7782f3bfcf67c1e07cef9efdc28efdbe7543c53092ce093c450d18e0af4ded72327e0ef576e2bc8b9f3e38164ceccf02b50370e704a63e23d91a387b6d590c1953c7bd4808462ab43c241b1159bcf47d4f023da52e41117132972bf79488ca77b8451932612b038a7bc66d37748825ff20fd54ed1a13009667c398a09c2fdc4bb37285ceed77c02ab29c4c3d7e128a8b88e05464c7063f3ac2cea7ca2210d3bf198672af5c60e69d2a25511f7eda513e014a15b16a02c762b1123b7728b898db923e550df22a551ad9035c394cd7822be7880012ae1904f3488cdb7f668717e3308349724d854361422acceba8289b7fd1585f288f0353caaeff44378730944b2ffc40e7cd4fa1e292b5f8e1cf6cf054c6a7ec7ce093d6518b3e394231696456c24e1409321642dd46d257cb3a98a17089f383d8b42ab9b6697f4f5809c89611ef45d6a8ea6e388c64fc6b20875f3a402daaf4a9cc01ade12d449bfe2164f7e0b351835b48e6b346ff785a6d5bbaf595d9269cdac75f7e7cda76a2c797765d211cf268f9d007fa212091471e50c0a822960336a858e27c6306aab321da06c0cfaa5bb273de8f169c3b897df52316d649db758232c0bcae022a73c85a0babcc6e24f2b9894fcbd570c9807aaf272b8ca226ecd991db32bc56a0938806438085929d7f7e0cc423c26b867e9844e588733ce19927912e79285e3f81eb02fe5e716cea1dcb2c19c01c0e400e87ae110e31b31f176082bf9be6fcb36e224835f1b5c5312227cccbc2f6b3dbd36c3beb006c6d03815b8e3e0bcfc8a571e4f6dab85212fff8f6f3aac76992c94bb8da1914f840104ee528703914b8f2a8aa178eb55eb1d3116ac4018de22ad0bc326e7d1f237d24889216295212f854085909bb393d2813d82c13bd73eb1dbb028cefa4568902348de97d901e2bc33b690cb4776ce9fbfa434b4eee83a6a89721bc0ceede841fd1d800e0b4fff049336781027ded9e9e9ef4b7e36dc44719d897ab3cd221aaed5b79dfc3ac50624d44523106def3674024bcabc7099b6d6ef2ecc10628de1c1e82e1d44503036e853a2e38ca65c9479cc3543873f21516428390a169ed5f9c82a70fdf252ed132dd207b85b056a9d9d3f1741552ad14b6cff01fa77f1fb81d9d4d3134c5e5d0c63f40b742c2b302f3ace04cf39913716d01f3726d8d1f7638336b5f217606fe9218820d83401aad60184c6126a278221ba76efb9a69747f0a1559cf8e4b57d7ef6d591a0e63d7d165e5bb4881c43c6c2f69daabd383925ca9c72b97b0d03e772a448cfa6a96b84a6878480b36d3dbd8aa80bfa6899403a1bd07a6eefd17408c74c3ed231fdd71d6bf4771552359c77846efc18dc4dccd638367c52bdf7f42dc3111907b5f32b32f42b7efc473bfcb968192de8b7091d78715fd535b5504b9760e6409a61eab1ce99db66a3565b2c419afaa1ea8235be13c1323124586f930a02730b64beaad15a9bdb17550991ef10451fc5dab2aacebe35c00b0db05e095696b57538815faffa54abb1ccb4e08f9b83c4cadd90c385b363fe54617ee12123bdfac83ee855beb90d32251267b3b4612fcd22719bb944e5c608f3face3e64e5f2edf159133c05b3a344b47818c5a1e4e9bcb30b545e974443e696716c6bfdffc34d4dbbfa2ae4bf47fa9b0129b5ba79819e38045d483bba08a88b73d23a70ce0819d3969ce18495253801901b2fea522a745802f918cec9553e3c0037b4cabea709af81a8770060a9b974fe14f9cf32de9ec241d6af3993c318735c93213cdf769ccfbeb4fe7feb1731040ae9a4388502e9585c5a2fd7991096f9e7b262aa2c462d3019fbaa1497fcaa227ca38e4bd77c9ffc86178bcceb097193b5524357f5341965e9eb20990432370cd6ca21f8bf2c85e44148e3ec91bb3dd9cf100411c683d667ae69361f1a2c303397e9be037288e534d255862ab78138a22205b9a1c78e02d5dacda124e183061f3450f810af51f1eeebd10537878d7817c7c47722ad47ddc72838808ec77f12eb66aafda314d0e3847394cb2148427daf8d188924a39b0abf10385ef312bc8d6e9eddfabd92897f098c3c332875377bd4fa74d0ad68490006f8e93696e528b1f2c41d7a7b8db444b46dbae19dcbfc1b72f00c17e142d6276e69eb4133df1a489826c9d0dfc78881963857f4399abb92a0f3db5eacffd241bc895a324d438d87ac4b1c4ed92f9a42460d66c8814cce78fde07497bc0fe995a7b27a42bec116876ddaf04ffcc00f62021cf208980b64086dc22615b958a66d1f452cfab2856c22e1302b3d46abc024c1e9e4274ae14c5d558c077cc805e69449f27d26e1c593998eacb4f4cae6e754dd87859b5f5aa28f13d0935a4ea665c62a704a81ff8c323f45cba85412a57112bb58ebbe33f2c5d3736a48cc21600f99216dc853842f7a67901740cdeb5470bd7b5bca7c44ba1aaf873cdd42dfaf7f7ad91cc841e7ccb9ebf3edbf16b59624fd0b5a57807ad9cbbf225f301a7a3fdb0100ae979fa1e4c5981c9ca5c69163e10f2bcbb126fc3c88a6bb6b61399fe8e05c183219db8a5ed3bd22bb23c5b1d7732a43b5a229fca281c988e300e70c80384ac3ee8567282a06437711d943c99baeacd77d62b4d682d98ae400fb2d2f725cde20b61b71f3b03d691257665e9bbc41ffca7a750493c21c65099392d6698cd9f13ebd94f8bf468b6edaf81b535445a4e31b617e4911ea36264ee0ef0beaff004d3dc8a81ea09291ae65ddf28b197b2c490873543712bbc90c0e55d0b91a967cd9c0258e0bd86023f96a5c284b3faa46436c76f3f30a06671d8996d1e2957957469849fcef5ec7c03ae4d735edf131a16d66aa2200c97545d1b3b865e2c3fd74ec2544dbe648f9ecb725cd5cd32f4a2260749579b9e7e36275253525ca6a2d6da120632aa438b8c9f64499651fcc2867e9e854664251c2daa7b8978bd02dfad879232ceb380e2454748ea55d7c74c1c5ecb87ed02333254578338329bb85a0c21c15c2bf9593f1ca72b0add1dbf4b7f4f21778ab540caf42dd5dedb5135d6efdfe8824adc247204ac9b126e16b0504ce1fffa58515458dbf894f4e8fd8623dda4b9696a43d0b2872a4003f30ecccf961036a2fd0402a049afe708cf3abe4c0e94c8f346d06bd7eddab3c3a921665dbbb3ec2a44dd8ed24be788572d9f050263e8f36e99cd5b99d9ff6c93e8a9bc97cce34cd1de45b490156d40b7731849356f8cbdeb02b228dfbb48a9d5b0d7888340f304411020fd80dcc5f216d997d343ee344cd3de8fee9624bf38d6602101edbeae8fcebe06e5f5368513321db45ce4ba34006b1964e0e0aaece9578ad416752f7e4d47bad6612dae376d3bec0d7bb4fc2c59b4f1d7107f8bd6115d94abb1e66afeee7c7e9bcd21b9786de12e771c3d5130c25315336b3df6d649880b366ead19941b32b4da965c9ead2acb20deeec3d4e920d840cae3f4bd1379b2891597310e9b2c9f84a7abfe4b256a5fc6d5f5e28d882ba85a1c4f1686eac55d7ea8f6726bfb3c7053800c9d9e4e73ece10fba33eccf9fb569d0c1f78939870a1c52d35f5095af1b433aec0f0c3eed7b949749ac9ca0cfc763c84eddab0bcb2fd034bffc0a0013e32e83ddd5708c3df6d15280e040ed055d21dda6ffc0737bc49b8d8287b814fbac030f304507fd5895e49978a75218331f8da3f361f8d4c28680ecd776fb909eb29b25fc353db6187fa5a703edb3e1d28af61f55ffe9109433092ef22deaf375a150905556a6ee3963aa3b5e88c07d052116c22749c12db204431b39a2bbffc618b73a4f88e8726fc2451e160c34bbc6d9f635bcdb93e7878092f82afb22a0610dea73fd384c405bbc4e417fa362cff75898ede6b8a57630477d76217531aeffa65d9ae743345cc9a0bea48fd652448d774c7802113a2960d203a1500715ecb9e816ce29adf02e2e60079276a1040a0f095f23ed63294c42e07a5156dfccc343bccb6668988d92148a5a8e70ce80c3036ab39a5bbbb0244fd72847a03c943d075a2ab0aff2d748ca9953a09fe660ab7385796e990a447491313f9121459a9efa0165323408df398c45aeca2246f3b97ba164b3f5b78de79bd9472e2a54d0b822e2abe3a032c5db376ddaec72d05227c744313f267a05efb4a984bc191d37403bb3280cb75dced45fdfc8900ff3d6cc5adf7d982afa75c1c9eaa65b83358a720371b067535b130123738e1ebd17277c6562e4faf3891e5d9de0680037daa2513c65e4560f903103575ebe89b372b603f204e9b8d8de298de4c4e71d51a96a6d873241d2d4a0be64f481a0e27534f046b50ab2fab2d6b169d0b775aed3754c30a983b10b123898939c19c66043e457e86b9dd91a7cef8352ff83334100ecb9cd4356fac027fa0a240130e6e28b8d0c33f2712aeca8392c6e42e6ec270fe08c1fc6c6c0656d954931e025d8894dbde65a565dc9b41fef049a595c8a6ec63c47179caa2532996643cbee7d3bc81e7b31e61554b052e360a6419fd2fb6d642af55dd3da5361843e775e75a9330d637b256a6fc9672b6eb022916ae0cc90170b84757ef5f579dd68b08e317f91aa4937176cfcf99116673c7bb7442c92803c981a9d2db6033a41aa7747c1381bb698f857a77253280bafc0cdf307aa79f83c6f727c1cb94f3941b150894039e2fd29865531477d680ebe788845e59779cbed97e55144af8eb032ff170d161f08f54236453389326197c3c7bec8db099fe7e57593578ec938b05db14c4d03ae27b317632147348fdefcd162236af604e236e9a169c61c093f449aa8575ace5a7962d813fa8b2915faadd886e19c225a873f590a812a0721c4325cad811914b3eb0b2d570f5a72403470fe598a83a306b4dc04a2b8493030056045caa970daf3839b43d4d678e35d48fc6bc8a3188fb53a6442fe0a1f7bd50bab244de9bed709aafed71ab50016d3a9fb315b404c6788adbc0f29ff4a5fa8ed31592d17b3251f1915609ecfe1e16ef539b4578a3bf145f434c3c048936aaa5fef696ea51dd2c04a89ec032bdd5b9a516a23b7732a63f6956622b3f858b2f7e4cb69d189abb973a626e305144ac4399a7239415cb4fd7e2f30dfe49771a97d987127f4cb06279993436a9b89855c7882019e773f3111eacb795c81c0a8798662a39d9fd717eca6f7577bd9e82ec0cf03f22b4c02281243f94ce81444941eda111ce6612a7da5e8cacb13b0e2fcb7e03c3121dff070ac4804fbe7e71442a16d006c6b087d9bc489f9406900e6aaca5b2cbd997228fc57c71a837bdfe49d3fa3b2a691b50a834e684e88122948607d35991b9a38d8431b5168712b2e2241aa4c16435175272eb99340bc374100049f1ffbd0920f7eb786107c7d3065fc93cc34c079682bb60fd5345357bff93ab85cc1c5ce9f9c000ffe9f60518570889ac351142ec2d445b4a9f5a0dead4a10f552441e4c07e588cdd85c03e2cf0da24200d773ec2cb0991dfd1934b839279c09d4d1893831f5e7d2b09181cfa2dd07a64e9ba1d3b2ef008f6af4d7e50fb1b30825e185112c15e5ccaf6662e4ef513b3cce4f7f46e1425928471b394b832d47ddd67061d4d49529f58735c0a040a70871b5e09099f26e1cf42ec40b2c5f092e58c27059e1ce8e637390a6c0e2e1d2c6f2b409afc755e0dcf746d139e2a7666b0db32a518b3d73412cedc597a782a3535f923177e5c91b41ed07065c95d82a789491debd149cec08ca357e7f456eef9a3044a470419b4b7049ab09abc04216dedff1052"}, 0x1004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001180)={'vxcan1\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000011c0)={@empty, 0x0}, &(0x7f0000001200)=0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000001340)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x8c, r3, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4800) r6 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001380), 0x228040, 0x0) ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f00000013c0)={0x3}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001400)) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000001480)=0xa0000) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000014c0)) connect$inet(r6, &(0x7f0000001500)={0x2, 0x4e22, @multicast2}, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001580), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, r9, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x2400c081) r10 = openat(0xffffffffffffffff, &(0x7f0000001680)='./file0\x00', 0x131000, 0x0) ioctl$KVM_CREATE_PIT2(r10, 0x4040ae77, &(0x7f00000016c0)={0x10001}) ioctl$sock_inet_tcp_SIOCOUTQ(r10, 0x5411, &(0x7f0000001700)) ioctl$KVM_CAP_VM_TYPES(r10, 0x4068aea3, &(0x7f0000001740)={0xeb, 0x0, 0xd}) socket$can_bcm(0x1d, 0x2, 0x2) r11 = getpgrp(0x0) syz_open_procfs(r11, &(0x7f00000017c0)='fd/4\x00') 486.5717ms ago: executing program 6 (id=1801): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x800, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x0, 0x5, 0x4cab, 0xe156, 0x0, 0x0, 0x60ff, 0x0, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 313.348303ms ago: executing program 1 (id=1802): userfaultfd(0x40800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x208, 0xfffffffe, 0x20000003}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) listen(r2, 0xb) socket(0x6, 0x80805, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@int=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0xa, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000080)) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000010ef17476000000000ff070902240001000000000904000001030002000921010100012205000905810300040c0000"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="2003180000001824a7ea3173fdb07da9dbf9829274b62efc1b896478a92d"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x40000000}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) epoll_create1(0x0) socket$kcm(0x1e, 0x2, 0x0) 306.275437ms ago: executing program 6 (id=1803): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)='$', 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) syz_usb_connect(0x3, 0x24, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="3c020900190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000dad70813317230ce6f06bf74d5b66bf380b970dc750b0ed1d8bb6281d3ea889845f9f55071638ac37d6486ef8c93d8a842a42bc7e83cf8e78dd8568b4f0000000000000043e5f19f7e4408623e18651d61be92b594e43a2fb00801c6b0294c91", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c00000000000000ac141408000000000000000000000000000000000000ff00000000000000000001000000fc020000000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000004d33c00000002000000ffffffff000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000003200000002000000ac141400000000000000000000000000ffffffff0002000000000000000000000300000020010000000000000000000000000001000000002b00000002000000fe880000000000000000000000000001000000000400"/500], 0x23c}}, 0x0) socket$kcm(0x1e, 0x1, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)='$', 0x1}], 0x1}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) eventfd(0xc) (async) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74}) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000e40)) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) (async) unshare(0x64000600) (async) syz_usb_connect(0x3, 0x24, 0x0, 0x0) (async) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="3c020900190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000dad70813317230ce6f06bf74d5b66bf380b970dc750b0ed1d8bb6281d3ea889845f9f55071638ac37d6486ef8c93d8a842a42bc7e83cf8e78dd8568b4f0000000000000043e5f19f7e4408623e18651d61be92b594e43a2fb00801c6b0294c91", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/500], 0x23c}}, 0x0) (async) 0s ago: executing program 6 (id=1804): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sessionid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0) r1 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x50, 0x2, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x10, 0x7, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x670, 0x8, 0x0, 0x2}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x5, 0x2, 0x6f, 0x40, 0x9}, 0x19, &(0x7f0000000240)={0x5, 0xf, 0x19, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x1, 0x0, 0xfff}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x8, 0x5}, @ptm_cap={0x3}]}, 0x1, [{0xe, &(0x7f0000000280)=@string={0xe, 0x3, "2b865ed98b583142b5f67095"}}]}) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000100)={0x0, 0x14, 0xffffffffffffffc8, "eb9a4780faf2447860a4889ea030308be35637eb865e15171cc9072515f1ae248f8e45b826881361702bd68ca322aa94e01307d6fece8dc5142d21c3e17758dcbec451daf1e9501df24fe0e7ec275201d4af804a412c2482b31b6b7b520f3fd1828e3238355cfa3ee2f863b577a6fcd726de9cf8f8c3a3f870e43d3be1bdc8517ce2415f9939d66e6bfed099c26a1a53a14308c6e7c52fbcd51c11cf039303fd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)) kernel console output (not intermixed with test programs): 454.185252][ T5837] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 454.262368][T11261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.271389][T11261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.285264][T11261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.298130][T11261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.315599][ T5837] usb 4-1: device descriptor read/64, error -71 [ 454.538951][T11264] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1286'. [ 454.565102][ T5837] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 454.695044][ T5837] usb 4-1: device descriptor read/64, error -71 [ 454.795322][ T5947] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 454.806018][ T5837] usb usb4-port1: attempt power cycle [ 454.949685][ T5947] usb 3-1: Using ep0 maxpacket: 16 [ 454.963326][ T5947] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.995138][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 455.012125][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 455.024873][ T5947] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 455.046510][ T5947] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.065053][ T5947] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 455.086763][ T5947] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 455.094831][ T5947] usb 3-1: Manufacturer: syz [ 455.134467][ T5947] usb 3-1: config 0 descriptor?? [ 455.165234][ T5837] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 455.180929][T11276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.192630][T11276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.208956][ T5837] usb 4-1: device descriptor read/8, error -71 [ 455.210779][T11276] gre3: entered promiscuous mode [ 455.220684][T11276] gre3: entered allmulticast mode [ 455.397962][T11282] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 455.465190][ T5837] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 455.497184][ T5837] usb 4-1: device descriptor read/8, error -71 [ 455.608564][T11272] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 455.615737][ T5837] usb usb4-port1: unable to enumerate USB device [ 455.627625][T11271] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 455.718316][T11263] sctp: [Deprecated]: syz.2.1286 (pid 11263) Use of int in max_burst socket option. [ 455.718316][T11263] Use struct sctp_assoc_value instead [ 456.745418][T11312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.754667][T11312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.958516][T11316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.968181][T11316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.204118][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'. [ 457.685044][ T5947] rc_core: IR keymap rc-hauppauge not found [ 457.691296][ T5947] Registered IR keymap rc-empty [ 457.696934][ T5947] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 457.725212][ T5947] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 457.746750][ T5947] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 457.760447][ T5947] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input36 [ 457.802654][ T5947] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 457.835599][ T5947] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 457.845384][ T48] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 457.886526][ T5947] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 457.916607][ T5947] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 457.945143][ T5947] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 457.965118][ T5947] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 458.005074][ T5947] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 458.035111][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 458.047402][ T5947] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 458.070388][ T48] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 458.081908][ T48] usb 4-1: config 6 has no interface number 0 [ 458.088948][ T48] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 458.100734][ T48] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 458.114037][ T48] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 458.134336][ T48] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 458.151214][ T48] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 458.165770][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.175413][ T48] usb 4-1: Product: syz [ 458.184150][ T48] usb 4-1: Manufacturer: syz [ 458.203312][ T48] usb 4-1: SerialNumber: syz [ 458.210671][ T5947] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 458.223632][ T48] hso 4-1:6.2: Failed to find BULK IN ep [ 458.367078][ T5947] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 458.483367][T11346] netlink: 'syz.5.1311': attribute type 1 has an invalid length. [ 458.511765][T11346] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1311'. [ 458.529610][ T5947] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 458.759697][ T5947] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 458.785864][ T48] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 458.795417][ T5947] usb 3-1: USB disconnect, device number 115 [ 458.945227][ T48] usb 6-1: Using ep0 maxpacket: 32 [ 459.021935][ T48] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 459.112463][ T48] usb 6-1: config 0 has no interface number 0 [ 459.148904][ T48] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 459.162607][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.191992][ T48] usb 6-1: Product: syz [ 459.214266][ T48] usb 6-1: Manufacturer: syz [ 459.264996][ T48] usb 6-1: SerialNumber: syz [ 459.300044][ T48] usb 6-1: config 0 descriptor?? [ 459.312720][ T48] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 459.534114][T11346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.550425][T11346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.632873][ T48] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 459.708806][ T48] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 459.757839][T11355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1314'. [ 459.818714][T11346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.865523][T11346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.157173][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 460.158670][ T5947] usb 6-1: USB disconnect, device number 65 [ 460.220836][ T5947] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 460.276865][T11361] input: syz1 as /devices/virtual/input/input37 [ 460.295980][ T5947] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 460.360362][ T5947] quatech2 6-1:0.51: device disconnected [ 460.462480][T11368] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 460.471726][T11368] syzkaller1: linktype set to 780 [ 460.605383][ T24] usb 4-1: USB disconnect, device number 113 [ 461.391058][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1321'. [ 461.495080][ T48] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 461.645231][ T48] usb 6-1: Using ep0 maxpacket: 32 [ 461.654637][ T48] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 461.663742][ T48] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 461.735271][ T48] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 461.745171][ T5837] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 461.745608][ T48] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 461.771286][T11407] bond3: entered promiscuous mode [ 461.806042][ T48] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 461.815545][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.823611][ T48] usb 6-1: Product: syz [ 462.022336][ T48] usb 6-1: Manufacturer: syz [ 462.029852][ T5837] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 462.041184][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.049767][ T5837] usb 4-1: Product: syz [ 462.069664][ T48] usb 6-1: SerialNumber: syz [ 462.069686][ T5837] usb 4-1: Manufacturer: syz [ 462.089195][ T5837] usb 4-1: SerialNumber: syz [ 462.109465][ T5837] usb 4-1: config 0 descriptor?? [ 462.129153][ T5837] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 462.313425][ T48] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 462.342539][ T48] usb 6-1: 2:1 : invalid channels 0 [ 462.424901][ T48] usb 6-1: USB disconnect, device number 66 [ 462.945281][T11400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.986953][T11400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.043024][ T48] usb 4-1: USB disconnect, device number 114 [ 463.119315][T11419] netlink: 'syz.2.1330': attribute type 11 has an invalid length. [ 463.335113][T11425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.366306][T11425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.565554][ T5837] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 463.728105][ T5837] usb 6-1: Using ep0 maxpacket: 16 [ 463.757346][ T5837] usb 6-1: config 4 has an invalid interface number: 51 but max is 0 [ 463.765883][ T5837] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 463.815132][ T5837] usb 6-1: config 4 has no interface number 0 [ 463.857591][ T5837] usb 6-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 463.912617][ T5837] usb 6-1: config 4 interface 51 has no altsetting 0 [ 463.945972][ T5837] usb 6-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 463.979778][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.001357][ T5837] usb 6-1: Product: syz [ 464.015262][ T5837] usb 6-1: Manufacturer: syz [ 464.031546][ T5837] usb 6-1: SerialNumber: syz [ 464.080884][ T5837] cdc_eem 6-1:4.51: probe with driver cdc_eem failed with error -22 [ 464.214346][ T30] audit: type=1326 audit(1749905595.457:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.3.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9c58e929 code=0x7ffc0000 [ 464.275533][ T30] audit: type=1326 audit(1749905595.477:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.3.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9c58e929 code=0x7ffc0000 [ 464.519721][T11453] netlink: 676 bytes leftover after parsing attributes in process `syz.1.1340'. [ 464.585127][T11453] netlink: 676 bytes leftover after parsing attributes in process `syz.1.1340'. [ 464.786287][ T5837] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 465.068750][T11459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.096850][T11459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.205124][ T5837] usb 4-1: device descriptor read/64, error -71 [ 465.272880][ T5903] usb 6-1: USB disconnect, device number 67 [ 465.466578][ T5837] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 465.615104][ T5837] usb 4-1: device descriptor read/64, error -71 [ 465.745596][ T5837] usb usb4-port1: attempt power cycle [ 465.785117][ T5903] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 465.899829][T11428] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1333'. [ 465.923038][T11428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1333'. [ 465.947513][T11428] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1333'. [ 465.967552][ T5903] usb 6-1: unable to get BOS descriptor or descriptor too short [ 465.982642][ T5903] usb 6-1: not running at top speed; connect to a high speed hub [ 466.002909][ T5903] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 466.019032][ T5903] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 466.031175][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.039730][ T5903] usb 6-1: Product: syz [ 466.044093][ T5903] usb 6-1: Manufacturer: syz [ 466.049329][ T5903] usb 6-1: SerialNumber: syz [ 466.079725][T11428] netlink: 'syz.2.1333': attribute type 2 has an invalid length. [ 466.095247][ T5837] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 466.117477][ T5837] usb 4-1: device descriptor read/8, error -71 [ 466.284738][ T5903] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 466.355236][ T5837] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 466.370339][ T5903] usb 6-1: USB disconnect, device number 68 [ 466.406010][ T5837] usb 4-1: device descriptor read/8, error -71 [ 466.453123][ T6134] udevd[6134]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.527753][ T5837] usb usb4-port1: unable to enumerate USB device [ 467.198944][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1348'. [ 467.368967][T11483] netlink: 'syz.5.1350': attribute type 10 has an invalid length. [ 467.377243][T11483] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1350'. [ 467.392569][T11483] bridge0: port 1(dummy0) entered blocking state [ 467.399486][T11483] bridge0: port 1(dummy0) entered disabled state [ 467.405251][ T5947] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 467.406414][T11483] dummy0: entered allmulticast mode [ 467.434366][T11483] bridge0: port 1(dummy0) entered blocking state [ 467.441022][T11483] bridge0: port 1(dummy0) entered forwarding state [ 467.595504][ T5947] usb 3-1: Using ep0 maxpacket: 32 [ 467.686044][ T5947] usb 3-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 467.695298][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.703375][ T5947] usb 3-1: Product: syz [ 467.720550][ T5947] usb 3-1: Manufacturer: syz [ 467.735400][ T5947] usb 3-1: SerialNumber: syz [ 467.746511][ T5947] usb 3-1: config 0 descriptor?? [ 467.953844][T11483] netlink: 'syz.5.1350': attribute type 4 has an invalid length. [ 467.976992][ T5947] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 468.015753][ T5947] usb 3-1: USB disconnect, device number 116 [ 468.035508][ T24] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 468.165613][T11492] gretap1: entered allmulticast mode [ 468.205605][ T24] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 468.218338][ T24] usb 4-1: config 0 has no interface number 0 [ 468.231556][ T24] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 468.241288][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.250123][ T24] usb 4-1: Product: syz [ 468.256112][ T24] usb 4-1: Manufacturer: syz [ 468.260849][ T24] usb 4-1: SerialNumber: syz [ 468.276912][ T24] usb 4-1: config 0 descriptor?? [ 468.377790][T11496] trusted_key: encrypted_key: insufficient parameters specified [ 468.707747][ T24] usb 4-1: Firmware version (0.0) predates our first public release. [ 468.837398][ T24] usb 4-1: Please update to version 0.2 or newer [ 469.232149][ T24] usb 4-1: USB disconnect, device number 119 [ 469.488451][T11524] netlink: 'syz.2.1358': attribute type 1 has an invalid length. [ 469.604574][T11527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.614115][T11527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.711099][T11524] bond4: entered promiscuous mode [ 469.711252][T11531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.725122][T11524] bond4: entered allmulticast mode [ 470.968348][ T5950] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 471.157455][ T5950] usb 6-1: config 0 has no interfaces? [ 471.171331][ T5950] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 471.180831][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.189436][ T5950] usb 6-1: Product: syz [ 471.193845][ T5950] usb 6-1: Manufacturer: syz [ 471.199539][ T5950] usb 6-1: SerialNumber: syz [ 471.229381][ T5950] usb 6-1: config 0 descriptor?? [ 471.255311][ T30] audit: type=1326 audit(1749905602.487:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 471.282763][ T30] audit: type=1326 audit(1749905602.487:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 471.332854][ T30] audit: type=1326 audit(1749905602.487:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 471.413342][ T30] audit: type=1326 audit(1749905602.487:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 471.731751][T11558] netlink: 'syz.2.1366': attribute type 49 has an invalid length. [ 472.114285][T11558] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1366'. [ 472.340497][ T30] audit: type=1326 audit(1749905602.487:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 472.463647][ T30] audit: type=1326 audit(1749905602.487:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 472.577452][ T30] audit: type=1326 audit(1749905602.487:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 472.645258][ T5903] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 472.686109][ T30] audit: type=1326 audit(1749905602.487:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 472.762000][ T30] audit: type=1326 audit(1749905602.487:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 472.812228][ T5903] usb 3-1: too many configurations: 61, using maximum allowed: 8 [ 472.831568][ T5903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.854076][ T5903] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 472.945063][ T30] audit: type=1326 audit(1749905602.487:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 473.006486][ T5903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.030429][ T5903] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.100523][ T5903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.121994][ T5903] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.140542][T11573] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.1370'. [ 473.153649][ T5903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.168380][ T5903] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.169515][T11573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1370'. [ 473.194053][ T5903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.219088][ T5903] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.243444][ T5903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.258266][ T5903] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.289624][ T5903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.306818][ T5903] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.364251][ T5903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.377316][ T5903] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.396590][ T5903] usb 3-1: New USB device found, idVendor=1d6b, idProduct=ecd1, bcdDevice=e9.02 [ 473.406986][ T5903] usb 3-1: New USB device strings: Mfr=46, Product=133, SerialNumber=240 [ 473.416791][ T5903] usb 3-1: Product: syz [ 473.421174][ T5903] usb 3-1: Manufacturer: syz [ 473.426379][ T5903] usb 3-1: SerialNumber: syz [ 473.693551][ T5903] usb 3-1: USB disconnect, device number 117 [ 473.954156][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1372'. [ 474.129343][ T5903] usb 6-1: USB disconnect, device number 69 [ 474.671629][T11592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.738125][T11592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.090140][T11596] wireguard: wg1: Could not create IPv4 socket [ 475.215051][ T5837] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 475.355137][ T5837] usb 4-1: device descriptor read/64, error -71 [ 475.635167][ T5837] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 475.835079][ T5837] usb 4-1: device descriptor read/64, error -71 [ 475.945404][ T5837] usb usb4-port1: attempt power cycle [ 475.961580][T11614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.971068][T11614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.195194][ T24] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 476.308361][ T5837] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 476.375224][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 476.393459][ T24] usb 3-1: config 0 has an invalid interface number: 175 but max is 0 [ 476.393870][ T5837] usb 4-1: device descriptor read/8, error -71 [ 476.414347][ T24] usb 3-1: config 0 has no interface number 0 [ 476.427704][ T24] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=bc.ed [ 476.437047][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.447991][ T24] usb 3-1: Product: syz [ 476.452175][ T24] usb 3-1: Manufacturer: syz [ 476.459070][ T24] usb 3-1: SerialNumber: syz [ 476.473033][ T24] usb 3-1: config 0 descriptor?? [ 476.655065][ T5837] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 476.675896][ T5837] usb 4-1: device descriptor read/8, error -71 [ 476.772159][ T24] usbserial_generic 3-1:0.175: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 476.789425][ T5837] usb usb4-port1: unable to enumerate USB device [ 476.958125][ T24] usbserial_generic 3-1:0.175: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 476.969386][ T24] usbserial_generic 3-1:0.175: device has no bulk endpoints [ 476.985995][ T24] safe_serial 3-1:0.175: safe_serial converter detected [ 476.993415][ T24] safe_serial 3-1:0.175: probe with driver safe_serial failed with error -22 [ 477.238219][ T24] usb 3-1: USB disconnect, device number 118 [ 477.776867][ T24] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 477.916140][ T24] usb 3-1: device descriptor read/64, error -71 [ 478.009628][T11631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1387'. [ 478.061553][T11626] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.175125][ T24] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 478.319695][ T24] usb 3-1: device descriptor read/64, error -71 [ 478.375207][ T5903] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 478.465675][ T24] usb usb3-port1: attempt power cycle [ 478.576317][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 478.649189][ T5903] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 478.673911][ T5903] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 478.683599][T11635] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(16) [ 478.690257][T11635] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 478.715614][ T5903] usb 4-1: config 0 has no interface number 0 [ 478.721826][ T5903] usb 4-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 478.761925][T11635] vhci_hcd vhci_hcd.0: Device attached [ 478.768753][ T5903] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 478.791294][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.798279][T11642] sctp: [Deprecated]: syz.6.1390 (pid 11642) Use of int in maxseg socket option. [ 478.798279][T11642] Use struct sctp_assoc_value instead [ 478.813591][ T5903] usb 4-1: config 0 descriptor?? [ 478.855167][ T24] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 478.876643][ T24] usb 3-1: device descriptor read/8, error -71 [ 478.942384][ T5947] vhci_hcd: vhci_device speed not set [ 479.005109][ T5947] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 479.124434][ T5903] usb 4-1: USB disconnect, device number 124 [ 479.230622][ T24] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 479.258439][T11652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.375932][ T24] usb 3-1: device descriptor read/8, error -71 [ 479.402033][T11648] input: syz1 as /devices/virtual/input/input38 [ 479.415792][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 479.415826][ T30] audit: type=1326 audit(1749905610.667:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.5.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321038e929 code=0x7fc00000 [ 479.461529][T11636] vhci_hcd: connection reset by peer [ 479.495375][ T24] usb usb3-port1: unable to enumerate USB device [ 479.523660][ T8833] vhci_hcd: stop threads [ 479.529060][ T8833] vhci_hcd: release socket [ 479.533651][ T8833] vhci_hcd: disconnect device [ 479.556314][ T30] audit: type=1326 audit(1749905610.667:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.5.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f321038e929 code=0x7fc00000 [ 479.693396][ T30] audit: type=1326 audit(1749905610.667:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.5.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321038e929 code=0x7fc00000 [ 479.768243][ T30] audit: type=1326 audit(1749905610.667:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.5.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321038e929 code=0x7fc00000 [ 479.992798][ T30] audit: type=1326 audit(1749905610.667:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.5.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321038e929 code=0x7fc00000 [ 480.016736][ T30] audit: type=1326 audit(1749905610.667:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.5.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321038e929 code=0x7fc00000 [ 480.049574][ T30] audit: type=1326 audit(1749905610.667:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.5.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321038e929 code=0x7fc00000 [ 480.143422][ T30] audit: type=1326 audit(1749905610.667:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.5.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321038e929 code=0x7fc00000 [ 480.227867][ T30] audit: type=1326 audit(1749905610.667:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.5.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321038e929 code=0x7fc00000 [ 480.424440][ T30] audit: type=1326 audit(1749905610.667:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.5.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321038e929 code=0x7fc00000 [ 481.065122][ T5950] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 481.118307][T11669] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1395'. [ 481.225637][ T5950] usb 3-1: Using ep0 maxpacket: 8 [ 481.238723][ T5950] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 481.250073][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.273673][ T5950] usb 3-1: Product: syz [ 481.307426][ T5950] usb 3-1: Manufacturer: syz [ 481.312333][ T5950] usb 3-1: SerialNumber: syz [ 481.328394][ T5950] usb 3-1: config 0 descriptor?? [ 481.548872][T11662] input: syz1 as /devices/virtual/input/input39 [ 481.599993][ T5950] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 482.015218][ T24] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 482.216271][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.232384][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.262964][ T24] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 482.276521][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.335096][ T5837] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 482.343948][ T24] usb 6-1: config 0 descriptor?? [ 482.505290][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 482.514398][ T5837] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 482.527320][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.545615][ T5154] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 482.629867][ T5837] usb 4-1: config 0 has no interface number 0 [ 482.703009][ T5837] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 482.719423][ T5950] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 482.761267][ T5837] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 482.762737][ T24] hid (null): invalid report_count 36617 [ 482.776540][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.823804][ T24] razer 0003:1532:010E.0017: invalid report_count 36617 [ 482.834386][ T24] razer 0003:1532:010E.0017: item 0 2 1 9 parsing failed [ 482.835090][ T5837] usb 4-1: Product: syz [ 482.843611][ T24] razer 0003:1532:010E.0017: probe with driver razer failed with error -22 [ 482.858768][T11691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.872356][T11691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.910774][ T5837] usb 4-1: Manufacturer: syz [ 482.918919][ T5837] usb 4-1: SerialNumber: syz [ 482.958021][ T5837] usb 4-1: config 0 descriptor?? [ 482.965363][ T24] usb 6-1: USB disconnect, device number 70 [ 482.968885][ T5837] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 483.034044][ T5837] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 483.167306][ T5837] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 483.435162][T11684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.444155][T11684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.471574][ T5837] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 483.509915][ T5837] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 483.533609][ T5837] usb 4-1: USB disconnect, device number 125 [ 483.541489][ T5837] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 483.651633][T11700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.660731][T11700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.671032][T11700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.680478][T11700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.900668][ T5837] usb 3-1: USB disconnect, device number 123 [ 484.035232][T11705] binder: binder_mmap: 11704 200000ffc000-200000ffe000 bad vm_flags failed -1 [ 484.127773][T11709] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 484.135909][ T5947] vhci_hcd: vhci_device speed not set [ 484.528037][ T9] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 484.735983][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 484.752188][ T9] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 484.762378][ T9] usb 3-1: config 0 has no interface number 0 [ 484.774053][ T9] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 484.797103][ T9] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 484.814566][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.832007][ T9] usb 3-1: Product: syz [ 484.837570][ T9] usb 3-1: Manufacturer: syz [ 484.842221][ T9] usb 3-1: SerialNumber: syz [ 484.861463][ T9] usb 3-1: config 0 descriptor?? [ 484.882618][ T9] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 484.893561][ T9] em28xx 3-1:0.132: Video interface 132 found: [ 485.276184][ T9] em28xx 3-1:0.132: chip ID is em2884 [ 485.407829][T11725] block device autoloading is deprecated and will be removed. [ 485.422914][T11725] syz.3.1412: attempt to access beyond end of device [ 485.422914][T11725] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 485.821793][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1415'. [ 485.907049][T11740] 8021q: VLANs not supported on ip6_vti0 [ 486.084053][T11743] xt_CT: You must specify a L4 protocol and not use inversions on it [ 486.372641][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 486.372662][ T30] audit: type=1326 audit(1749905617.617:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11744 comm="syz.5.1418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f321038e929 code=0x0 [ 486.569221][ T5154] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 486.578193][ T5154] Bluetooth: hci4: Injecting HCI hardware error event [ 486.587913][ T5838] Bluetooth: hci4: hardware error 0x00 [ 486.626945][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 486.662046][T11711] em28xx 3-1:0.132: failed to trigger write to i2c address 0x28 (error=-5) [ 486.675149][ T9] em28xx 3-1:0.132: board has no eeprom [ 486.765062][ T9] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 486.776059][ T9] em28xx 3-1:0.132: analog set to bulk mode. [ 486.782418][ T5950] em28xx 3-1:0.132: Registering V4L2 extension [ 486.792296][ T5947] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 486.822659][ T9] usb 3-1: USB disconnect, device number 124 [ 486.853286][ T9] em28xx 3-1:0.132: Disconnecting em28xx [ 486.892384][T11741] syz.3.1415 (11741): drop_caches: 1 [ 486.968113][ T5947] usb 6-1: Using ep0 maxpacket: 32 [ 486.980769][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.002022][ T5947] usb 6-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 487.032523][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1423'. [ 487.045330][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.060848][ T5947] usb 6-1: config 0 descriptor?? [ 487.285494][ T24] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 487.368407][ T5950] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 487.383814][ T5950] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 487.402441][ T5950] em28xx 3-1:0.132: No AC97 audio processor [ 487.429617][ T5950] usb 3-1: Decoder not found [ 487.434376][ T5950] em28xx 3-1:0.132: failed to create media graph [ 487.448422][ T5950] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 487.465213][ T24] usb 4-1: device descriptor read/64, error -71 [ 487.468283][ T5950] em28xx 3-1:0.132: Remote control support is not available for this card. [ 487.490104][ T9] em28xx 3-1:0.132: Closing input extension [ 487.541625][ T9] em28xx 3-1:0.132: Freeing device [ 487.644436][T11780] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_team, syncid = 67108897, id = 0 [ 487.725368][ T24] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 487.791146][T11782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.802726][T11782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.875223][ T24] usb 4-1: device descriptor read/64, error -71 [ 487.991961][ T24] usb usb4-port1: attempt power cycle [ 488.343137][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 488.386286][ T24] usb 4-1: device descriptor read/8, error -71 [ 488.455368][ T5910] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 488.625033][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 488.625181][ T5838] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 488.647087][ T5910] usb 3-1: config 0 has no interfaces? [ 488.652837][ T5910] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 488.662280][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 488.773936][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.786042][ T24] usb 4-1: device descriptor read/8, error -71 [ 488.796194][ T5910] usb 3-1: config 0 descriptor?? [ 488.920355][ T24] usb usb4-port1: unable to enumerate USB device [ 489.336047][ T5947] usbhid 6-1:0.0: can't add hid device: -71 [ 489.360590][ T5947] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 489.425790][ T5947] usb 6-1: USB disconnect, device number 71 [ 490.350988][T11809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1438'. [ 490.367164][T11809] vlan2: entered promiscuous mode [ 490.377138][T11809] syz_tun: entered promiscuous mode [ 491.153698][ T5903] usb 3-1: USB disconnect, device number 125 [ 491.406094][T11824] netlink: 'syz.6.1443': attribute type 10 has an invalid length. [ 491.415565][ T5950] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 491.441670][T11824] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.449595][T11824] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.501217][T11826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 491.514819][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1444'. [ 491.544532][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1443'. [ 491.604490][T11824] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.611708][T11824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.617020][ T5950] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 491.619378][T11824] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.635164][T11824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.653148][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.683360][ T5950] usb 4-1: config 0 descriptor?? [ 491.709440][ T5950] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 491.746396][T11824] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 492.085231][T11830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.131973][T11830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.304581][T11826] team0 (unregistering): Port device team_slave_0 removed [ 492.344771][T11826] team0 (unregistering): Port device team_slave_1 removed [ 492.441461][T11827] bridge_slave_1: left allmulticast mode [ 492.455354][T11827] bridge_slave_1: left promiscuous mode [ 492.465201][T11827] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.491531][T11827] bridge_slave_0: left allmulticast mode [ 492.503750][T11827] bridge_slave_0: left promiscuous mode [ 492.511235][T11827] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.545973][ T5950] usb 4-1: USB disconnect, device number 4 [ 492.582975][T11827] bond0: (slave bridge0): Releasing backup interface [ 492.864133][T11837] fuse: Unknown parameter '/Æ^í9RðÐ]9ȪHF' [ 492.916441][T11837] Cannot find set identified by id 0 to match [ 492.928947][T11838] Cannot find set identified by id 0 to match [ 493.034185][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'. [ 493.475139][ T48] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 493.495502][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 493.590858][T11864] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 493.647191][ T48] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 493.657493][ T48] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.670976][ T24] usb 4-1: too many configurations: 84, using maximum allowed: 8 [ 493.678800][ T48] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 493.688490][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.698453][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 493.706247][ T24] usb 4-1: can't read configurations, error -61 [ 493.855203][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 493.920208][ T48] usb 6-1: GET_CAPABILITIES returned 0 [ 493.925915][ T48] usbtmc 6-1:16.0: can't read capabilities [ 494.025822][ T24] usb 4-1: too many configurations: 84, using maximum allowed: 8 [ 494.038128][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 494.063679][ T24] usb 4-1: can't read configurations, error -61 [ 494.074098][ T24] usb usb4-port1: attempt power cycle [ 494.083387][T11866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.094593][T11866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.189299][ T5950] usb 6-1: USB disconnect, device number 72 [ 494.258821][T11868] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.685117][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 494.707244][ T24] usb 4-1: too many configurations: 84, using maximum allowed: 8 [ 494.738621][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 494.754184][ T24] usb 4-1: can't read configurations, error -61 [ 494.905251][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 494.931042][ T24] usb 4-1: too many configurations: 84, using maximum allowed: 8 [ 494.946006][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 494.957683][ T24] usb 4-1: can't read configurations, error -61 [ 494.968251][ T24] usb usb4-port1: unable to enumerate USB device [ 495.139695][ T5950] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 495.295168][ T5950] usb 6-1: Using ep0 maxpacket: 32 [ 495.312049][ T5950] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 495.334262][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 495.354203][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 495.381052][ T5950] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 495.422791][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 495.459482][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 495.502184][ T5950] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 495.580437][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.593586][ T5950] usb 6-1: Product: syz [ 495.599906][ T5950] usb 6-1: Manufacturer: syz [ 495.609675][ T5950] usb 6-1: SerialNumber: syz [ 495.629158][ T5950] usb 6-1: config 0 descriptor?? [ 496.632683][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'. [ 498.328947][ T48] usb 6-1: USB disconnect, device number 73 [ 498.475235][ T5154] Bluetooth: hci0: command 0x0406 tx timeout [ 498.555078][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 498.614359][T11915] loop6: detected capacity change from 0 to 63 [ 498.648211][ T6134] buffer_io_error: 41 callbacks suppressed [ 498.648231][ T6134] Buffer I/O error on dev loop6, logical block 0, async page read [ 498.701784][T11915] Buffer I/O error on dev loop6, logical block 0, async page read [ 498.725179][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 498.734364][T11915] Buffer I/O error on dev loop6, logical block 0, async page read [ 498.741306][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 498.762255][ T6134] Buffer I/O error on dev loop6, logical block 0, async page read [ 498.771494][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.771982][ T6134] Buffer I/O error on dev loop6, logical block 0, async page read [ 498.790023][ T24] usb 4-1: Product: syz [ 498.794731][ T24] usb 4-1: Manufacturer: syz [ 498.805400][ T24] usb 4-1: SerialNumber: syz [ 498.811486][ T6134] Buffer I/O error on dev loop6, logical block 0, async page read [ 498.836339][ T24] usb 4-1: config 0 descriptor?? [ 498.856136][ T24] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 498.857966][ T6134] Buffer I/O error on dev loop6, logical block 0, async page read [ 498.891814][ T6134] Buffer I/O error on dev loop6, logical block 0, async page read [ 498.906708][ T6134] Buffer I/O error on dev loop6, logical block 3, async page read [ 499.279331][T11907] loop6: detected capacity change from 0 to 32 [ 499.478255][T11907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1470'. [ 499.489921][T11912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.525489][T11912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.691212][ T24] gspca_sonixj: reg_w1 err -71 [ 499.709380][ T24] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 499.756629][ T24] usb 4-1: USB disconnect, device number 9 [ 499.880505][T11934] netlink: 'syz.6.1476': attribute type 4 has an invalid length. [ 499.927981][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 500.455326][ T24] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 500.588500][ T5947] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 500.600156][ T5947] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 500.621338][ T24] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 500.630211][ T24] usb 6-1: config 0 has no interface number 0 [ 500.656177][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 500.669805][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.728517][ T24] usb 6-1: Product: syz [ 500.732770][ T24] usb 6-1: Manufacturer: syz [ 500.738427][ T24] usb 6-1: SerialNumber: syz [ 500.762842][ T24] usb 6-1: config 0 descriptor?? [ 500.992309][ T24] usb 6-1: Found UVC 0.08 device syz (046d:0823) [ 501.009799][ T24] usb 6-1: No valid video chain found. [ 501.044375][ T24] usb 6-1: USB disconnect, device number 74 [ 501.055183][T11962] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=576 (1152 ns) > initial count (128 ns). Using initial count to start timer. [ 501.518633][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.525539][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.752867][T11970] loop8: detected capacity change from 0 to 7 [ 501.773784][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 501.783092][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 501.805044][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 501.823755][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 501.851332][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 501.864761][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 501.875680][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 501.892116][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 501.901409][T11970] ldm_validate_partition_table(): Disk read failed. [ 501.942031][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 501.984130][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 502.013675][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 502.025522][T11970] Dev loop8: unable to read RDB block 0 [ 502.037497][T11970] loop8: unable to read partition table [ 502.067420][T11970] loop8: partition table beyond EOD, truncated [ 502.132847][T11970] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 503.005156][ T48] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 503.366733][ T48] usb 3-1: device descriptor read/64, error -71 [ 503.695073][ T48] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 504.015067][ T48] usb 3-1: device descriptor read/64, error -71 [ 504.183673][ T48] usb usb3-port1: attempt power cycle [ 504.555055][ T48] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 504.636028][ T48] usb 3-1: device descriptor read/8, error -71 [ 505.365222][ T48] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 505.446756][ T48] usb 3-1: device descriptor read/8, error -71 [ 505.625509][ T48] usb usb3-port1: unable to enumerate USB device [ 506.112154][T12022] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 506.124218][T12022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.133470][T12022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.792672][ T30] audit: type=1326 audit(1749905638.027:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12025 comm="syz.2.1500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff523d8e929 code=0x0 [ 508.153760][T12047] xt_CT: No such helper "snmp" [ 508.166977][T12047] tipc: Started in network mode [ 508.172256][T12047] tipc: Node identity , cluster identity 4711 [ 508.182740][T12047] tipc: Failed to obtain node identity [ 508.192751][T12047] tipc: Enabling of bearer rejected, failed to enable media [ 508.302386][T12051] snd_dummy snd_dummy.0: control 6:0:128:syz1:65536 is already present [ 508.467453][ T30] audit: type=1804 audit(1749905639.717:1335): pid=12053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1508" name="/" dev="pidfs" ino=12055 res=1 errno=0 [ 508.487589][ C1] vkms_vblank_simulate: vblank timer overrun [ 508.645092][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 508.795138][ T24] usb 3-1: device descriptor read/64, error -71 [ 509.050844][T12073] netlink: 'syz.5.1513': attribute type 10 has an invalid length. [ 509.059296][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 509.117886][T12078] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1513'. [ 509.136426][T12073] veth0_vlan: left promiscuous mode [ 509.151095][T12073] veth0_vlan: entered promiscuous mode [ 509.164877][T12073] team0: Device veth0_vlan failed to register rx_handler [ 509.221113][ T24] usb 3-1: device descriptor read/64, error -71 [ 509.253920][T12078] vlan4: entered promiscuous mode [ 509.346575][ T24] usb usb3-port1: attempt power cycle [ 509.449133][T12085] veth1_macvtap: left promiscuous mode [ 509.454832][T12085] macsec0: entered promiscuous mode [ 509.471350][T12085] veth1_macvtap: entered promiscuous mode [ 509.479977][T12085] macsec0: left promiscuous mode [ 509.655365][ T5947] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 509.735062][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 509.756994][ T24] usb 3-1: device descriptor read/8, error -71 [ 509.825314][ T5947] usb 6-1: Using ep0 maxpacket: 8 [ 509.839201][ T5947] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 509.887064][ T5947] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 509.919789][ T5947] usb 6-1: Product: syz [ 509.941332][ T5947] usb 6-1: Manufacturer: syz [ 509.954618][ T5947] usb 6-1: SerialNumber: syz [ 509.991251][ T5947] usb 6-1: config 0 descriptor?? [ 510.005545][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 510.050484][ T5947] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 510.069034][ T24] usb 3-1: device descriptor read/8, error -71 [ 510.147635][T12090] loop4: detected capacity change from 0 to 524255232 [ 510.217073][ T24] usb usb3-port1: unable to enumerate USB device [ 510.462558][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1520'. [ 510.611032][T12097] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1520'. [ 510.640851][ T5947] input: gspca_zc3xx as /devices/platform/dummy_hcd.5/usb6/6-1/input/input41 [ 511.900561][T12126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1526'. [ 511.938337][T12126] vlan3: entered promiscuous mode [ 511.979330][T12126] syz_tun: entered promiscuous mode [ 512.143759][T12131] syz.2.1528(12131): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 512.405107][ T5947] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 512.503773][ T5903] usb 6-1: USB disconnect, device number 75 [ 512.576212][ T5947] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 512.605673][ T5947] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 512.631581][ T5947] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 512.673962][ T5947] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 512.710965][ T5947] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 512.723870][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 512.733228][ T5947] usb 4-1: Product: syz [ 512.741670][ T5947] usb 4-1: Manufacturer: syz [ 512.758993][ T5947] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 512.945246][ T5903] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 513.095256][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 513.102087][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.113733][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.125162][ T5947] usb 4-1: USB disconnect, device number 10 [ 513.132118][ T5903] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 513.144553][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.167469][ T5903] usb 6-1: config 0 descriptor?? [ 513.700217][T12156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.709739][T12156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.722008][T12156] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 513.732584][T12156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.741983][T12156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.781046][ T5903] corsair 0003:1B1C:1B02.0019: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 513.850375][ T5903] corsair 0003:1B1C:1B02.0019: Failed to get K90 initial state (error 0). [ 514.084606][T12141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.098760][T12141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.114127][ T5947] usb 6-1: USB disconnect, device number 76 [ 514.203044][T12157] fido_id[12157]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 514.515217][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 514.665452][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 514.736482][ T9] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 514.761989][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.774585][ T9] usb 3-1: Product: syz [ 514.782047][ T9] usb 3-1: Manufacturer: syz [ 514.787033][ T9] usb 3-1: SerialNumber: syz [ 514.808574][ T9] usb 3-1: config 0 descriptor?? [ 514.833326][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 515.032252][T12163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.045763][T12163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.055545][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1540'. [ 515.180663][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1542'. [ 515.228668][T12180] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 515.255208][T12180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.373398][ T9] gspca_sq930x: reg_r 001f failed -110 [ 515.396066][ T9] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 515.736469][T12195] bridge0: port 2(macsec0) entered blocking state [ 515.752447][T12195] bridge0: port 2(macsec0) entered disabled state [ 515.760045][T12195] macsec0: entered allmulticast mode [ 515.767615][T12195] veth1_macvtap: entered allmulticast mode [ 515.777704][T12195] macsec0: entered promiscuous mode [ 515.783743][T12195] bridge0: port 2(macsec0) entered blocking state [ 515.791527][T12195] bridge0: port 2(macsec0) entered forwarding state [ 515.809121][T12195] bridge0: mtu less than device minimum [ 515.875078][ T9] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 516.046931][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 516.070209][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 516.086777][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.103906][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 516.113655][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 516.127526][ T9] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 516.143445][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 516.160540][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.172110][ T9] usb 4-1: Product: syz [ 516.178803][ T9] usb 4-1: Manufacturer: syz [ 516.183746][ T9] usb 4-1: SerialNumber: syz [ 516.455834][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 516.482455][ T9] usb 4-1: 0:2 : does not exist [ 516.715136][ T9] usb 4-1: USB disconnect, device number 11 [ 517.528266][ T48] usb 3-1: USB disconnect, device number 8 [ 518.461103][T12230] input: syz0 as /devices/virtual/input/input42 [ 519.064079][T12248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.099940][T12248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.117597][T12248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.164549][T12248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.845113][ T48] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 519.995158][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 520.020169][ T48] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 520.035219][ T48] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 520.047190][ T48] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 520.065814][ T48] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 520.078529][ T48] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.092202][ T48] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 520.101564][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.388216][ T48] usb 3-1: usb_control_msg returned -32 [ 520.402934][ T48] usbtmc 3-1:16.0: can't read capabilities [ 520.655069][ T5947] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 520.795243][ T5947] usb 6-1: device descriptor read/64, error -71 [ 520.952763][T12271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.962871][T12271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.035106][ T5947] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 521.165065][ T5947] usb 6-1: device descriptor read/64, error -71 [ 521.276325][ T5947] usb usb6-port1: attempt power cycle [ 521.615334][ T5947] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 521.656020][ T5947] usb 6-1: device descriptor read/8, error -71 [ 521.676020][T12280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.688483][T12280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.700090][ T30] audit: type=1326 audit(1749905652.947:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12279 comm="syz.1.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee18e929 code=0x7ffc0000 [ 521.715010][T12280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.723397][ T5837] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 521.739379][ T30] audit: type=1326 audit(1749905652.947:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12279 comm="syz.1.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee18e929 code=0x7ffc0000 [ 521.741816][T12280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.769663][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.771375][ T30] audit: type=1326 audit(1749905652.947:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12279 comm="syz.1.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f4eee18e929 code=0x7ffc0000 [ 521.805418][ T30] audit: type=1326 audit(1749905652.947:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12279 comm="syz.1.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee18e929 code=0x7ffc0000 [ 521.842770][ T30] audit: type=1326 audit(1749905652.947:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12279 comm="syz.1.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4eee18e929 code=0x7ffc0000 [ 521.866325][ T30] audit: type=1326 audit(1749905652.947:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12279 comm="syz.1.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee18e929 code=0x7ffc0000 [ 521.894275][ T30] audit: type=1326 audit(1749905652.947:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12279 comm="syz.1.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4eee18e929 code=0x7ffc0000 [ 521.922228][ T5947] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 521.931204][ T30] audit: type=1326 audit(1749905652.947:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12279 comm="syz.1.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee18e929 code=0x7ffc0000 [ 521.953819][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 521.960851][ T5947] usb 6-1: device descriptor read/8, error -71 [ 521.967933][ T30] audit: type=1326 audit(1749905652.947:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12279 comm="syz.1.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f4eee18e929 code=0x7ffc0000 [ 521.993455][ T30] audit: type=1326 audit(1749905652.947:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12279 comm="syz.1.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee18e929 code=0x7ffc0000 [ 522.026009][ T5837] usb 4-1: unable to get BOS descriptor or descriptor too short [ 522.034752][ T5837] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 522.042663][ T5837] usb 4-1: can't read configurations, error -71 [ 522.075707][ T5947] usb usb6-port1: unable to enumerate USB device [ 522.551090][ T5947] usb 3-1: USB disconnect, device number 9 [ 523.095194][ T5837] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 523.140606][T12298] netlink: 'syz.1.1575': attribute type 10 has an invalid length. [ 523.150352][T12298] macvlan0: entered allmulticast mode [ 523.162585][T12298] veth1_vlan: entered allmulticast mode [ 523.174708][T12298] team0: Port device macvlan0 added [ 523.225362][ T5947] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 523.257459][ T5837] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 523.280151][ T5837] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 523.298246][ T5837] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 523.309476][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 523.324446][ T5837] usb 4-1: SerialNumber: syz [ 523.375276][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 523.390818][ T5947] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 523.419645][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 523.464367][ T5947] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 523.482604][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.491524][ T5947] usb 3-1: Product: syz [ 523.497932][ T5947] usb 3-1: Manufacturer: syz [ 523.502749][ T5947] usb 3-1: SerialNumber: syz [ 523.516632][ T5947] usb 3-1: config 0 descriptor?? [ 523.566604][ T5837] usb 4-1: 0:2 : does not exist [ 523.571605][ T5837] usb 4-1: unit 5: unexpected type 0x0a [ 523.681291][ T5837] usb 4-1: USB disconnect, device number 13 [ 523.715416][ T5947] rc_core: IR keymap rc-streamzap not found [ 523.771472][ T5947] Registered IR keymap rc-empty [ 523.811758][ T5947] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 523.851812][ T6187] udevd[6187]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.925766][ T5947] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input44 [ 524.235501][ T9] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 524.476278][ T9] usb 6-1: too many configurations: 65, using maximum allowed: 8 [ 524.531518][ T9] usb 6-1: config 0 has no interfaces? [ 524.682192][ T5947] usb 3-1: USB disconnect, device number 10 [ 524.722379][ T9] usb 6-1: config 0 has no interfaces? [ 524.739979][ T9] usb 6-1: config 0 has no interfaces? [ 524.753577][ T9] usb 6-1: config 0 has no interfaces? [ 524.772443][ T9] usb 6-1: config 0 has no interfaces? [ 524.783278][ T9] usb 6-1: config 0 has no interfaces? [ 524.794075][ T9] usb 6-1: config 0 has no interfaces? [ 524.806116][ T9] usb 6-1: config 0 has no interfaces? [ 524.811766][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 524.823188][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.858892][ T9] usb 6-1: config 0 descriptor?? [ 525.092665][T12329] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1583'. [ 525.136996][T12318] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 525.197564][T12333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1584'. [ 525.227748][T12318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.239258][T12318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.455259][ T5947] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 525.625025][ T5947] usb 4-1: Using ep0 maxpacket: 8 [ 525.783027][ T5947] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.801250][ T5947] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 525.826821][ T5947] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 525.836573][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.867395][ T5947] usb 4-1: Product: syz [ 525.890208][ T5947] usb 4-1: Manufacturer: syz [ 525.910058][ T5947] usb 4-1: SerialNumber: syz [ 526.364821][ T5947] usb 4-1: 0:2 : does not exist [ 526.582638][ T5947] usb 4-1: USB disconnect, device number 14 [ 527.566925][ T24] usb 6-1: USB disconnect, device number 81 [ 528.041675][T12373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.077207][T12373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.145239][ T5947] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 528.317490][ T5947] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 528.327102][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.340631][ T5947] usb 6-1: Product: syz [ 528.346407][ T5947] usb 6-1: Manufacturer: syz [ 528.351382][ T5947] usb 6-1: SerialNumber: syz [ 528.580235][T12366] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1596'. [ 529.432341][ T5947] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 529.440201][ T5947] cdc_ncm 6-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 529.448438][ T5947] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 529.660480][ T5947] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 529.854863][ T5947] usb 6-1: USB disconnect, device number 82 [ 529.882152][ T5947] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 530.269910][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 530.269931][ T30] audit: type=1800 audit(1749905661.517:1361): pid=12396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1602" name="file1" dev="tmpfs" ino=1710 res=0 errno=0 [ 530.309968][ T30] audit: type=1800 audit(1749905661.557:1362): pid=12397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1602" name="file1" dev="tmpfs" ino=1710 res=0 errno=0 [ 530.856919][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 530.995081][ T48] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 531.131551][T12416] misc userio: No port type given on /dev/userio [ 531.131683][ T9] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 531.174982][ T48] usb 6-1: Using ep0 maxpacket: 32 [ 531.181933][ T48] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 531.229022][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1606'. [ 531.238643][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1606'. [ 531.256421][ T48] usb 6-1: config 0 has no interface number 0 [ 531.324612][ T48] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 531.334096][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.375313][ T48] usb 6-1: Product: syz [ 531.457503][ T9] usb 3-1: config 0 has no interfaces? [ 531.467542][ T9] usb 3-1: config 0 has no interfaces? [ 531.495837][ T9] usb 3-1: config 0 has no interfaces? [ 531.504377][ T48] usb 6-1: Manufacturer: syz [ 531.517651][ T48] usb 6-1: SerialNumber: syz [ 531.525566][ T9] usb 3-1: config 0 has no interfaces? [ 531.534615][ T48] usb 6-1: config 0 descriptor?? [ 531.541812][ T9] usb 3-1: config 0 has no interfaces? [ 531.557935][ T9] usb 3-1: config 0 has no interfaces? [ 531.567369][ T48] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 531.581974][ T9] usb 3-1: config 0 has no interfaces? [ 531.641301][ T9] usb 3-1: config 0 has no interfaces? [ 531.649852][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 531.706329][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.789604][ T48] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 531.792935][ T9] usb 3-1: config 0 descriptor?? [ 531.855078][ T48] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 532.189078][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 532.205629][ T48] usb 6-1: USB disconnect, device number 83 [ 532.243231][T12406] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 532.253014][T12406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.262356][T12406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.335494][ T48] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 532.396826][ T48] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 532.456230][ T48] quatech2 6-1:0.51: device disconnected [ 532.799173][T12438] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1612'. [ 532.832464][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1612'. [ 533.701465][ T30] audit: type=1326 audit(1749905664.947:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12455 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9c58e929 code=0x7ffc0000 [ 533.767550][ T30] audit: type=1326 audit(1749905664.947:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12455 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fef9c58e929 code=0x7ffc0000 [ 533.797469][ T30] audit: type=1326 audit(1749905664.947:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12455 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9c58e929 code=0x7ffc0000 [ 533.819912][ C1] vkms_vblank_simulate: vblank timer overrun [ 533.831609][ T30] audit: type=1326 audit(1749905664.947:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12455 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef9c58e929 code=0x7ffc0000 [ 533.853961][ C1] vkms_vblank_simulate: vblank timer overrun [ 533.944547][ T48] usb 3-1: USB disconnect, device number 11 [ 533.978887][ T30] audit: type=1326 audit(1749905664.947:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12455 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9c58e929 code=0x7ffc0000 [ 534.001362][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.046046][T12453] netlink: 'syz.5.1617': attribute type 12 has an invalid length. [ 534.049446][ T30] audit: type=1326 audit(1749905664.947:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12455 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef9c58e929 code=0x7ffc0000 [ 534.139606][ T30] audit: type=1326 audit(1749905664.947:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12455 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9c58e929 code=0x7ffc0000 [ 534.163910][ T30] audit: type=1326 audit(1749905664.947:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12455 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fef9c58e929 code=0x7ffc0000 [ 534.186308][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.515135][ T5947] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 534.665031][ T5947] usb 4-1: Using ep0 maxpacket: 32 [ 534.686405][ T5947] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 534.703287][ T5947] usb 4-1: config 0 has no interface number 0 [ 534.749534][ T5947] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 534.758806][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.766972][ T5947] usb 4-1: Product: syz [ 534.772009][ T5947] usb 4-1: Manufacturer: syz [ 534.809726][ T5947] usb 4-1: SerialNumber: syz [ 534.822412][ T5947] usb 4-1: config 0 descriptor?? [ 535.319665][ T5947] kaweth 4-1:0.235: Firmware present in device. [ 535.329354][ T5947] kaweth 4-1:0.235: Error reading configuration (-71), no net device created [ 535.339373][ T5947] kaweth 4-1:0.235: probe with driver kaweth failed with error -5 [ 535.370059][ T5947] usb 4-1: USB disconnect, device number 15 [ 535.502267][T12487] hub 1-0:1.0: USB hub found [ 535.554332][T12487] hub 1-0:1.0: 1 port detected [ 535.749103][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 535.749124][ T30] audit: type=1326 audit(1749905666.997:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 535.805579][ T30] audit: type=1326 audit(1749905667.027:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 535.855265][ T30] audit: type=1326 audit(1749905667.027:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 535.880251][ T30] audit: type=1326 audit(1749905667.027:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 535.902666][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.945343][ T30] audit: type=1326 audit(1749905667.027:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 535.967899][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.012203][ T30] audit: type=1326 audit(1749905667.027:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 536.034602][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.042453][ T30] audit: type=1326 audit(1749905667.037:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 536.103868][ T30] audit: type=1326 audit(1749905667.037:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 536.113988][T12488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.127759][ T30] audit: type=1326 audit(1749905667.037:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 536.160924][ T30] audit: type=1326 audit(1749905667.037:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 536.183325][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.262647][T12488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.634256][T12503] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1631'. [ 536.926212][ T48] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 537.175502][ T48] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 537.939648][ T48] usb 3-1: config 0 has no interfaces? [ 537.946703][ T48] usb 3-1: config 0 has no interfaces? [ 537.953307][ T48] usb 3-1: config 0 has no interfaces? [ 538.001825][ T48] usb 3-1: config 0 has no interfaces? [ 538.010032][ T48] usb 3-1: config 0 has no interfaces? [ 538.021220][ T48] usb 3-1: config 0 has no interfaces? [ 538.031706][ T48] usb 3-1: config 0 has no interfaces? [ 538.049681][ T48] usb 3-1: config 0 has no interfaces? [ 538.075057][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 538.136102][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.179198][ T48] usb 3-1: config 0 descriptor?? [ 538.494888][T12505] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 538.507808][T12505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.518246][T12505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.147434][T12534] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1638'. [ 539.437419][ T978] hid-generic 0000:0005:0009.001A: unknown main item tag 0x0 [ 539.445269][ T978] hid-generic 0000:0005:0009.001A: unknown main item tag 0x0 [ 539.454966][ T978] hid-generic 0000:0005:0009.001A: unknown main item tag 0x0 [ 539.496681][ T978] hid-generic 0000:0005:0009.001A: hidraw0: HID v0.02 Device [syz0] on syz1 [ 539.738260][T12543] binder: BINDER_SET_CONTEXT_MGR already set [ 539.744292][T12543] binder: 12542:12543 ioctl 4018620d 200000000040 returned -16 [ 539.752586][T12543] binder: 12542:12543 ioctl c0306201 2000000003c0 returned -14 [ 539.802130][T12541] fido_id[12541]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 539.873772][ T978] usb 3-1: USB disconnect, device number 12 [ 540.453400][T12559] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1642'. [ 540.669490][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1643'. [ 540.683471][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1643'. [ 541.615073][ T5947] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 541.797235][ T5947] usb 4-1: Using ep0 maxpacket: 32 [ 541.807331][ T5947] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 541.817639][ T5947] usb 4-1: config 0 has no interface number 0 [ 541.823746][ T5947] usb 4-1: config 0 interface 12 has no altsetting 0 [ 541.847089][ T5947] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 541.859938][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.872535][ T5947] usb 4-1: Product: syz [ 541.886952][ T5947] usb 4-1: Manufacturer: syz [ 541.900397][ T5947] usb 4-1: SerialNumber: syz [ 541.920612][ T5947] usb 4-1: config 0 descriptor?? [ 542.881490][T12571] fuse: Bad value for 'user_id' [ 542.890783][T12571] fuse: Bad value for 'user_id' [ 543.445992][T12589] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1652'. [ 543.507953][T12589] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1652'. [ 544.141205][ T5837] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 544.322260][ T5837] usb 6-1: too many configurations: 65, using maximum allowed: 8 [ 544.442972][ T5837] usb 6-1: config 0 has no interfaces? [ 544.503852][ T5837] usb 6-1: config 0 has no interfaces? [ 544.746568][ T5837] usb 6-1: config 0 has no interfaces? [ 544.786928][ T5947] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 544.795312][ T5947] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 544.803715][ T5947] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 544.811884][ T5837] usb 6-1: config 0 has no interfaces? [ 544.819010][ T5837] usb 6-1: config 0 has no interfaces? [ 544.826483][ T5947] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 544.844043][ T5837] usb 6-1: config 0 has no interfaces? [ 544.861620][ T5837] usb 6-1: config 0 has no interfaces? [ 544.891805][ T5947] usb 4-1: USB disconnect, device number 16 [ 544.903506][ T5837] usb 6-1: config 0 has no interfaces? [ 544.913375][ T5837] usb 6-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 545.000913][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.050801][ T5837] usb 6-1: config 0 descriptor?? [ 545.360121][T12602] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 545.518817][T12602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.544004][T12602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.270965][T12640] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1664'. [ 546.578987][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1663'. [ 547.086168][ T5947] usb 6-1: USB disconnect, device number 84 [ 547.245481][ T5837] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 547.355886][T12671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.387330][T12672] x_tables: duplicate underflow at hook 2 [ 547.435308][T12671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.447102][ T5837] usb 3-1: Using ep0 maxpacket: 8 [ 547.464886][ T5837] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 547.490725][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 547.513427][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 11965, setting to 1024 [ 547.553865][ T5837] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 547.583401][ T5837] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 547.605849][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 547.609935][T12673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.627938][T12673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.629239][ T5837] usb 3-1: SerialNumber: syz [ 547.645918][ T5837] usb 3-1: config 0 descriptor?? [ 547.652733][T12659] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 547.660270][T12659] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 547.872354][T12659] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1668'. [ 547.926449][T12673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.940008][T12673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.025983][ T5837] usb 3-1: USB disconnect, device number 13 [ 549.348798][ T5910] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 549.505621][ T5910] usb 6-1: device descriptor read/64, error -71 [ 549.525085][ T5837] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 549.785006][ T5837] usb 4-1: device descriptor read/64, error -71 [ 549.825239][ T5910] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 549.954330][T12697] pim6reg1: entered promiscuous mode [ 549.960054][T12697] pim6reg1: entered allmulticast mode [ 549.975114][ T5910] usb 6-1: device descriptor read/64, error -71 [ 550.025765][ T5837] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 550.099235][ T5910] usb usb6-port1: attempt power cycle [ 550.162076][ T5837] usb 4-1: device descriptor read/64, error -71 [ 550.291444][ T5837] usb usb4-port1: attempt power cycle [ 550.423452][T12712] xt_CT: No such helper "snmp" [ 550.473218][T12712] loop2: detected capacity change from 0 to 7 [ 550.483610][ T6134] Dev loop2: unable to read RDB block 7 [ 550.489976][ T5910] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 550.506149][ T6134] loop2: unable to read partition table [ 550.718625][ T5910] usb 6-1: device descriptor read/8, error -71 [ 550.802864][ T5837] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 550.829170][ T6134] loop2: partition table beyond EOD, truncated [ 550.870341][ T5837] usb 4-1: device descriptor read/8, error -71 [ 550.892628][T12712] Dev loop2: unable to read RDB block 7 [ 550.898462][T12712] loop2: unable to read partition table [ 550.939273][T12712] loop2: partition table beyond EOD, truncated [ 550.962335][T12712] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 550.973095][ T5910] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 551.080419][ T5910] usb 6-1: device descriptor read/8, error -71 [ 551.135058][ T5837] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 551.155808][ T5837] usb 4-1: device descriptor read/8, error -71 [ 551.215954][ T5910] usb usb6-port1: unable to enumerate USB device [ 551.268423][ T5837] usb usb4-port1: unable to enumerate USB device [ 551.652630][T12734] input: syz1 as /devices/virtual/input/input45 [ 552.222473][T12749] B: renamed from veth0 [ 552.313927][T12750] netlink: 542 bytes leftover after parsing attributes in process `syz.2.1689'. [ 553.215327][ T5837] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 553.345563][ T5837] usb 4-1: device descriptor read/64, error -71 [ 553.599630][ T5837] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 553.745658][ T5837] usb 4-1: device descriptor read/64, error -71 [ 553.856882][ T5837] usb usb4-port1: attempt power cycle [ 554.195097][ T5837] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 554.215833][ T5837] usb 4-1: device descriptor read/8, error -71 [ 554.455096][ T5837] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 554.480114][T12769] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 554.485846][ T5837] usb 4-1: device descriptor read/8, error -71 [ 554.487445][T12769] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 554.499139][T12769] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 554.505766][T12769] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 554.511879][T12769] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 554.526492][T12774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.547404][T12774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.599785][ T5837] usb usb4-port1: unable to enumerate USB device [ 554.633595][T12776] tipc: Started in network mode [ 554.638914][T12776] tipc: Node identity ea249d8d02ca, cluster identity 4711 [ 554.646916][T12776] tipc: Enabled bearer , priority 0 [ 554.658966][T12776] syzkaller0: entered promiscuous mode [ 554.664613][T12776] syzkaller0: entered allmulticast mode [ 554.681913][T12776] tipc: Resetting bearer [ 554.925042][ T5837] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 555.075116][ T5837] usb 3-1: Using ep0 maxpacket: 32 [ 555.081836][ T5837] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 555.091087][ T5837] usb 3-1: config 0 has no interface number 0 [ 555.102853][ T5837] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 555.125479][ T5837] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 555.140684][ T5837] usb 3-1: config 0 interface 85 has no altsetting 0 [ 555.350533][ T5837] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 555.439458][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.450181][ T5837] usb 3-1: Product: syz [ 555.454406][ T5837] usb 3-1: Manufacturer: syz [ 555.460664][ T5837] usb 3-1: SerialNumber: syz [ 555.516155][ T5837] usb 3-1: config 0 descriptor?? [ 555.667301][ T5950] tipc: Node number set to 3907952013 [ 555.732241][ T5837] appletouch 3-1:0.85: Failed to read mode from device. [ 555.746466][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 555.753865][T12775] tipc: Resetting bearer [ 555.764179][ T5837] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 555.791864][ T5837] usb 3-1: USB disconnect, device number 14 [ 555.833174][T12775] tipc: Disabling bearer [ 556.357745][T12808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.367094][T12808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.377524][T12808] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 556.388221][T12808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.397881][T12808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.565144][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 556.572216][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 556.578653][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 557.344432][T12823] xt_CT: No such helper "syz0" [ 558.425280][ T5910] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 558.575197][ T5910] usb 3-1: device descriptor read/64, error -71 [ 558.625119][T12811] Bluetooth: hci0: command 0x0406 tx timeout [ 558.825017][ T5910] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 559.105288][ T5910] usb 3-1: device descriptor read/64, error -71 [ 559.205399][ T5947] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 559.225448][ T5910] usb usb3-port1: attempt power cycle [ 559.335063][ T5947] usb 6-1: device descriptor read/64, error -71 [ 559.587596][ T5910] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 559.605068][ T5947] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 559.648858][ T5910] usb 3-1: device descriptor read/8, error -71 [ 559.755080][ T5947] usb 6-1: device descriptor read/64, error -71 [ 559.836675][T12849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.855368][T12849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.883470][T12849] netlink: 'syz.1.1718': attribute type 1 has an invalid length. [ 559.896280][ T5947] usb usb6-port1: attempt power cycle [ 559.921635][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1718'. [ 559.935190][ T5910] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 560.062530][ T5910] usb 3-1: device descriptor read/8, error -71 [ 560.227824][ T5910] usb usb3-port1: unable to enumerate USB device [ 560.245020][ T5947] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 560.275922][ T5947] usb 6-1: device descriptor read/8, error -71 [ 560.315426][ T5837] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 560.475346][ T5837] usb 4-1: Using ep0 maxpacket: 16 [ 560.487831][ T5837] usb 4-1: config 0 has an invalid interface number: 145 but max is 0 [ 560.502383][ T5837] usb 4-1: config 0 has no interface number 0 [ 560.514984][ T5837] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 560.525121][ T5947] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 560.545161][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.553175][ T5837] usb 4-1: Product: syz [ 560.565305][ T5837] usb 4-1: Manufacturer: syz [ 560.570037][ T5837] usb 4-1: SerialNumber: syz [ 560.576134][ T5947] usb 6-1: device descriptor read/8, error -71 [ 560.586686][ T5837] usb 4-1: config 0 descriptor?? [ 560.601899][ T5837] hub 4-1:0.145: bad descriptor, ignoring hub [ 560.608298][ T5837] hub 4-1:0.145: probe with driver hub failed with error -5 [ 560.620356][ T5837] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.145/input/input47 [ 560.695794][ T5947] usb usb6-port1: unable to enumerate USB device [ 560.829708][T12862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.915328][T12863] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 561.075478][ T5947] usb 4-1: USB disconnect, device number 25 [ 561.377223][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 561.377244][ T30] audit: type=1326 audit(1749905692.627:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12865 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 561.422112][T12866] fuse: Unknown parameter 'noË‹' [ 561.428023][T12867] fuse: Unknown parameter 'noË‹' [ 561.643607][ T30] audit: type=1326 audit(1749905692.627:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12865 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 561.666238][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.702716][ T30] audit: type=1326 audit(1749905692.657:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12865 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 561.805468][ T30] audit: type=1326 audit(1749905692.667:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12865 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 561.888987][ T30] audit: type=1326 audit(1749905692.667:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12865 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 562.060402][ T30] audit: type=1326 audit(1749905692.667:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12865 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 562.082893][ C1] vkms_vblank_simulate: vblank timer overrun [ 562.143091][ T30] audit: type=1326 audit(1749905692.667:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12865 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 562.165606][ C1] vkms_vblank_simulate: vblank timer overrun [ 562.271193][ T30] audit: type=1326 audit(1749905692.667:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12865 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 562.330405][ T30] audit: type=1326 audit(1749905692.667:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12865 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 562.352878][ C1] vkms_vblank_simulate: vblank timer overrun [ 562.407304][ T30] audit: type=1326 audit(1749905692.667:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12865 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff523d8e929 code=0x7ffc0000 [ 562.600464][T12886] loop6: detected capacity change from 0 to 63 [ 562.660028][ T6134] buffer_io_error: 19 callbacks suppressed [ 562.660043][ T6134] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.691312][ T6134] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.774196][ T6134] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.785333][ T48] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 562.789193][ T6134] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.810395][ T6134] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.936958][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 562.952375][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.959243][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.971263][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.986339][ T48] usb 3-1: config 0 descriptor?? [ 562.998453][ T48] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 563.577028][ T6187] Buffer I/O error on dev loop6, logical block 0, async page read [ 563.593937][ T6187] Buffer I/O error on dev loop6, logical block 0, async page read [ 563.609369][ T6187] Buffer I/O error on dev loop6, logical block 0, async page read [ 563.641046][ T6187] Buffer I/O error on dev loop6, logical block 0, async page read [ 563.667106][ T6187] Buffer I/O error on dev loop6, logical block 0, async page read [ 563.886588][T12906] netlink: 'syz.6.1733': attribute type 2 has an invalid length. [ 563.918213][T12906] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1733'. [ 564.409261][T12917] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1737'. [ 564.421004][T12917] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1737'. [ 564.455530][T12917] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1737'. [ 564.469374][ T48] gspca_stv06xx: HDCS-1020 sensor detected [ 564.515318][T12917] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1737'. [ 564.611693][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1739'. [ 564.738168][ T48] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 564.757599][ T48] usb 3-1: USB disconnect, device number 19 [ 564.779493][T12936] netlink: 'syz.1.1741': attribute type 1 has an invalid length. [ 565.065591][ T5910] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 565.364303][T12946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.386278][T12946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.425028][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 565.459043][ T5910] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 565.680104][T12946] pimreg: entered allmulticast mode [ 565.717367][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.748282][ T5910] usb 6-1: config 0 descriptor?? [ 565.756064][ T5947] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 565.810479][ T5910] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 565.851943][T12953] program syz.3.1746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 565.930314][ T5947] usb 3-1: device descriptor read/64, error -71 [ 566.176285][ T5947] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 566.325068][ T5947] usb 3-1: device descriptor read/64, error -71 [ 566.450016][ T5947] usb usb3-port1: attempt power cycle [ 566.805217][ T5947] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 566.833315][ T5947] usb 3-1: device descriptor read/8, error -71 [ 566.845223][ T5910] gspca_sonixj: i2c_w8 err -71 [ 566.873630][ T5910] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 566.893365][ T5910] usb 6-1: USB disconnect, device number 93 [ 566.984043][T12986] syzkaller1: entered promiscuous mode [ 566.990846][T12986] syzkaller1: entered allmulticast mode [ 567.028113][T12986] sctp: [Deprecated]: syz.5.1752 (pid 12986) Use of int in maxseg socket option. [ 567.028113][T12986] Use struct sctp_assoc_value instead [ 567.105042][ T5947] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 567.149183][ T5947] usb 3-1: device descriptor read/8, error -71 [ 567.195042][ T5950] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 567.275274][ T5947] usb usb3-port1: unable to enumerate USB device [ 567.350386][ T5950] usb 4-1: config 0 has an invalid interface number: 224 but max is 0 [ 567.360850][ T5950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.374370][ T5950] usb 4-1: config 0 has no interface number 0 [ 567.380900][ T5950] usb 4-1: config 0 interface 224 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 567.394518][ T5950] usb 4-1: config 0 interface 224 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 567.435160][ T5950] usb 4-1: config 0 interface 224 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 567.455781][ T5950] usb 4-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc [ 567.466367][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.486220][ T5950] usb 4-1: Product: syz [ 567.496895][ T5950] usb 4-1: Manufacturer: syz [ 567.524837][ T5950] usb 4-1: SerialNumber: syz [ 567.578033][ T5950] usb 4-1: config 0 descriptor?? [ 567.596288][ T5950] ldusb 4-1:0.224: Interrupt in endpoint not found [ 567.641950][T12991] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1753'. [ 567.654110][T12991] openvswitch: netlink: Flow key attr not present in new flow. [ 567.664183][T12991] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 567.671966][T12991] PKCS7: Only support pkcs7_signedData type [ 567.696626][T12991] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1753'. [ 567.798711][T12978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.808139][T12978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.966199][ T5950] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 568.107305][ T5947] usb 4-1: USB disconnect, device number 26 [ 568.150990][ T5950] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 568.160279][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.173639][ T5950] usb 6-1: Product: syz [ 568.178836][ T5950] usb 6-1: Manufacturer: syz [ 568.183521][ T5950] usb 6-1: SerialNumber: syz [ 568.191194][ T5950] usb 6-1: config 0 descriptor?? [ 568.402652][ T5950] usb 6-1: f81604_read: reg: 105 failed: -EPROTO [ 568.420558][ T5950] f81604 6-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 568.428283][ T5950] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 568.439853][ T5950] usb 6-1: USB disconnect, device number 94 [ 568.540532][T12995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1754'. [ 568.835429][T12999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.875680][T12999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.925349][ T5910] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 569.207446][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.226988][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.265055][ T5910] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 569.274181][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.283511][T13010] input: syz1 as /devices/virtual/input/input48 [ 569.354223][ T5910] usb 3-1: config 0 descriptor?? [ 569.389245][T13016] macvlan1: entered promiscuous mode [ 569.429045][T13016] macvlan1: left promiscuous mode [ 569.507348][T13019] vlan2: entered allmulticast mode [ 569.520540][T13019] bridge_slave_0: entered allmulticast mode [ 569.811716][ T5910] uclogic 0003:5543:0042.001B: No inputs registered, leaving [ 569.838590][ T5910] uclogic 0003:5543:0042.001B: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.2-1/input0 [ 570.012671][ T5910] usb 3-1: USB disconnect, device number 24 [ 570.109381][ T5837] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 570.305123][ T5837] usb 6-1: Using ep0 maxpacket: 16 [ 570.319638][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.369347][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.384041][T13033] cgroup: fork rejected by pids controller in /syz5 [ 570.407311][ T5837] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 570.454599][ T5837] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 570.483744][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.505193][ T5910] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 570.532727][ T5837] usb 6-1: config 0 descriptor?? [ 570.692308][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.735008][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 570.772262][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 570.823493][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 570.868908][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 570.927075][ T5910] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 570.951097][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.962629][ T5910] usb 4-1: Product: syz [ 570.971141][ T5910] usb 4-1: Manufacturer: syz [ 570.979934][ T5910] usb 4-1: SerialNumber: syz [ 570.987469][ T5837] usbhid 6-1:0.0: can't add hid device: -71 [ 570.993545][ T5910] usb 4-1: config 0 descriptor?? [ 571.008186][ T5837] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 571.035997][ T5910] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 571.073667][ T5837] usb 6-1: USB disconnect, device number 95 [ 571.085105][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 571.101856][ T5910] garmin_gps ttyUSB0: failed to submit interrupt urb: -90 [ 571.114292][ T5910] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 571.208010][ T5950] usb 4-1: USB disconnect, device number 27 [ 571.217037][ T5950] garmin_gps 4-1:0.0: device disconnected [ 571.245781][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 571.263537][ T24] usb 3-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 571.281008][ T24] usb 3-1: config 0 has an invalid interface number: 224 but max is 189 [ 571.290325][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 571.308528][ T24] usb 3-1: config 0 has no interface number 0 [ 571.317277][ T24] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 571.327079][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.340149][ T24] usb 3-1: config 0 descriptor?? [ 571.604496][ T5950] usb 3-1: USB disconnect, device number 25 [ 572.135229][ T5837] usb 6-1: new low-speed USB device number 96 using dummy_hcd [ 572.148333][ T5950] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 572.352194][ T5837] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 572.364222][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 572.404075][ T5837] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 572.429094][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.450740][ T5837] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 572.472075][ T5950] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 572.497268][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.514990][ T5837] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 572.532377][ T5837] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 572.551994][ T5950] usb 4-1: config 0 descriptor?? [ 572.595249][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 572.627128][ T5837] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 572.649586][ T5837] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 572.660619][ T5837] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 572.682313][T13080] syz.1.1769 (13080): drop_caches: 2 [ 572.694248][ T5837] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 572.718947][ T5837] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 572.753388][ T5837] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 572.761351][ T5837] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 572.782732][ T5837] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 572.795422][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 572.831035][ T24] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 572.838509][ T5837] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 572.858664][ T5837] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 572.887825][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 572.887847][ T30] audit: type=1326 audit(1749905704.127:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13100 comm="syz.1.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee18e929 code=0x7ffc0000 [ 572.889607][ T5837] usb 6-1: string descriptor 0 read error: -22 [ 572.896049][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.916469][ C1] vkms_vblank_simulate: vblank timer overrun [ 572.922531][ T5837] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 572.965269][ T30] audit: type=1326 audit(1749905704.127:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13100 comm="syz.1.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee18e929 code=0x7ffc0000 [ 573.008355][ T5950] usbhid 4-1:0.0: can't add hid device: -71 [ 573.019780][ T5950] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 573.030137][ T30] audit: type=1326 audit(1749905704.127:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13100 comm="syz.1.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f4eee18e929 code=0x7ffc0000 [ 573.058366][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.068909][ T24] usb 3-1: config 0 has no interface number 0 [ 573.070405][ T5950] usb 4-1: USB disconnect, device number 28 [ 573.129918][ T24] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=d8.06 [ 573.131697][ T5837] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 573.166892][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.175907][ T30] audit: type=1326 audit(1749905704.127:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13100 comm="syz.1.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee18e929 code=0x7ffc0000 [ 573.184974][ T24] usb 3-1: Product: syz [ 573.228648][ T24] usb 3-1: Manufacturer: syz [ 573.255406][ T30] audit: type=1326 audit(1749905704.127:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13100 comm="syz.1.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee18e929 code=0x7ffc0000 [ 573.279475][ T24] usb 3-1: SerialNumber: syz [ 573.393555][ T30] audit: type=1326 audit(1749905704.127:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13100 comm="syz.1.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4eee18e929 code=0x7ffc0000 [ 573.445340][ T24] usb 3-1: config 0 descriptor?? [ 573.445447][ T30] audit: type=1326 audit(1749905704.127:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13100 comm="syz.1.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee18e929 code=0x7ffc0000 [ 573.445499][ T30] audit: type=1326 audit(1749905704.127:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13100 comm="syz.1.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee18e929 code=0x7ffc0000 [ 573.685097][ T30] audit: type=1326 audit(1749905704.127:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13100 comm="syz.1.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4eee18e929 code=0x7ffc0000 [ 573.721271][ T24] usb 3-1: Found UVC 0.00 device syz (2833:0201) [ 573.763004][ T24] usb 3-1: No valid video chain found. [ 573.799429][ T24] usb 3-1: USB disconnect, device number 26 [ 573.847896][ T30] audit: type=1326 audit(1749905704.127:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13100 comm="syz.1.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee18e929 code=0x7ffc0000 [ 574.579345][ T24] usb 6-1: USB disconnect, device number 96 [ 574.844661][T13114] syz.6.1779 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 575.815213][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 575.860101][T13142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.893729][T13142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.028085][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 576.064743][ T24] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 576.102803][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.124672][ T24] usb 3-1: config 0 descriptor?? [ 576.251826][T13149] xt_TPROXY: Can be used only with -p tcp or -p udp [ 576.345107][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 576.375812][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 576.377117][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 576.377177][ T24] usb 3-1: media controller created [ 576.498940][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 576.606737][T13135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.623390][T13135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.955119][ T5837] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 577.115132][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 577.119975][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.120013][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.120047][ T5837] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 577.120062][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.124101][ T5837] usb 4-1: config 0 descriptor?? [ 577.337075][T13156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.343479][T13156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.348595][T13156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.349027][T13156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.812106][ T5837] usbhid 4-1:0.0: can't add hid device: -71 [ 577.812239][ T5837] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 577.819946][ T5837] usb 4-1: USB disconnect, device number 29 [ 578.333715][T13171] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1792'. [ 578.620323][ T24] az6027: usb out operation failed. (-71) [ 578.655029][ T24] az6027: usb out operation failed. (-71) [ 578.664943][ T24] stb0899_attach: Driver disabled by Kconfig [ 578.670976][ T24] az6027: no front-end attached [ 578.670976][ T24] [ 578.726808][ T24] az6027: usb out operation failed. (-71) [ 578.755951][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 578.797282][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input50 [ 578.838915][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 578.857490][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 578.931907][ T24] usb 3-1: USB disconnect, device number 27 [ 578.957173][ T5950] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 579.075355][ T5837] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 579.091913][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 579.105204][ T5950] usb 4-1: device descriptor read/64, error -71 [ 579.245559][ T5837] usb 6-1: device descriptor read/64, error -71 [ 579.338743][T13196] veth1_macvtap: left promiscuous mode [ 579.350367][ T5950] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 579.435498][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 579.496702][ T5837] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 579.506631][ T5950] usb 4-1: device descriptor read/64, error -71 [ 579.616449][ T5950] usb usb4-port1: attempt power cycle [ 579.622893][ T24] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 579.637758][ T24] usb 3-1: config 0 has no interface number 0 [ 579.648413][ T5837] usb 6-1: device descriptor read/64, error -71 [ 579.664655][ T24] usb 3-1: config 0 interface 98 has no altsetting 0 [ 579.684470][ T24] usb 3-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 579.699486][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.717032][ T24] usb 3-1: Product: syz [ 579.724969][ T24] usb 3-1: Manufacturer: syz [ 579.731446][ T24] usb 3-1: SerialNumber: syz [ 579.761503][T13208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.772765][ T5837] usb usb6-port1: attempt power cycle [ 579.781292][ T24] usb 3-1: config 0 descriptor?? [ 579.802731][T13208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.822354][T13208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.833578][T13208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.985237][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 579.985260][ T30] audit: type=1326 audit(1749905711.207:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13212 comm="syz.6.1804" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c7718e929 code=0x0 [ 580.026753][ T24] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 580.075327][ T5950] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 580.119319][ T5837] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 580.130004][ T5950] usb 4-1: device descriptor read/8, error -71 [ 580.169020][ T5837] usb 6-1: device descriptor read/8, error -71 [ 580.385207][ T5950] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 580.405571][ T5950] usb 4-1: device descriptor read/8, error -71 [ 580.415218][ T5837] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 580.446105][ T5837] usb 6-1: device descriptor read/8, error -71 [ 580.517712][ T5950] usb usb4-port1: unable to enumerate USB device [ 580.555738][ T5837] usb usb6-port1: unable to enumerate USB device [ 580.676983][ T24] usb 3-1: reset high-speed USB device number 28 using dummy_hcd [ 581.073429][ T24] usb 3-1: failed to restore interface 98 altsetting 4 (error=-71) [ 581.085274][ T24] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 581.095751][ T24] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 581.106389][ T48] usb 3-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 581.117040][ T48] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 581.130697][ T24] usb 3-1: USB disconnect, device number 28 [ 581.151755][ T48] ------------[ cut here ]------------ [ 581.157740][ T48] WARNING: CPU: 1 PID: 48 at fs/kernfs/dir.c:537 kernfs_get+0x72/0x90 [ 581.166510][ T48] Modules linked in: [ 581.170771][ T48] CPU: 1 UID: 0 PID: 48 Comm: kworker/1:1 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 581.184162][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 581.195599][ T48] Workqueue: events request_firmware_work_func [ 581.202215][ T48] RIP: 0010:kernfs_get+0x72/0x90 [ 581.207546][ T48] Code: e8 93 d0 62 ff 48 89 df be 04 00 00 00 e8 96 4a c6 ff f0 ff 03 eb 05 e8 7c d0 62 ff 5b 5d e9 d5 8a 0b 09 cc e8 6f d0 62 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 95 [ 581.227611][ T48] RSP: 0018:ffffc90000b875e0 EFLAGS: 00010293 [ 581.234004][ T48] RAX: ffffffff825d8ed1 RBX: ffff8880592d05a0 RCX: ffff88801de85a00 [ 581.242549][ T48] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 581.250919][ T48] RBP: 0000000000000000 R08: ffff8880592d05a3 R09: 1ffff1100b25a0b4 [ 581.259092][ T48] R10: dffffc0000000000 R11: ffffed100b25a0b5 R12: ffff88804c7846a8 [ 581.267338][ T48] R13: 1ffff110098f08d6 R14: ffff88804c7846b0 R15: 1ffff110098f08d5 [ 581.275417][ T48] FS: 0000000000000000(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000 [ 581.285034][ T48] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 581.291665][ T48] CR2: 00007ff5240e1000 CR3: 0000000033baa000 CR4: 00000000003526f0 [ 581.300539][ T48] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 581.308606][ T48] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 581.316711][ T48] Call Trace: [ 581.320027][ T48] [ 581.322990][ T48] kobject_add_internal+0x632/0xb40 [ 581.328285][ T48] kobject_add+0x155/0x220 [ 581.332781][ T48] ? __pfx_kobject_add+0x10/0x10 [ 581.337818][ T48] ? kobject_init+0x83/0x1e0 [ 581.342433][ T48] get_device_parent+0x316/0x3a0 [ 581.347473][ T48] device_add+0x2e1/0xb50 [ 581.351839][ T48] firmware_fallback_sysfs+0x2e4/0x9b0 [ 581.357389][ T48] _request_firmware+0xf83/0x15b0 [ 581.362463][ T48] ? __pfx__request_firmware+0x10/0x10 [ 581.368020][ T48] ? process_scheduled_works+0x9ef/0x17b0 [ 581.373791][ T48] request_firmware_work_func+0xaf/0x1c0 [ 581.380421][ T48] ? process_scheduled_works+0x9ef/0x17b0 [ 581.386970][ T48] process_scheduled_works+0xae1/0x17b0 [ 581.392578][ T48] ? __pfx_process_scheduled_works+0x10/0x10 [ 581.398662][ T48] worker_thread+0x8a0/0xda0 [ 581.403280][ T48] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 581.409667][ T48] ? __kthread_parkme+0x7b/0x200 [ 581.414662][ T48] kthread+0x70e/0x8a0 [ 581.418811][ T48] ? __pfx_worker_thread+0x10/0x10 [ 581.423966][ T48] ? __pfx_kthread+0x10/0x10 [ 581.428675][ T48] ? _raw_spin_unlock_irq+0x23/0x50 [ 581.433930][ T48] ? lockdep_hardirqs_on+0x9c/0x150 [ 581.439225][ T48] ? __pfx_kthread+0x10/0x10 [ 581.444551][ T48] ret_from_fork+0x3fc/0x770 [ 581.449248][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 581.454411][ T48] ? __switch_to_asm+0x39/0x70 [ 581.459296][ T48] ? __switch_to_asm+0x33/0x70 [ 581.464122][ T48] ? __pfx_kthread+0x10/0x10 [ 581.468821][ T48] ret_from_fork_asm+0x1a/0x30 [ 581.473645][ T48] [ 581.476751][ T48] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 581.484052][ T48] CPU: 1 UID: 0 PID: 48 Comm: kworker/1:1 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 581.495959][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 581.506231][ T48] Workqueue: events request_firmware_work_func [ 581.512430][ T48] Call Trace: [ 581.515723][ T48] [ 581.518676][ T48] dump_stack_lvl+0x99/0x250 [ 581.523276][ T48] ? __asan_memcpy+0x40/0x70 [ 581.527886][ T48] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.533110][ T48] ? __pfx__printk+0x10/0x10 [ 581.537736][ T48] panic+0x2db/0x790 [ 581.541652][ T48] ? __pfx_panic+0x10/0x10 [ 581.546087][ T48] ? show_trace_log_lvl+0x4fb/0x550 [ 581.551315][ T48] ? ret_from_fork_asm+0x1a/0x30 [ 581.556274][ T48] __warn+0x31b/0x4b0 [ 581.560269][ T48] ? kernfs_get+0x72/0x90 [ 581.564609][ T48] ? kernfs_get+0x72/0x90 [ 581.568949][ T48] report_bug+0x2be/0x4f0 [ 581.573299][ T48] ? kernfs_get+0x72/0x90 [ 581.577642][ T48] ? kernfs_get+0x72/0x90 [ 581.581989][ T48] ? kernfs_get+0x74/0x90 [ 581.586331][ T48] handle_bug+0x84/0x160 [ 581.590591][ T48] exc_invalid_op+0x1a/0x50 [ 581.595106][ T48] asm_exc_invalid_op+0x1a/0x20 [ 581.599968][ T48] RIP: 0010:kernfs_get+0x72/0x90 [ 581.604922][ T48] Code: e8 93 d0 62 ff 48 89 df be 04 00 00 00 e8 96 4a c6 ff f0 ff 03 eb 05 e8 7c d0 62 ff 5b 5d e9 d5 8a 0b 09 cc e8 6f d0 62 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 95 [ 581.624549][ T48] RSP: 0018:ffffc90000b875e0 EFLAGS: 00010293 [ 581.630632][ T48] RAX: ffffffff825d8ed1 RBX: ffff8880592d05a0 RCX: ffff88801de85a00 [ 581.638613][ T48] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 581.646591][ T48] RBP: 0000000000000000 R08: ffff8880592d05a3 R09: 1ffff1100b25a0b4 [ 581.654570][ T48] R10: dffffc0000000000 R11: ffffed100b25a0b5 R12: ffff88804c7846a8 [ 581.662551][ T48] R13: 1ffff110098f08d6 R14: ffff88804c7846b0 R15: 1ffff110098f08d5 [ 581.670542][ T48] ? kernfs_get+0x71/0x90 [ 581.674902][ T48] kobject_add_internal+0x632/0xb40 [ 581.680131][ T48] kobject_add+0x155/0x220 [ 581.684561][ T48] ? __pfx_kobject_add+0x10/0x10 [ 581.689511][ T48] ? kobject_init+0x83/0x1e0 [ 581.694112][ T48] get_device_parent+0x316/0x3a0 [ 581.699068][ T48] device_add+0x2e1/0xb50 [ 581.703414][ T48] firmware_fallback_sysfs+0x2e4/0x9b0 [ 581.708913][ T48] _request_firmware+0xf83/0x15b0 [ 581.713974][ T48] ? __pfx__request_firmware+0x10/0x10 [ 581.719456][ T48] ? process_scheduled_works+0x9ef/0x17b0 [ 581.725202][ T48] request_firmware_work_func+0xaf/0x1c0 [ 581.730857][ T48] ? process_scheduled_works+0x9ef/0x17b0 [ 581.736606][ T48] process_scheduled_works+0xae1/0x17b0 [ 581.742212][ T48] ? __pfx_process_scheduled_works+0x10/0x10 [ 581.748224][ T48] worker_thread+0x8a0/0xda0 [ 581.752823][ T48] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 581.759183][ T48] ? __kthread_parkme+0x7b/0x200 [ 581.764139][ T48] kthread+0x70e/0x8a0 [ 581.768226][ T48] ? __pfx_worker_thread+0x10/0x10 [ 581.773355][ T48] ? __pfx_kthread+0x10/0x10 [ 581.777964][ T48] ? _raw_spin_unlock_irq+0x23/0x50 [ 581.783180][ T48] ? lockdep_hardirqs_on+0x9c/0x150 [ 581.788395][ T48] ? __pfx_kthread+0x10/0x10 [ 581.792998][ T48] ret_from_fork+0x3fc/0x770 [ 581.797615][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 581.802854][ T48] ? __switch_to_asm+0x39/0x70 [ 581.807665][ T48] ? __switch_to_asm+0x33/0x70 [ 581.812457][ T48] ? __pfx_kthread+0x10/0x10 [ 581.817083][ T48] ret_from_fork_asm+0x1a/0x30 [ 581.821880][ T48] [ 581.825170][ T48] Kernel Offset: disabled [ 581.829498][ T48] Rebooting in 86400 seconds..