last executing test programs: 14m22.333571802s ago: executing program 3 (id=131): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r4 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980), 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r4) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r5) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x80, 0x8, 0x2, 0xd99d}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000007dc0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c25843", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 14m21.195690108s ago: executing program 3 (id=138): r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x800) pipe(&(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x24102}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r3, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000f00)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x20040010}], 0x1, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r6, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 14m19.925898628s ago: executing program 3 (id=148): syz_emit_ethernet(0x52, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa01881635ceed56b48924f7872d06d1570cebe9973bef15abb2e1fbf10efe0cd81dc668ac9fea1526804a8ff2d91c5d39d6a2dd491c8dcc7c2a9d5060d5a10b863c4a9397f621d2a71460fda39046a27941943a45fe29dfd24dfe8b5a897186301c41f7cbcf282dbdb46c1907478d72f960", @ANYRESHEX=0x0], 0x0) setitimer(0x2, &(0x7f00000002c0)={{}, {0x0, 0x2710}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYRES8=r0]) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000240)='./control\x00', 0xb5) close(r1) r2 = inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) fcntl$setsig(r2, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x9]}, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r6) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r7, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r7, 0x1, 0x0, 0x6, @local}, 0x14) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') io_uring_setup(0x5de1, 0x0) epoll_create1(0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20040089}, 0x40800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 14m18.950998647s ago: executing program 3 (id=149): syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) (async) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) (async) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x30, 0x1, [{{0x9, 0x4, 0x0, 0xf7, 0x1, 0x7, 0x1, 0x1, 0xf0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0x2, 0xe}}, [{{0x9, 0x5, 0x82, 0x2, 0x1ff, 0x0, 0x5, 0x3}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x7, 0x0, 0x9, 0x8, 0x92}, 0x12, &(0x7f00000001c0)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0xe, 0x9, 0x9}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x41c}}, {0xed, &(0x7f00000005c0)=ANY=[@ANYBLOB="ed03efd538e7a1f7fb919b6eb51ed4e0ddfd8525c19062e6324c61d3296b2158e726a44705d873bd2f49901e491f4a9cd2b1d1ce3912651144d217632f2025aef79db19ed323afb2919942618df6a58551985eb4569c42040d45ee8b21619bffb16a0e1cf9a6bd09cc15888ea38ddbf838de23afa7238baf5b2284ab5559fbb5cabfd99bc584506f21669a026c42d2655ebecd76ea5a1c38e30fc3f083cc73a81cd1bc16633c152cd9dd959b0dda74bda09a668d43e07d4163ddb8efd6fcc88f003db67382c91310dc7bf482d017780f8b5d34ec551f908c6b092a2e05c48a2da4dd45591fff104c0ccfc1310e"]}, {0x93, &(0x7f00000006c0)=@string={0x93, 0x3, "8e79764188aed56366eb5dc87bf2508038068d1e0b2ffb3cfbcaed82733a9355b8bb1d026412c56730ecedaf93fc5759ae8436d6d8db7d949e819d87d5a8a05859e1e261017f08c8d781a703a402ef6e3b909153974e7e92a35df536976905f1e3abcefc29b67d4c6a92bde1db58b86fabeeef3a604a778983246240985d584d4be3e8c6d1686a584dc7256684d24573d1"}}, {0x65, &(0x7f0000000780)=@string={0x65, 0x3, "c42bf826a181e48460ae4bcd8e67178f8b9cbad1634320baba4d513922892ffefcc51e9a69e946012bb51ecc8393a3bb97de958e06d27c03748fa6ee594ecb2f07a35e0255191540e0bfa022bb995e007c0737983b56dcccf5040b10c2a379a7e74cf1"}}, {0x0, 0xfffffffffffffffc}]}) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000900)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000008c0)={0x0, @aes128, 0x0, @desc1}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a40)={0x1, 0x0, [{0xeeee5000, 0xf0, &(0x7f0000000940)=""/240}]}) (async) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(r4, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x1400) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) (async) unshare(0x64000600) syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r4) 14m18.838384403s ago: executing program 3 (id=150): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40400) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) accept(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x1000) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001000010"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000020303000000000000000020000000100800010001"], 0x1c}}, 0x4000801) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) getresuid(&(0x7f00000001c0), &(0x7f0000000200), 0x0) io_setup(0x81, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x16, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r9, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 14m15.691703181s ago: executing program 3 (id=168): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x9003000000000000, 0x40, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x185f01, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) (async) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') lseek(r8, 0x10001, 0x0) (async) lseek(r8, 0x10001, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_regs={0x4, 0x0, 0x32, "53ac158fc007c55f9951a86af37f62287ee2c590cdbe8a1bccacad350ccbfd529c955984c119224183bad554bdbf00c97b8b"}}) (async) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_regs={0x4, 0x0, 0x32, "53ac158fc007c55f9951a86af37f62287ee2c590cdbe8a1bccacad350ccbfd529c955984c119224183bad554bdbf00c97b8b"}}) 14m0.55884824s ago: executing program 32 (id=168): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x9003000000000000, 0x40, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x185f01, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) (async) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') lseek(r8, 0x10001, 0x0) (async) lseek(r8, 0x10001, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_regs={0x4, 0x0, 0x32, "53ac158fc007c55f9951a86af37f62287ee2c590cdbe8a1bccacad350ccbfd529c955984c119224183bad554bdbf00c97b8b"}}) (async) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_regs={0x4, 0x0, 0x32, "53ac158fc007c55f9951a86af37f62287ee2c590cdbe8a1bccacad350ccbfd529c955984c119224183bad554bdbf00c97b8b"}}) 10m15.463782211s ago: executing program 5 (id=1114): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4f}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x420, r1, 0x29787ac73f063234, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_SOCK={0xdc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x120}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x17dc000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}]}, @TIPC_NLA_NODE={0x1b4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0xb8, 0x3, "0cb1111b89bd18cf512b722eabd43c05c34acd8698cc9c38637bf7655d8a3e2c922a39d5b69196e6bbae32599b6bd043cf38e6b710965d3f1accccad3fe87f243e53762492057fd8f37fdedc6a60970178fb3d9d73f2619bff3c68da5bd09c6c7153aadb1d05696b615ef1a64dabef7e4a715b54003810d328a70323889e984d42f63b76d2f4991fe84a917eed34c537d09348037b3c612eb6f3c8b529dfb985d544e54e83206682dc5aae4602ffd0fd35745427"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ID={0xd1, 0x3, "05e2c6fc8671e2cc323207ce57a4e28b9802e8b18678efe072dd4e484c4d4b0a5128d4d0354a5290c51c97348ff99aca0ad192bb50b89f55c0f1c7c165ddec8e9bdf33ae07006c585d4e71ce5c976ac23b2630c10d3372e5459b71d573f33e126ee4da6c8b534caeb78db87f8433a8d699d3de586da0c78ca25cb8d1dd0d023398470f8e09294ed91ee84a517fc36cfbdb492e881f351649c416d03b1c5922336b7fb9d63d9532f6019402387319a221ebe044d98072601e457cc7415add17794125cce4408935d1f7f6cce4bd"}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaa80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5f}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfcf, @mcast2, 0xec}}}}]}]}, 0x420}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) 10m15.38730768s ago: executing program 5 (id=1115): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ee1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002980)={0xffffffffffffffff}) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) getsockopt$sock_buf(r0, 0x1, 0x14, &(0x7f0000002b80)=""/123, &(0x7f0000002c00)=0x7b) 10m15.20091371s ago: executing program 5 (id=1116): ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) dup(0xffffffffffffffff) recvmsg(r0, 0x0, 0x2001) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000240)=0x9, 0x4) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r8, &(0x7f0000005580)={0x0, 0x0, &(0x7f0000005540)={&(0x7f0000005500)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) r9 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r9, 0x400, 0x0) close(r9) 10m14.215346357s ago: executing program 5 (id=1119): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540040904270102fffd01000921e700070122b30409050c0200020103400905df02"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x14a, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x138, 0x2, 0x1, 0x4, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "f1c8717259"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x0, 0x7, 0x6}, {0x6, 0x24, 0x1a, 0x76, 0x48}, [@mdlm_detail={0x9b, 0x24, 0x13, 0x1, "3d9edacf5f8d47b0b1f2f43c3d3ac8e4f951b2f358c114c9a5c4a2c7d989bc19245eaf6849011b37e2d93fe24ad4cf7b8df4ed98540b6fd02e4ef0be2b939bced32623e5491eadfb4eed4ee9ed4f94ab34cebe2894f22ca0110b36fce77ca824925c0be2dab1d70076e05047461b0529606262a61283694d010e5df84a408a7471db103f6509964b5e641c8b48961f21d37ade0b9a00db"}, @mbim={0xc, 0x24, 0x1b, 0xb6, 0x7, 0x0, 0xf4, 0x0, 0xad}, @dmm={0x7, 0x24, 0x14, 0x5, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x0, 0x9, 0x4, 0x8000, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x77}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x7, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xc, 0x9, 0xb9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x10, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x1, 0x6c}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x0, 0x1c, 0x82, 0x8, 0x20, 0x96}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41e}}, {0xa1, &(0x7f00000002c0)=@string={0xa1, 0x3, "49ebe5a5885a289635862e0cc35da85c36cd1bd7caa1fc0e9596e721aa50ba934e1ba92e550c9f42a394ef119429baebc49ba54242e61bd50ad1286fae683d6c73b45c1a6297fb0c12ad37c4c7f191425306fa4a7dde13ec81c100ea68ffb31a564dedaebbd4e1f4508f4d52ff5e207770b776a7eea8d4c4a11d0de55e2e9c374a848d24894b54406875d2805a198e3e703abf298c916d23fc1607c26b9a00"}}, {0xf4, &(0x7f0000000480)=@string={0xf4, 0x3, "1e435d456c3b1940f4793574e0a7c9fb702eba9ff95bd8fa67f9f0498ca2e462f694f1827649599bb9b78ce37a75a9b9f4fd1eec9a8cee9f769c16434a63c4d998089549a86fd51706396913aa3b0a41f043856fbb85bc6bd8b5804555fe238c57b80fa6dd178da480bd18c8ce2cc42488d22ff811c27a1ba51769172d641c0b95f63598dd69bd0a07f36f678e9c08f818425b34edd862ad3a281ce78bd5a7db3f2962c4f99d2d33528919146dea94ad61a9b2003673109a6bda75fb8f55145842c71f9e60f29c1129cd094965b4b10a3a046b001623092c5d995ffbfbc47631ec2e7b5f1b03385bf5e136bf574a21472e08"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x402}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0003e6000000ee03ff04"], 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000440)={0x40, 0x18, 0x6, "d0f060ced921"}, 0x0, 0x0, 0x0, 0x0, 0x0}) getrlimit(0x6, &(0x7f0000000040)) syz_usb_control_io$hid(r0, 0x0, 0x0) 10m12.093239134s ago: executing program 5 (id=1124): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000100)}, 0x20) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r0, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x84091) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005040000000000000000", @ANYBLOB="ebffffffffffffff280012800b"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10m11.819584183s ago: executing program 5 (id=1125): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) (async) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$qrtr(0x2a, 0x2, 0x0) (async) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340), &(0x7f0000000280)) (async) r5 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r5, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r3, r4, 0x0) (async) close_range(r3, r4, 0x0) socket$inet6(0xa, 0x3, 0xff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(0x0, 0x80ff, 0x88) r8 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x1, @tid=r8}, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x1, @tid=r8}, &(0x7f0000000000)=0x0) timer_settime(r9, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r9, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) (async) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) write$char_usb(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 9m56.598492322s ago: executing program 33 (id=1125): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) (async) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$qrtr(0x2a, 0x2, 0x0) (async) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340), &(0x7f0000000280)) (async) r5 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r5, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r3, r4, 0x0) (async) close_range(r3, r4, 0x0) socket$inet6(0xa, 0x3, 0xff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(0x0, 0x80ff, 0x88) r8 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x1, @tid=r8}, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x1, @tid=r8}, &(0x7f0000000000)=0x0) timer_settime(r9, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r9, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) (async) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) write$char_usb(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 12.60595646s ago: executing program 1 (id=2940): sched_setscheduler(0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x5) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010f00010900030073797a32000000000c00024000000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x120) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x88, 0x68, &(0x7f0000000080), 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002d0021"], 0x1c}], 0x1}, 0x40000) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 10.212583177s ago: executing program 1 (id=2950): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_pidfd_open(r0, 0x0) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x5c5d, 0x10}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r4, 0x540a, 0x2) r5 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x5, 0x0, 0x4) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000040)) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)) io_uring_enter(r1, 0x47be, 0x370b, 0x0, 0x0, 0x44) 8.061891102s ago: executing program 4 (id=2959): cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x8000}) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0xe80, 0x100) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) rseq(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r4 = gettid() rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) tkill(r4, 0x7) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000100)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@ptr={0xb, 0x0, 0x0, 0x2, 0x1}, @var={0x5, 0x0, 0x0, 0xe, 0x5}, @float={0x9, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000000400)=""/188, 0x44, 0xbc, 0x0, 0x254}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, @fallback=0x24, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x3813, &(0x7f0000000340)={0x0, 0xbe47, 0x40, 0x3, 0x144}, &(0x7f00000003c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_procfs(0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r7 = io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x309c, 0x80, 0x1, 0x38e, 0x0, r2}) io_uring_register$IORING_REGISTER_RING_FDS(r7, 0x14, &(0x7f0000003a40)=[{0x2, 0x1, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/214, 0xd6}], &(0x7f0000001640)=[0x1ff, 0x80000001, 0x537, 0x5, 0x5, 0x2]}, {0x8, 0x1, 0x0, &(0x7f0000003980)=[{&(0x7f0000001680)=""/58, 0x3a}, {&(0x7f00000016c0)=""/121, 0x79}, {&(0x7f0000001740)=""/29, 0x1d}, {&(0x7f0000001780)=""/50, 0x32}, {&(0x7f00000017c0)=""/187, 0xbb}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/215, 0xd7}], &(0x7f0000003a00)=[0x3, 0x80000000, 0x10000]}], 0x2) r8 = dup(r6) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f00000000c0)=0x10000) ioctl$KVM_RUN(r8, 0xae80, 0x0) 7.734433091s ago: executing program 4 (id=2961): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/address_bits', 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000300)={{0x2, 0x2, 0x2, 0x0, 0x5b}, 0x9, 0x5, 'id0\x00', 'timer0\x00', 0x0, 0x10000, 0x0, 0x1, 0x8}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0xff, 0x0, 0xb7, 0xd60022, r3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000007780)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000004c0)="d3f2b504950aa93ba206819ac0c325934d145d850ed58dac4f2e47b62101cc0da7539de591645c0202bd9ae561d99b09f146da24046ce5b95e977f1e7e8b99a1824806d62d3fb43072d84329c1d5c56de3b471bdd62a36c39e757342312eceb24d51516fa44433c3fbc67375a124b23a7a90deab69648455da1a0b338edac74fac02d68e2b825d138646628d2022bf5b1e7acec90fd903520bbe9249d00defeb52abbc156290b5baaa910d76ba414230d3f4da676aafd29086ff051ec3dd645b0217ba3b6c2429d2ac0c75bc58b427d98fe13c0c344ba180030c61d868a63cac168247700b14da386d01", 0xea}, {&(0x7f0000000180)="cfc491fec8f344e3a1c52ad91c3443fe5154a812a5e3d58cbd0783e1d5515256707170b2b0e28d703ef006f0e226a85c070ebf339489b77f9d6b7f701d1a59abe36203420b3eae22c3ca3fb8ed13", 0x4e}, {&(0x7f0000000400)="4b9094001bd0ff78333e0895adf87403750ed63cee9b6ece8f0da7a35645b6cf013a2fbb2f", 0x25}, {&(0x7f0000000700)="ae14a1a45e8be3de47eca462efd5d838587c2bdeb6257056910223f77b442046c6fd47afb7592a67a691966c9daeba3cd4face6780be6ba8b0a567e369019a240ee2fb438c8c6d6569f57749659a3787a8ef089ebe8d79b5a6496573adb062130d2ebe9bd1b7c49cd5674c79b1f50c635f105abc1ecd67102a22e5", 0x7b}], 0x4, 0x0, 0x0, 0x800}}, {{&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000800)="f8afaff3c46b8e8d60b04eaea8195c7f16c034574bf29c8188f591733d07d6f0a147ffb986eac5d92acf5558e9da71d15de4d268bd53779946d9c6b321b1227c480b736835c3b4820773511bb85f2672158da845368ce15ece89f48350ee49018c4084a6170a3214293e1608", 0x6c}, {&(0x7f0000000880)="4e8c413df63628fe42e95a808db0ecee4041488139353a5a39c6c418ff0b5f8248fd1c7fb106ff2495c6cd35e5c40929d99d43cbee6e6c47d21291419331169459d9a03f2cd1e7ac576e85bdbb3c", 0x4e}], 0x2, &(0x7f0000000940)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r2, r1, r2, r0, r5, r2, r0]}}, @rights={{0x2c, 0x1, 0x1, [r4, r1, r4, r0, r0, r5, r2]}}], 0x98, 0x1}}, {{&(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000000a80)="b72cae7b4b5b06eed23b0337fc9496f0f418cef0e743f5c079e559279678b2afea6f8def152d609dd1b64a72a3706071cb55ea19664dba6eb6af21df64f5c0a0f9e319b1c2961dfa143ad29a1e179b96e2d744c0db61b6981b5d430564f0b32ffa7ff06b440474f2484db3b83e4a9bf48364ce1bf7e44507ba43be41385ad3e065c839b29a7e7b14eb29574710956b455089f949bbdae58951b5f9699c0229bc1a369e914237e677836ca283b7432e13195488405ddbe5af970023f9c7371c81ee07d1c2184c65464dd87bb5e6a0cbd32c06b5e053e67130060b4bd36dfaa514f388150759759f8e54e7f7961f00b2310319f7c32d6df3128d5f4a4310007a5095242e5e90b791775cc6c4ac5e70befd14d72b395e021c320a0abec3e9540c53ac6254c9baf3db526629ff80c252ef1fa89a1f80b380bcedfd8204f81abcccdf878c89426459e93bf6ab41951d6ccbb14241e3d237ad5cf625e3902a84f8886cf3c6aaac7d2fd950def423f6261512307805f258a008b9f6f9bc9fce719d710e0a110d135284c6a3d64437429227a3d46ca54cdfc9a4b08f3d293f602373e3b9d192c7ef80e3d82873ab35871988f169fd62b7d8c77c92203d4784a18f16c6771135d339465d007b76653508bdd060f61f32d3c03085943758de190fe7fd3525accd46e1b23a93c99e8bc9061086b2ecddac92f471a41a540a6747a9c20f228c75232f0cab95553cdc5cbfdccffb82e4729d00a6c9079ce934a604b4d2caba5bb15a0602c994c59cf16f12507386fe2fce7c34207940a904bc839459e98ee25b6609b47f4607724b817df6300c1ed93f19d9b8e2c382f991323bf98731350383def0bc2e2d3e9b2f32281b8cbf1ae97c84c1b691f073f05236381bba6fd9c5fda005f5078600a58aad442f423ed10e3d63f52a73610cf27c52f7249c3753c79db885570e76e69ec4ca0fc45e77be0ac5911552a351377bf485b6b19977ccb8ebe9edcdfcdd3b6fdb6df100c3ec2a0b49dbdf51cb1e8b65bbbe35a66e6390b0c6be58e46e3eac997f60b0262aa4524286aea61701bc97c4e47f98f465083942cc227c3ed42c581b9dc1adebfeedf1223be0fd648de79145ec3c00558614eb7d71ec445f19f32e4eeac1b05ceb559e9de661663b59e83bc4cba83c42804b189af1b7e4848d9518cefdebb31ab45a9cc0e5755dcde1ec391affaacbc00731876e6f644737489a54fa5557f7e757f8ef32175a092a1b304a70a539f0eb05e1cb6e95dfd88a7185cbc5567c35b8de0d5ff96d97bf86a88842eea30cb23d4aff0bb196c9ed378fcd4a48e928948d410803040ade9b588ebbd2ddc3a85b3a4856002afe8c3bc2d0d22a875ae8a9add7af8afc30f1db466e05963269970dbf71605d38165ae8f3a34fe42f3bfff677399507651c6b0a37ae12ef3cd7a8a010499e880c1418769597e495bf378fb51f0deef9a33f2fda540551be7859e5454f7a15b3683471b436aaeae80cbc527208135675e19da4c005909e8765a6c8dbc043e88bc34ab4a748ed937c04635771425206fd04789e4ad8f632af6dd965335ddcc37c283508a56978764176f75c6aa88f03b46be10d65ed0050373d2efc5cacb921b34ae372600cf4b0f6e762154c415f8bdffb3c1214f803b12ecf81da108ea26defba5f774b3eccb0fb8e702003e34968d84aca6f81cffa12c6db7b24211cbe770b87e3fb9bca86cc570110ecc4e8f9623f7dafbf42cdb344c27dbd9204631cb174879c36e6e3cc6fab21e0adc74ffe436f9a9c0b855c54b0426082332392af8c5da41da2c319ae95b1b407e76dfe8808a84d9d2a6b19e6ce608944ee404f96daa6e48c2dfcd73141c099e64ae5093ba521fd4413c27f54364fa3cbf1f9e06ca4063ba0f5892e433d3806c657ef0664962b1172f0cba90585586083fb4cd74b8c49c927f4dc1e044e4d4c2e8650324acde6b709326c325109bc2eb2f7b1f0bc7b812658256c7ee12e9e21ffdf58480157bf99ab4aaeb9f52f74c28f9f58cd8c7726d1b22196a18e1c802bbb35f4c5e83e2dd430bd442c2b06cbfb393be10a14d0d748ae12a7ca694f0c1b33730b7914ada923e2ec26b7fbd13dfc3b01d8c9c9c5d0d55d884ab4527f0919faf24be3707baae11f5cbd8e6c0f5e4e2e93ea114e09f406638a4315299ef82b8916c1659bb3906883b9fa52d58073755c6221b5558833a6d9d9ed3bec1155ba72ed9c18fe20d6d7d668736bddc8742a31f30a566998de37582d0766cf38658ba3c1693275730923a7aa2d374133790faf676739a4eca24029e886628d9a4490ef391b5ac5442f89f90248e26fc3c7a73174d6cb47fe361a28bd68171d391679802400c546315d1eca182bfd1d689445eadb9f9b318c1b0a4e53929b4d7134d81a01e1abd4897b9e70fcf98cd33e895991ee93d189646762ddd527bda36c7cc257a3e4710ec93cb8551400a81aa08d3b18901fc59ac8f78d9542f91a67f1b8a01288423755a9c00de771814e66804f8bf40b80ed505f360a596b9b893f679dce6f3176347a2754be76e55a3d27ef7a7450ab327fdca73a74631f84811f2c828361214a1b189506e3661ca6a080ae8f124d7751b9ca72a8730ebc4c40da88ea54d8f8430899d8327b43dd895b161299e7bfc75419bed31727c56ac4dbcdf2e781f61c66f0414d3a406a94016d31ee24887e3088b2346c29bcb6f5d97a23305caef1177d117069fb7a2eeb3dbc4e6ddde16a79056c6a4d6cfd1353476e3a556e5b9cd9e104325d9e8dfa19fc9721a6d1b8d466d82c371d53a3934d1bfedb218bb8e0e120dd9e6f1c70944a0879c6609b2fba0993a0ed8fef94dec292e1d6b9c28c1a70d8211c5a61a3d743fcee4adcb4483f6a55ceae7b7b732e7e130f6be6ac0ac0e8d0692c7d3467c89e98c6900a62d60a513c8b05516f03d11dafc48d330baee75b24472c86ca1c608ad67f525c29be8439ea14e1e96a636bb1d0f82089c88905995ac2357454c7cfcb4bb84f39d718e7c30a92128edf960586f3b3fa0f3e22fe802cefcd4f3b9be1c0bc995c406744e317d1bc7975f4131958d0ee7f87a996761b4986d20a44ff242a61b743975a8da2fc6ee7aa4fa053a835510df5b4f980a2d4ac7bdf747013a8418b88a2b4651dc3041286f1d49dc775817c8a326536c1f1efc09e7167a64ca5dc2f8ac1a2c8bc2cb7ad68dcd58a452efc6225b2ddd91c54bacedad24aadb9ad09bfb0496bfeac67ba0c09ae3864b0f66adf4a607eb4ce49201529582a1aeb70280ae74df5403df854b959ce93e0123cef5b3b330dccba79eec24a54410ac417d1c5c9641a6f243e0720be0f24145f5f5aa53d700bfd3b46c6713fbea2f652d4ec0036796f15bc958686aa226b7fad326a558a20ed0746495ef785b9664d557b5fc31aa375838ece3000099607c39fba6541dbc5dec3c9652e33e9517f585a30c0f9509d0e9af60ec7d413f97b7e52bc706b3c3f2dec3286e50407c0ddcae3313290671f8f9cb847f7ee6a4ef79c367d6c1c587a89355b392af454d32c15085b77eeae7856eeb5f279a1f40a9a235d427f5653bb1e50bad4aac81ed1d84fb8316bb9b1928fbe4496592738283e48c10df478fa06b7c69a8549bf3e664cc55ec9f30200f132378834224d4c46abcead388b27e508d8ad211f183158c9ea04745d4468229ccf3d87c30d8eb0da43d6e987aab29c8227a78a9416283d1871c7eca25c49ef1924533ca59b9520bb391525d0e8fb6b1d2679d6a565efb32856d3474bcb31e59483c3119786e9fdd729691e732a23514eaf236beaf2772c906024242a90e59438ee9d4702504314d2bbe3c30c00b819da65989f8f688a09884d434d1d0729ba751645d4f5917717969f73cf6924e58b775eb29a3974e6bbba8a937df63a057999e2cd19730be66ec9c7402f602c656d3521ed65d03b0074ff4f9a4788a33699eb15acf2b64291726d722bf7ed8279af658b10611942d406ad9952f002997d1aae6bd58a9e98cfb01304133be0467e346627f42878f4c0bfb3edf873896816e988d195dad8cc810e2e53303271bf6a1bff76eb914192e760fb88fd84f2465afb0780d30f44a020d6757c21be5681a7a96ecdf29d5dbbc5ed4bd525864ddbcf49615d63722a5fbfbd4708690f37a70664f3613d3dff5ad13e3fe1ee81ef38f4886cbdd361720bb18751a4c0847ecfcd569f352ae30e748f01b6c90eb7af0c373289ef222d251613ac7507fb76b872924aa77c5d8f33ed16317de3f4ef2f2d3f8900faec80ca397d7dc27d2a4de33815ca585cab3347a7f537ed212270ef5a7c027ccf18fb2da44ff9ef7da156b8f3df76c7d74833d8bb4a514f38565d2a7eea983e0144575807ad23fe49cfd05d1ff2f7a4e4c70fb493eca3dd280c6fb3cef4f68a54dce7a219e9cb59d74a3af2e0bbd107d98c6984a1eb52e67d0b619d2b70fdabbdba81eb68ca0f9f43490b786b4160b3ce1b595903de87223bdbebb1588298dba55627bfaa070b9819825d1275c0d8210e7f838b5cb888a84b7cc6549fc9a33330e8014a8e0aab8215ca752ba1d577af134767779b48c9f8189062e1c7bfe77bf371d07fa3944b3acceede9fab78545802c5c79314ca3b02484f4741e95827cd6b8ef5151ceaed5be7026719527f8d392366d77242660ddde7a254dec8cc4db9f5a4ae838abbc8f3d1e52f71a8735668146ea863b7add74733cabf5ee2ae558c0dac3ec450d2e0f0c308bf820f0961f7f09b7ecb3fc267ae91c6c60a62988bda71fd3a1a9a01b56b1d576d9b193c291877b9ad22a38ee81af41ed3de297aa6e7b4cb43ac151358c41275f8e316dad689bb1fd4c4c06f78a8f2344ca5f585efcb8959b9f128b4f18b3676bc312f8de8c0d0cece1c8069bbf9918c0cc5295e49aab7e858500c6ae6dbd87dee86bebbc9191fc22a9332ef06338099bdbc859dddf782238c089871be461ad6e7e488712db56d90ce8b4490df2060533cb96ff4dab2bc74f02752d211436c5786ee484d4c890ba88e50e65b29ce4969f1a00edbeb4b0c84d9e223c9b7b19d6b2123ac1e6c83e3d9b222138c72910188943ca8dafc468a4194bf766323df42a98332f12c55d1ea9cdf2bda8150c4e5b237edc199095ce37166b849bc85e5d8dfaafe202df1e885a544e10fd2efd78e8d47c7171cb8f93172e651729c7e66bc4bd7c6be9f417d2fe7a4fef66663911a6fa076ceaf19d7cd1377db71e36ec178c2916c97ed2ad393980d4dddcc911a98a5298b2626173d9cb771e7054bc39343cb7fec81fa662236216df93b5e5064e7391b19f6bc6786d4a1ad935e418f497d8b1228fde651ab13dc7c8fe61f94f92205883f66214dd30b955079935029f8a3bd65b17a4716e8323f004cdfdb7a5dc032ac26b8eb817c720df31d5a92dd3f99bf949375858aff9374fc742aedc2d042004de9e2939a5ff4b45856b65ec73f80df283fb5fd32ff0c52d5a88ab1656b2e89ea6c8a19fac15fdfb2fc16c8dc38c64ccc8a6d4fd22dc2bae3a91e56996d872cbd73cb6ee6e68c3328cf9dd8c6c0bcbdfeef3b6e84cd67dad59eff4ae3b1317baab974132c4e2a6eacf4d1d6572699daf2af802fa60a734cdfb69ed99100883ecdf30423c79cd0cdb3a84e9337ae72064042c74f3f8ff64ada1476ee66b8b216aaa96627e21aee7acd820d932363dae01d32f3cc4523a6a8656d02d6ea827ec93008aeedb2da05cdcda544d8aacb70df37b8cd4fe11da2d9b1d0e34f49ba85af838e0fc3f1cdd18a8f0cb6c5b752dbaeb86b", 0x1000}, {&(0x7f0000001a80)="a13f9da025", 0x5}, {&(0x7f0000001ac0)="5dd9567b1a31537d0d221f7c94e6e934dca729e5d55a104807f0c33f9de7957e2792bc9997338fb0ee74fc79277b9cf5d2c2b57833bad7a20669ee2f9957409626a1b7edda65589adeb19b9d0772d60837d9a850699237f1cabf3f563b5c1069c74951f9a6c938b50f0efc994c01222a265ab4ad9be5cae516eb099a8676229b3cd9d1c8b3498a8b8a7bd904287323be69df323cee20f50b4d4115afc27b3e6bc53cb9cd585e80497101dd9b4cb1f454220389dd6949a8a512029278c4e970253dd27a57eb", 0xc5}, {&(0x7f0000001bc0)="13361e84d751719762440f35c8f6d8c04573121aaa71d6f243709a6a5ddfe48c7ed413c1b71ca7e28d86049c058976e528ef3e83ca6a07299e8cf7c8af274908da42ec30fe679caa42e9ec7f790182ff90e99eaf63b37ae357e22f694cf6a7e4539d403dd2ed108e22e5f86e13df4a77e22e74485803f5f9b6046fdb301e3c5315135d0b8a2b357f30e5364b625ff0572d53ae0fc7f535a64a38269233fd2c96e67e1895", 0xa4}, {&(0x7f0000001c80)="50eaa77291aea4fc38c161e4a423fe678d59af452038b4e08b45f69e05b04f525a6189", 0x23}, {&(0x7f0000001cc0)="021bb74d455f82227f0d9046969da6075c07dc978169e54d9a41fe27833aa809c7e34db04bd77b9b9794a5859eae43527c75f7cf80", 0x35}], 0x6, &(0x7f0000002000)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, r5, r1, r5, r5, r4, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xd8, 0x40040}}, {{&(0x7f0000002100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002380)=[{&(0x7f0000001d80)="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"/385, 0x181}, {&(0x7f0000002280)="5d27884fe0f9ccc5f4c7ca140da910629b149eaec77a8abb8985ee0bf451f720674cbfaa9e11ecfbe44b4a961d6dc4df53b110dd2798a8075386a28fba67b525ada986bddca0ee4b27de6926d55c9c106953d49e9932a1d6bf2b8e076549573e8125dfc0aaca60aa2ff49c29f140893bd44c881e925f90d2aa579f28cb725c06d3eadd8a5917b5fc51fd7f0541b65be222845a4aedf8fc29c00bee975601a2032390eca67e7ed32d3c7fd37f2ab00f76e652a277e1e116ab84074a46ca4630ba16accceef107cf06052eb94d057e6933d72ac5aed77eb9e46835811de22dee07f7a31b8ad075315600", 0xe9}], 0x2, &(0x7f0000002440)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r4]}}], 0xc8, 0x4040884}}, {{&(0x7f0000006240)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000063c0)=[{&(0x7f00000062c0)="b5f061c0e3323a4f1053b41d33729dcd851422192b4ad690de58f54abee01a78eabb4eaa52853b718424fa135097485d442d20bb3049f7963bf834bf3d762e3de963faab01c96caabb10fa633f1d312031acd114a29c21ec759d68f7e141428c5ddb149758b01af4805e8b793ab6cc83bff9cfeeb32007e1cfdb2aa0a83cc85fe894015f8898ab0c8394e06194c2192a86ff9e32dab6255d01d715ea091d48a5ce915077d354645ed7d5a5fb0f9c2abc3d0b221768292d711cfa18609ee1c0d13bfe42ad23f203b3f7d53e72", 0xcc}], 0x1, 0x0, 0x0, 0x40}}, {{&(0x7f0000006400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006700)=[{&(0x7f0000006480)="ada1b5a8a1bd1f29f8b75009a16dd2736bcdc2f4118152579e444fb723c3c9793c60a0f3746cd27c5ae453298e75f614ed2579d27886f5491f3da697958956b1ecfe251d235137cb2e372313ac842e49748b184e50c16bf767a1482910af19a89ea0a1c2c00d2fea256dedee5f", 0x6d}, {&(0x7f0000006500)="3075507b1e0356d0ec418215e0060b438b30032bb6a0e61fb7891c62b80ac4051a9aa43f8c2cc1ebd6c16a869875a0ae2519083b0205f7c8770cf995d961193193ad29ac4ff7acafbfe41b2dc3adc6e5a39ab24a09c0fb1a11066ee06247e5dcfa4c868f2194304312dc24a6391bcdd334df68aea068e2b024e0265738736a6ecd106529c91599cdf1ef5d79a0302502cf5d087e4bd03a4861c754f5b08f5d61cac83397e55d761208b3e003aaa9fd580112", 0xb2}, {&(0x7f00000065c0)="c5ae581d746c54065694cf2d045796c470d92b7bb7cdb08fd0185a2674b763b4618c3f00a34f5edf31f47d49a7505b822e264b32e656cc430d87738c4bfa346f7d83d482621da4671e8f6b2896aa33e832af6a236dcf28ba146d6a7213a88bcb2e560bed1fb420e2661b2d5db67adabb94f8dc69756936daa2c512b06d1fdfb01050bbfe2759b2e4dda3c1695663ffd13efe2c87b48327d2c3c413dc947696570b07a713ff014c4ef45997fa4536d4367f5d64", 0xb3}, {&(0x7f0000006680)="b16dc023fa7452fda184a1f2bcbd4d92f129f9149dc1e7006f9070430d50cc1defb720076ccd55a911354ca97a2e85b177a32630c434aa132edc4da850326be59d9b7f20aed99d1d", 0x48}], 0x4, &(0x7f0000006740)=[@rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r1]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0, 0x80010}}, {{0x0, 0x0, &(0x7f0000006a00)=[{&(0x7f0000006840)="513e920e6959cc23427c788599fc2bed24f08a1a79ebb788f169aed80c3f0156bb6b4c90699d5cf71246e80831b8dbc4efb9c9139db5f7486f87959b42d82c816df9098a57632ea3804476abb4f841991e008cf0d7d9b8080a8b11901bc9f44173b4c06f9d7133ba15e42e30908c590510890f67609501697d01061995bb2c9c4c3c79ab9f52b808087bcf6df801b1e11ee3be928b24e8813a2a7dd00048a94d68acd1b0c4cfcbaea8fd7d7790f3b00d195db8bdb872689ea44c51958f8085dfd68433e7cabd04f7eee94a07", 0xcc}, {&(0x7f0000006940)="f282acc27a21ef46835556deed428c56c4912bd4adecb34c63ebd37d16c77fa90bd6918476995f89404ad4557816a548539dbbccece1d6d0a61b41d560006ff6f825704216fe6193e2a436bec8c5a5b3ecc146095c35ba53e81fbd3577622bdebb06c5bac327c73b0d206dd5d4ed53c99c3c66025ecae860306077b3176fe0031ee1950d96146d1e378fbae23e", 0x8d}], 0x2, &(0x7f0000006e40)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98, 0x4008000}}, {{&(0x7f0000006f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007040)=[{&(0x7f0000006f80)="c80d38f82de681879b9333342aac171734ef4990a209ab3d728a046430fb2a923b2ca56f857c2e1ed198c09ddf25e224f2a6c914f29beb9863ed948e4e385711193c48a2787a5153c087959cf30fafacdb1d71383f2e3a6a79d735bf7e0653e3dc8b0a2dcdf8e5131b88b65bf2b28216246c5398ab36e33f7d463a550189199380c278022867a169db22d7e7", 0x8c}], 0x1, &(0x7f0000007100)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80, 0x20000050}}, {{&(0x7f00000071c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007680)=[{&(0x7f0000007240)="3c286d371c5ba0e951170e6e8405d5264a43b1857112920303ef094e2c06e16660ce2cbc56a100c631ada25c60156ab229035b50c3bd59", 0x37}, {&(0x7f0000007280)="ae440a4e8607d61336154b5d541cba63d8d5fc7d33675c", 0x17}, {&(0x7f00000072c0)="7e15c2c50f19c9c035e975022810593851046a4ffca185535b5c9b0c7f23d272f5f798989eab1d9ddfa9a4068662f49522ba4f2f237ba7a3f4a250608a45087df79188b1e2ac7148bf9f3a53b7fc9d7956bbe70827656e4913a6a0f225f37af613c68d92f9545b6c98b85e55e158bf837037ee56b48bdd1b5b8583b3c50a68a5f05645e69479f642cfc766c1ec42446184dd9b67b0d0ed2b0837ac0c33381f00085401654072f29a14d28f3c6994b43c2c22c035e9c55aa58e4cc7e5aef3426b49cfa5374c306460dad26d638bf7f77424cfc2ee528442742a6b97545d", 0xdd}, {&(0x7f00000073c0)}, {&(0x7f0000007400)="351807763ebab0507ceb28028f6f861984f4591362bdbcfd65b568dc97aa0ed88deb14be66420190e34fb9ee71581750ce989e754d42e40daf930b344327dac4c321f6660720c230b51c1bc28bb3b48b94dacc2c2e75c4d291b74ead251be574782d098754d30bf8633697be7bf8ff868b8dc583a75593bc8fd836b0511c097aefb7bb8d32fca98ca3a04e12be0d309d3ab49639a498ae24f600d62eadb3a93cc148927ae2895cd78e2692c997d87d01358fe23e5dae689728efbb5f49d08fb627f994e92826858e909ad1db6c5365aa07e57df75b4b092327a953c0d21065ce02ea30a4b37ad29cb842edf2229b9be196852771a420e39d577211167a35", 0xfe}, {&(0x7f0000007500)="1ba55255d483646b64b251530330d1f1a923e6fcb9b8de903eb7e4f721b852522d8309927be1f3398d23a0f9f24bf82aa4f982436c1728da27003f5f84eb1b54bea2eda153234a6e7ebfc78ae527a1f571c353c61d8b745ab9776c85480c9e7aac8810377cfccba9a5ee63f98370022fdb06df84d1067354bc39753c", 0x7c}, {&(0x7f000000e280)="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", 0x1000}, {&(0x7f0000007580)="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", 0xfd}], 0x8, &(0x7f0000007700)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68, 0x4001}}], 0x9, 0x1) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010000304000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYBLOB='\b'], 0x40}}, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x4008af25, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r8 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x80, 0x7, 0x1ff}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0x0, 0x0}) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r11, 0x0, 0x0, 0x240008c4) io_uring_enter(r8, 0x40f6, 0x29a7, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) r12 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_CLEAR_HALT(r12, 0x80045515, &(0x7f00000000c0)={0x1, 0x1}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)={0x4c, r14, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6.600142727s ago: executing program 1 (id=2964): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x68942, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x1c, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0xfffffffffffffffd}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e2793f10d1b3fd15b1fca9101b010902120001527aa07e828cec84fc1a42f77782ce4d000000000904", @ANYRES8=r1, @ANYRESOCT=r1], 0x0) 6.323789673s ago: executing program 4 (id=2966): sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = fanotify_init(0x200, 0x40000) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000000)={0x80, 0x401, 0x4, 0x6, 0xc, "925ebdc8902d28ee"}) sendmsg(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x3, 0x0) fanotify_mark(r2, 0x1, 0x8000018, r1, 0x0) ptrace(0x10, r0) 5.257831086s ago: executing program 4 (id=2971): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x11, 0x0, @remote, @local, {[], {0x4620, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x9}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) times(&(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) 4.339525376s ago: executing program 2 (id=2975): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async, rerun: 64) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) (async) r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r3, 0x400, 0x0) mq_unlink(&(0x7f0000001440)='%\xbc\xbf;-\xe2\xe0\x8d\xb9\xd8\xa4>\x82sII\x81P!\t\x04\x11t\xd4\x1e\x94&\xb1\xc6\x00`R\xfc\x9cF\xd4\x18\b\xb1\x04\xa1K@?\x97\x1b`\x1f\x1d<\xc6\n\x1b\xa0\x8bP\xcc\x13Q2H\xba\xbc\x18\xbd\xbe\xf8\b*\xf5\xdf\xb2\xd5+\x86$,& \xdc\xb8\xb7\x90\xc4\x948\xb5\n\xc2\"y-0\x88\x91\xbb[\x10?V\x9e\x94mB\x7fz\x1a:o\xe5\xe3f\xae\x03\xc7\x98\x95a\xfc\xb4\x96\xf0\xb6\"\x92\xbet\xec\x8d\x11\xcb\x9fpr.2\xe3\xca#\x18\x9b\x15\x1b\x9a\xdb\xb8\xf1]\xa3\xd9\xfa\xa5;Djo\x83\xba\xf9\xae\a)#J\x00'/176) (async) close(r3) (async) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x7bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x4], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="14000800130a030300000000010000fa21d72c5d61680000000100"], 0x14}, 0x1, 0x0, 0x0, 0x20006900}, 0x40000) r5 = syz_open_dev$usbfs(&(0x7f0000001380), 0xffffffff, 0x101000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000001500)={0x2, 0x0, "e2872c2e23fbd1015ddf5fd12891fba4194fdfd1afe9c42d9dc999604bdcc327b6c3f5ddaea01c18d0d87d0c9b7d6ae866c05c627cf39a9d765ad5aca6b52c2840e090ad1828166eb2695967555d197db10101f8435d054dd58952e56e183e896020e3389abd5f84d7707289bb2e06705180a5e1ffc5287f99f6dc40de7b015b3996edf6bbb856ae748d027b4e2a58aae717b7b90d0e3bd0a675c99e2b06b49d8e48726945840f0278bd47499d7eacdce60bf6f1cbae1f6d72a076b108b73853e660940eaf0e6e62bacd55eaa43fb2bf7ea658ec721f762f135cbd182427c58bf77db18c269b765311a8cd8ab2c3d89dd1691c9696042ed988e8f2d9b2358c98"}) (async) r6 = socket(0x1, 0x80805, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) (async) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) 4.286792533s ago: executing program 2 (id=2976): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="08010000160001000000000000000000ac14140a000000000000000000000000fe88000000000040000000000000010100000000000000000000a0000c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000aa0002000032000000fe8000000000000000000000000000bb000800000000000000000000feffffff000000000800000000000000000000000800000000000000000000000000000000000000000000000f00000000000000ffffffffffffffff03000000000000000a00000000000000000000000000000000000000210000000000000028bd7000000000000a000000000000000000000000000000feffffff08001e"], 0x108}}, 0x0) 4.11174966s ago: executing program 4 (id=2978): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYRESHEX], 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0xfffffffe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x1cc, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@private=0xa010102, 0x10, 0x0, 0x80}, {@in6=@loopback, 0x0, 0x32}, @in=@local, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x2, 0x2, 0x4, 0x0, 0x6a}, [@algo_auth_trunc={0xd9, 0x14, {{'sha256\x00'}, 0x468, 0xc0, "8a2b5500cbf05ffaefc237e4c798894017d854824f0e9eaf0a93103f86a42a4b80d12f3a06070583980ecaac347dde4ae2f2696aff82fcdad184b3b12626dadb0f42f2aa142ef34a8cfabee95f0f8f64c0ed3873ef32a96bdd243e91ca283dfb79c3005728b2ad1cb9f250ed6ad917cd6f1cd004750496f36f99b8a1b58a28b537eaed3afb8fabd499317a5f9c"}}]}, 0x1cc}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 4.108853021s ago: executing program 2 (id=2979): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="e0010000090603000000000000000000000000092800078007001a005e7d000008000b400000012106001a002800"], 0x1e0}, 0x1, 0x0, 0x0, 0x4}, 0x14000000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000100000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000008000000000000000000000000000003000000000000000000000000000000000000000000000003000000000000000700000000000000000000000000000000000080ff000000030000000000000000000000000000000000000000000000000000000000000044010500ac1414bb000000000000000000000000000000006c00000000000000ac141408000000000000000000000000000000000000ff00000000000000000001000000ac141419000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb000000000000000000000000000000000103000000000000000000000000000000000000000000000000000000000000000000003200000002"], 0x1fc}}, 0x0) 3.987200444s ago: executing program 2 (id=2980): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000007c000010000880d03557", @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x440c8}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x59, 0x1, @scatter={0x2, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/133, 0x85}, {&(0x7f00000001c0)=""/92, 0x5c}]}, &(0x7f0000000280)="e866860c63e5a3622f2d8709d2a517b8f874cb55c6f514e1e7c2d174470d5c12e110bbf759dadb7ac511665f7c232ed7360fdb9787275643a51fc81c7eaf88a471267913766097a8934211d762b2babd6b3a156c1ac81ab8cc", &(0x7f0000000300)=""/206, 0x8, 0x10000, 0x2, &(0x7f0000000400)}) 3.96092453s ago: executing program 6 (id=2981): mknodat$loop(0xffffffffffffff9c, &(0x7f0000001440)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200, 0x0) unshare(0x22020600) unshare(0x2c020400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x14, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.843214256s ago: executing program 2 (id=2982): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'veth1\x00', 0x1000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x1a066042, 0x0, 0x0, 0x3, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x158, 0x0, 0x20000000000, [{{0x4, 0x3, 0x7, 0x0, 0x0, 0x1, {0x5, 0x9, 0x8, 0x3, 0x2, 0xa, 0x1, 0xc3, 0x10, 0x2000, 0xd4, 0x0, 0x0, 0x9, 0xffff}}, {0x6, 0x9, 0x4, 0x3, '!+#@'}}, {{0x2, 0x1, 0x7, 0xe, 0x1, 0x93c, {0x4, 0x2, 0x5, 0x9, 0x4, 0xf, 0x100, 0xfffffffe, 0x1, 0x0, 0x3, 0x0, r3, 0x7, 0x3}}, {0x4, 0x7fffffff, 0x10, 0x0, '/){----${-:_)#}.'}}]}, 0x0, 0x0, 0x0}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000280)={0x1, 'bridge0\x00', {}, 0x3}) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x238, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x7, 0x0, 0x0, r6}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x0, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2f88}, @CTA_EXPECT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x200008c0) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r10, 0x0, 0x0, 0x0, 0x0, 0x0) 3.808340689s ago: executing program 6 (id=2983): shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x4241, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x84, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x448d0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES64=r1]) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000001c40)=@raw={'raw\x00', 0xc01, 0x3, 0x1230, 0x10e8, 0x5002004a, 0x0, 0x10e8, 0x0, 0x1198, 0x3c8, 0x3c8, 0x1198, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'wg2\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1290) 3.621233687s ago: executing program 6 (id=2984): syz_open_dev$loop(&(0x7f0000000000), 0xf01c, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000deff000700000000060015000200000014001680100008800c000380"], 0x79}}, 0x0) pipe(&(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000003540)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xee}}}, 0x90) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000240)=0xffe) clock_gettime(0x0, &(0x7f0000000300)) ppoll(&(0x7f0000000200)=[{r5, 0xa2c1}, {r5, 0x4000}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@multicast1, 0x0, 0xa}}]}, 0xcc}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xfc}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 3.351651136s ago: executing program 1 (id=2985): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r3 = socket(0x1d, 0x2, 0x6) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002640)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a140000001100010005000000004135d9e902d9a6"], 0x28}, 0x1, 0x0, 0x0, 0x4000014}, 0x80c5) recvmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/7, 0x7}, {&(0x7f00000006c0)=""/131, 0x83}], 0x2}, 0x60) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000300)=0x8) sendmmsg$sock(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000100)="1f", 0x1}, {&(0x7f00000009c0)="01f3a4f45d4bc56cbe8f53b44a25489813821be2add117d943a2efc94c4c3b4eec49233e3bcbc8dbb44f45256ab72cd60ee3b8fc8becd6f405a9b82617ddbbe143e2d4c100ce357376", 0x49}, {&(0x7f00000003c0)="4993b71b3a6ce42d305d47bc", 0xc}, {&(0x7f0000000900)="e494241149eba2a6e6e1c1f0b8213c4dfcfcebbae7cbe0a04277376dee8be39b8812f27e06216a3c8f503732582e02da81475edd0702c1545669d9cfb72ebfe1e05be94ebdf292fb184d1d2215ffe48429aa7887a578e0d46500295572ec0b9ea1195226973735f3a0d51e57b0063636cd592955cdad9ac299af9e11014b2dad8a352791ba886ce7c7636ba1e5827d1a7f289edd200290eec781dbd5ae23fc5ab9ce33bebcc3e48188d6cd2f04", 0xad}], 0x4}}], 0x1, 0x0) sendmsg$can_j1939(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)="f4e78d4837b4c64b7bce30d85066e820619c9624346344714b2b454ea8f4eef1584fbfa34491c5c24c7b75198d6f0f7b69933483ee784106987e85d5f2a77f21d1c0cb9eb183e1a76d856e5ebd44bf761e52cefa49f6232ab391b4625ed815a87d9eed921d95eaf0cfb3eb3a921c34394f5fe05b9effc5", 0xffffffffffffff86}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) socket(0x1d, 0x804, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) poll(&(0x7f0000000200), 0x51, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x7fffffd, 0x0, 0x1, 0x5, 0x0, 0xfff9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x80ffffd, 0x0, 0x1, 0xa, 0x7f, 0x7}, 0x20) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @value=0x100}}) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@inet=@socket2={{0x28}, 0x2}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) 3.1072346s ago: executing program 6 (id=2986): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000600)=0xcd, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f000000a680)={{0x12, 0x1, 0x201, 0xa2, 0x9f, 0x5d, 0x10, 0x2c7c, 0x306, 0x3c51, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x8, 0x70, 0x9, [{{0x9, 0x4, 0x7d, 0x2, 0x0, 0xff, 0xff, 0xff, 0x6}}]}}]}}, &(0x7f000000acc0)={0x0, 0x0, 0x0, 0x0}) 2.821391347s ago: executing program 2 (id=2987): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@arm64={0x0, 0x4, 0x4b, '\x00', 0x1765}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)=""/246, 0xf6}, {&(0x7f0000003380)=""/235, 0xeb}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000680)=""/203, 0xcb}, {&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000002100)=""/4090, 0xffa}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000540)=""/211, 0xd3}], 0x8}, 0x40012100) r4 = socket$inet6(0xa, 0x805, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x5b03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="2413030000009271efd0250ef80ded5fcc24c2fcfe82a80f9d7714d2879563cddfcd8b4a0e5bb4c65d3200000000000000000000000000005a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r8, 0x0, 0x30, 0x0, &(0x7f0000001000)=0x90) r9 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r9, 0x240}], 0x1, 0x8000db3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000100)) shutdown(r10, 0x0) getsockopt$bt_hci(r4, 0x84, 0x85, &(0x7f0000001100)=""/4060, &(0x7f00000010c0)=0xfdc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0xe5, 0x3f1, r7}, &(0x7f0000001080)=0x10) 2.107626476s ago: executing program 4 (id=2988): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000300)={'sit0\x00', &(0x7f00000001c0)={@rand_addr=' \x01\x00', @multicast1, 0x1a, 0x1f}}) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) (async) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000180)=0xf1e8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x40000e}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000580)=""/94, 0x5e}, {&(0x7f0000001400)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000010}], 0x4, 0x122, 0x0) syz_usb_connect(0x0, 0x1ef, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbb, 0x5, 0x23, 0x20, 0x293c, 0x5702, 0x6f75, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1dd, 0x1, 0x0, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xa, 0x5e, 0x62, 0x7e, 0x0, [], [{{0x9, 0x5, 0xb, 0x4, 0x400, 0xa, 0x1, 0x10}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x3, 0x8, 0x1, [@generic={0x73, 0x10, "15a1aef86c76cd3eeea9e1221d6f75ae9b0bbf97d4bf27826a0317606841c31282ddad5eff9824e088a312bd5ee9e77ee51167add5fdad3796309c09946fec99b80af4fcd406ba730783ca7e4b4200c9ece4c65b54634a1c80e054181db33e6a2b7ef0b840afbae79e91de65eba3357c51"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x3c, 0x0, 0xd}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x0, 0x3, 0xf9, [@generic={0x37, 0xf, "4c7e19c1d239cdfecbd2cb092bcca9d6c3a4749c716e8f7722e7cb55c1f0fddbde3f84cec6c4289b7f3480ee9f100f2eb19cf33ef0"}]}}, {{0x9, 0x5, 0xc, 0x11, 0x8, 0xc3, 0x2, 0x40}}, {{0x9, 0x5, 0x4, 0x2, 0x400, 0x83, 0xf3, 0x0, [@generic={0x2c, 0x2, "bcd503a583e56303e7a872b26ad6c4e343db3298b910525102165d34de127e99c39d789163871ab765fc"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0x2, 0x0, 0xfd, [@generic={0x3, 0x69bb3913defd8325, "8c"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x9, 0xf, 0x2}}, {{0x9, 0x5, 0xa, 0x0, 0x3f7, 0x83, 0x0, 0x88, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x5}]}}, {{0x9, 0x5, 0x6, 0xc, 0x8, 0x7, 0x3, 0x7, [@generic={0x8a, 0x23, "b299a71d3dbb1049c343655beb3fa6f4072549f3c18ed9e225bf18d04e56b78c53fdeb94f516bfa305dc886d694d0f2dfd5f8477c84e24106ec06f2220dae05021f5bbcca3dfbacb2a3ca37b8858e9588b11094b363811237d828c55f60b67fd1f6c334178468f21227771c21d0c1f758e5839ff39abf2296df3524bb7b8d61aa9af1301f93ac436"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0x2}]}}]}}]}}]}}, 0x0) 1.771618816s ago: executing program 1 (id=2989): preadv(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x7, 0x2000, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904000002ffffff0009050b0000000000000905ece2"], 0x0) 1.4389148s ago: executing program 6 (id=2990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xfffffffffffffe75, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000000010104000000ce511a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8001) fcntl$setsig(r2, 0xa, 0x1c) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x50, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000000009040000024f6996000905c6d60000000000090502"], 0x0) 1.322071788s ago: executing program 0 (id=2991): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="e0010000090603000000000000000000000000092800078007001a005e7d000008000b400000012106001a002800"], 0x1e0}, 0x1, 0x0, 0x0, 0x4}, 0x14000000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000100000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000300000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000100030000000000000000000000000000000000000000000000000000000000000044010500ac1414bb000000000000000000000000000000006c00000000000000ac141408000000000000000000000000000000000000ff00000000000000000001000000ac141419000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb000000000000000000000000000000000103000000000000000000000000000000000000000000000000000000000000000000003200000002"], 0x1fc}}, 0x0) 1.199727707s ago: executing program 0 (id=2992): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x80000001, 0x11, 0x0, 0xc, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x3}}}}]}, 0x78}}, 0x0) 1.123416075s ago: executing program 0 (id=2993): r0 = syz_open_dev$sndpcmc(&(0x7f0000000440), 0x1ff, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000480)={0x1, 0x1, 0x0, 0xffffffffffffffff, 0x701a, 0x726dc14, 0x6b18024f, 0x3, 0x1ff, 0x1, 0x3, 0x2}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x1a5982) pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 628.711666ms ago: executing program 0 (id=2994): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000005f"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x7}]}) accept(r0, &(0x7f0000000140)=@ethernet={0x0, @link_local}, &(0x7f00000000c0)=0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0x100000, 0x4630, 0x3, 0x1, 0x0, [{0x1, 0x1, 0x6, '\x00', 0x5}, {0x0, 0x5, 0x7, '\x00', 0x5}, {0x8, 0x8c, 0x6, '\x00', 0x8f}, {0x6, 0x1, 0x0, '\x00', 0x4}, {0x0, 0x3c, 0x2, '\x00', 0x3}, {0x6, 0xf, 0x5, '\x00', 0x4}, {0x0, 0x1, 0x2, '\x00', 0x7}, {0x5, 0x0, 0x8, '\x00', 0x1}, {0x9, 0x5, 0x9, '\x00', 0x4}, {0x7, 0x4, 0x4, '\x00', 0x4}, {0xae, 0x1, 0x5, '\x00', 0xa1}, {0x0, 0xff, 0x50, '\x00', 0xf}, {0x4, 0x8, 0x14, '\x00', 0x1}, {0xd4, 0x6, 0x6, '\x00', 0x9}, {0x0, 0x0, 0x26, '\x00', 0x7}, {0x5, 0x5, 0x4c, '\x00', 0xf7}, {0x0, 0x4, 0x7, '\x00', 0x7}, {0x10, 0x8, 0x8, '\x00', 0x3f}, {0x5a, 0x9, 0xfc, '\x00', 0x80}, {0x9, 0x6, 0x8, '\x00', 0x8}, {0xf, 0x5, 0x2, '\x00', 0x6}, {0xff, 0x6, 0x5, '\x00', 0x3}, {0x1, 0x5, 0x57, '\x00', 0x4e}, {0xc, 0x8, 0x0, '\x00', 0x7}]}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x404580, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r9, &(0x7f00000003c0)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) write$UHID_CREATE(r8, &(0x7f0000000180)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/116, 0x74, 0x6, 0x4, 0xffff, 0x6, 0x1}}, 0x120) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="980000001000010400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5d580000004000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001000000000024000e"], 0x98}, 0x1, 0x0, 0x0, 0x840}, 0x0) 270.588268ms ago: executing program 1 (id=2995): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x3ff, 0x80}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000c80)}}], 0x1, 0x480c6) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0xf}, {0xf, 0x7}, {0x0, 0xfff1}}, ["", ""]}, 0x24}}, 0x24040060) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) unshare(0x24060400) syz_usb_connect(0x3, 0x46, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x2f, 0x8b, 0x88, 0x10, 0x763, 0x1011, 0xa5e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0xfa, 0x2, 0x0, 0x7f, [{{0x9, 0x4, 0xcb, 0x80, 0x2, 0xff, 0x63, 0x3d, 0x80, [], [{{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x4, 0xb1, 0xe, [@generic={0x8, 0xb, "25bbf1defa19"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x408, 0x1, 0x1, 0x6, [@generic={0x8, 0xb, "50023a795d5a"}]}}]}}]}}]}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x1) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000001400128009000100766c616e0002000024000280"], 0x34}}, 0x2) keyctl$unlink(0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup(r7, &(0x7f00000000c0)='syz1\x00', 0x1ff) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7ab5d714bc5ae36492f5ab8f85f2cfdd8e"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f00000002c0)={0x6, 'macvlan1\x00', {0x4}, 0x1}) 242.381526ms ago: executing program 0 (id=2996): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000005180)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6, 0x84000) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x100000, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r6, 0x4112, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x9, 0x10}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/16], 0x10}, 0x40010) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000001400)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0x104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x8, 0x0, 0x0}}, 0x10) r9 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x7]}, 0x8) poll(&(0x7f0000000240)=[{r2, 0x5165}, {r3, 0x6200}, {0xffffffffffffffff, 0x478a}, {r4, 0x8020}, {r5, 0x1003}, {r6, 0x180}, {r7}, {0xffffffffffffffff, 0x7}, {r9, 0x8019}], 0x9, 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001900010000000000000000001c14007f"], 0x24}}, 0x0) 26.432875ms ago: executing program 6 (id=2997): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf4, 0x17}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2}, {0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x50, r11, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x809) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xe000, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) 0s ago: executing program 0 (id=2998): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80000) bind$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000}}}, 0x3a) (async) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x50, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_setup(0x2d2, &(0x7f0000000100)={0x0, 0x7872, 0x400, 0x3, 0x29f}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) (async) r5 = io_uring_setup(0x76a9, &(0x7f0000000200)={0x0, 0x1aae, 0x4, 0x1, 0x3e0}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6e, 0x0, r5, 0x1, &(0x7f0000000280)="35376582b6362005c2a15600f122fd93a5308f4eee0d67d227664c4cac7b1c881b3d7b58df3cd8d55479245cbf5a", 0x2e, 0x2, 0x0, {0x0, r6}}) (async) r7 = syz_io_uring_setup(0x2201, &(0x7f0000000300)={0x0, 0x403, 0x8, 0xff, 0x13e, 0x0, r3}, &(0x7f0000000380), &(0x7f00000003c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(r7, 0x1a, &(0x7f0000000400)={0x400}, 0x1) (async) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000440)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x1000, 0xfff9, 0xd9de, 0x3ff, 0x1, 0x3, "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"}}, 0x1118) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80010, r7, 0xb93b9000) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r9, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, 0x1, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8011) (async, rerun: 32) inotify_init() (rerun: 32) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000001680)={'gretap0\x00', 0x8}) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xe, &(0x7f00000016c0)) (rerun: 64) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = memfd_secret(0x0) ioctl$VIDIOC_S_TUNER(r11, 0x4054561e, &(0x7f0000001700)={0x2b, "8b5ef6d3b0560b69c304dd4b614d3c324d3b32555a5197095efa048e87fd8373", 0x3, 0x80, 0x4, 0x15, 0x10, 0x4, 0x200, 0x2}) (async, rerun: 32) r12 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x13, r11, 0x8000000) (rerun: 32) syz_io_uring_submit(r12, r8, &(0x7f00000017c0)=@IORING_OP_SEND={0x1a, 0x5a, 0x0, r10, 0x0, &(0x7f0000001780)="2e929d513b2b", 0x6, 0x20008084, 0x1, {0x0, r6}}) r13 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001800), 0x80, 0x0) setsockopt$SO_J1939_SEND_PRIO(r13, 0x6b, 0x3, &(0x7f0000001840)=0x6, 0x4) write$6lowpan_enable(r13, &(0x7f0000001880)='0', 0x1) (async) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000018c0)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r13, 0x10e, 0x1, &(0x7f00000019c0)=0xb, 0x4) ioctl$VIDIOC_G_INPUT(r13, 0x80045626, &(0x7f0000001a00)) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x12c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6869}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x252}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff03}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x42}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x98}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x68}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_BEARER={0x4}]}, 0x12c}, 0x1, 0x0, 0x0, 0x80}, 0xc814) kernel console output (not intermixed with test programs): -1: usb_control_msg returned -71 [ 859.876335][T13481] usbtmc 2-1:16.0: can't read capabilities [ 859.945542][T13481] usb 2-1: USB disconnect, device number 87 [ 859.992170][T15819] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 860.232281][T14464] usb 3-1: USB disconnect, device number 113 [ 860.514582][T11302] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 860.651879][T15832] pim6reg: entered allmulticast mode [ 860.660472][T15832] pim6reg: left allmulticast mode [ 860.779074][T11302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.793156][T11302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.907096][T11302] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 860.941055][T11302] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 860.964934][T11302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.000779][T11302] usb 5-1: config 0 descriptor?? [ 861.481085][T11302] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 861.797003][T15824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.821403][T15824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.037117][ T5924] usb 5-1: USB disconnect, device number 43 [ 862.744956][ T978] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 862.755198][ T5989] vhci_hcd: vhci_device speed not set [ 862.805415][ T5924] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 862.920160][ T978] usb 3-1: Using ep0 maxpacket: 8 [ 862.929062][ T978] usb 3-1: config 6 has an invalid interface number: 184 but max is 2 [ 862.940648][ T978] usb 3-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 862.953437][ T978] usb 3-1: config 6 has 1 interface, different from the descriptor's value: 3 [ 862.995225][ T5924] usb 7-1: Using ep0 maxpacket: 16 [ 863.002098][ T5924] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 863.013100][ T5924] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 863.026000][ T5924] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 863.035795][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.046861][ T978] usb 3-1: config 6 has no interface number 0 [ 863.046977][ T5924] usb 7-1: Product: syz [ 863.057818][ T5924] usb 7-1: Manufacturer: syz [ 863.062632][ T5924] usb 7-1: SerialNumber: syz [ 863.097674][ T978] usb 3-1: config 6 interface 184 altsetting 249 has an endpoint descriptor with address 0x76, changing to 0x6 [ 863.117963][ T978] usb 3-1: config 6 interface 184 altsetting 249 endpoint 0x6 has an invalid bInterval 240, changing to 11 [ 863.141984][ T978] usb 3-1: config 6 interface 184 altsetting 249 endpoint 0x6 has invalid maxpacket 26503, setting to 1024 [ 863.158394][ T978] usb 3-1: config 6 interface 184 altsetting 249 has an invalid descriptor for endpoint zero, skipping [ 863.196387][ T978] usb 3-1: config 6 interface 184 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 863.219299][ T978] usb 3-1: config 6 interface 184 has no altsetting 0 [ 863.233586][ T978] usb 3-1: New USB device found, idVendor=07ca, idProduct=a310, bcdDevice=9e.2d [ 863.250100][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.259102][ T978] usb 3-1: Product: syz [ 863.263454][ T978] usb 3-1: Manufacturer: syz [ 863.271489][ T978] usb 3-1: SerialNumber: syz [ 863.335145][ T5924] usb 7-1: 0:2 : does not exist [ 863.357418][ T5924] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 863.392768][ T5924] usb 7-1: USB disconnect, device number 75 [ 863.473464][T11993] udevd[11993]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 863.697428][ T978] usb 3-1: USB disconnect, device number 114 [ 864.209394][T15887] netlink: 'syz.4.2502': attribute type 1 has an invalid length. [ 864.220976][T15887] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2502'. [ 864.595378][ T5924] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 865.885188][ T5924] usb 7-1: device descriptor read/64, error -71 [ 866.045158][T11302] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 866.135164][ T5924] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 866.156283][T15931] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 866.178135][T15931] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 866.219447][T11302] usb 3-1: Using ep0 maxpacket: 8 [ 866.247978][T11302] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 866.276549][T11302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.292666][ T5924] usb 7-1: config 0 has no interfaces? [ 866.301368][T11302] usb 3-1: Product: syz [ 866.305368][ T5924] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 866.315083][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.323231][ T5924] usb 7-1: Product: syz [ 866.328378][T11302] usb 3-1: Manufacturer: syz [ 866.335139][ T5924] usb 7-1: Manufacturer: syz [ 866.343374][ T5924] usb 7-1: SerialNumber: syz [ 866.343432][T11302] usb 3-1: SerialNumber: syz [ 866.365638][ T5924] usb 7-1: config 0 descriptor?? [ 866.395184][T11302] usb 3-1: config 0 descriptor?? [ 866.662966][T11302] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 867.888738][T11302] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 868.194686][T11302] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 868.344788][T11302] usb 5-1: Using ep0 maxpacket: 16 [ 868.354017][T11302] usb 5-1: config 0 has an invalid interface number: 180 but max is 0 [ 868.363388][T11302] usb 5-1: config 0 has no interface number 0 [ 868.378349][T11302] usb 5-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 868.390328][T11302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.398560][T11302] usb 5-1: Product: syz [ 868.402862][T11302] usb 5-1: Manufacturer: syz [ 868.408653][T11302] usb 5-1: SerialNumber: syz [ 868.416100][T11302] usb 5-1: config 0 descriptor?? [ 868.425114][T11302] usb 5-1: bad CDC descriptors [ 868.803597][ T5924] usb 3-1: USB disconnect, device number 115 [ 869.033754][T15950] input: syz1 as /devices/virtual/input/input58 [ 869.195698][ T5989] usb 7-1: USB disconnect, device number 77 [ 869.198083][T15954] program syz.6.2521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 869.261235][T11302] usb 5-1: USB disconnect, device number 44 [ 869.285594][T15957] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2521'. [ 869.352295][T15960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2522'. [ 869.528215][T15966] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2524'. [ 869.533073][T15967] netlink: zone id is out of range [ 869.543056][T15967] netlink: del zone limit has 4 unknown bytes [ 870.014701][T15986] program syz.4.2523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 870.034632][T15986] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 870.065398][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.071903][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.899747][T14464] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 872.072096][T14464] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 872.083949][T14464] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 872.109950][T14464] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 872.124762][T14464] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 872.134342][T14464] usb 5-1: SerialNumber: syz [ 872.359574][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2536'. [ 872.399246][T14464] usb 5-1: 0:2 : does not exist [ 872.460369][T14464] usb 5-1: USB disconnect, device number 45 [ 872.573181][T11993] udevd[11993]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 873.142521][T16027] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 873.709250][T16046] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 874.295104][ T5989] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 874.354603][ T978] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 874.544809][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 874.551811][ T978] usb 2-1: config 2 has an invalid interface number: 252 but max is 3 [ 874.556949][ T5989] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 874.581068][ T5989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 874.581365][ T978] usb 2-1: config 2 has an invalid descriptor of length 187, skipping remainder of the config [ 874.608213][ T5989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 874.624848][ T978] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 4 [ 874.645116][ T5924] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 874.682712][ T5989] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 874.692830][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.705486][ T5989] usb 5-1: Product: syz [ 874.709670][ T5989] usb 5-1: Manufacturer: syz [ 874.714257][ T5989] usb 5-1: SerialNumber: syz [ 874.725334][ T978] usb 2-1: config 2 has no interface number 0 [ 874.768565][ T5989] usb 5-1: config 0 descriptor?? [ 874.781091][ T978] usb 2-1: config 2 interface 252 altsetting 84 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 874.840958][ T978] usb 2-1: config 2 interface 252 has no altsetting 0 [ 874.909128][ T978] usb 2-1: New USB device found, idVendor=05c6, idProduct=920b, bcdDevice=93.6e [ 874.960556][ T5924] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 874.974002][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.982461][ T978] usb 2-1: Product: å“ [ 874.992666][ T978] usb 2-1: Manufacturer: ì¹ç¥œãº¿á¼„å‹­à¼§ã±«ê‰¶î–¬â°¶é¦·á®”Ó¶å½·ëŠ‚ã™„ì…“ë˜®è…±å¹¯é°æ”©ä„‚ì‘Ⳇ瞖࿌艄₩鴿₨ [ 875.019592][ T5924] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 875.054731][ T978] usb 2-1: SerialNumber: 頳㙵䂚éŽã—dž鉕탇ₛ婦䈦៸䮒ä¼è–¸å°â¦‹ë…¼ìªá²¬ì¨“្ᆪ䌜ä£å´»ïªªê†±á„­âŠÍ¾áª§å©¢ãª—薮겢隬뺔쪭纆ç‰ë€šêƒ¥ë†°ì»žå“뉺娣⯠봼닅ഓ瑼帇䕷澉ﻡê¨êº¿íªè…§å’‰ì¾œî¢Ø±æ’¯ç’–鷓ꯜ⤈ìŠè¸‰é•žã·ç¨ â‰ç–‰ä¼¯êŸ•軨柆ꬬ薒ãƒç†„ï ·è‰Ì›ä±¥ç¥¨é•œä°“ïŸ¾äš·é¾½î¿œã æ…„뾅칞玭췠晊뙺䑘첾젅⺭䞭ᄾ㼆å†ï¬‰ [ 875.126320][ T978] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 875.135161][ T5924] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 875.135219][ T5924] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 875.158599][ T978] usb 2-1: no configuration chosen from 1 choice [ 875.282039][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.360451][ T5924] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 875.368290][ T5924] usb 3-1: invalid MIDI out EP 0 [ 875.413234][ T5924] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 875.508218][ T5989] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 875.526288][ T5989] powermate 5-1:0.0: probe with driver powermate failed with error -5 [ 875.598423][T16057] delete_channel: no stack [ 875.611233][ T5924] usb 3-1: USB disconnect, device number 116 [ 875.670755][ T5989] usb 5-1: USB disconnect, device number 46 [ 875.783952][T12035] udevd[12035]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 876.144991][ T5989] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 876.294829][ T5989] usb 5-1: Using ep0 maxpacket: 8 [ 876.301553][ T5989] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 876.313057][ T5989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.325165][ T5989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.335620][ T5989] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 876.349111][ T5989] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 876.358528][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.369431][ T5989] usb 5-1: config 0 descriptor?? [ 876.755041][ T5924] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 876.935165][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 876.942561][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 876.960965][T11302] usb 2-1: USB disconnect, device number 88 [ 876.980205][ T5924] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 876.995768][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.006243][ T5924] usb 3-1: Product: syz [ 877.010691][ T5924] usb 3-1: Manufacturer: syz [ 877.029205][ T5989] usbhid 5-1:0.0: can't add hid device: -71 [ 877.037404][ T5989] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 877.045912][ T5924] usb 3-1: SerialNumber: syz [ 877.067278][ T5924] usb 3-1: config 0 descriptor?? [ 877.078881][ T5989] usb 5-1: USB disconnect, device number 47 [ 877.093096][ T5924] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 877.116151][ T5924] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 877.399384][T11302] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 877.594623][T11302] usb 2-1: Invalid ep0 maxpacket: 9 [ 877.694356][ T5924] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 877.735099][T11302] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 877.914860][T11302] usb 2-1: Invalid ep0 maxpacket: 9 [ 877.944642][T11302] usb usb2-port1: attempt power cycle [ 878.100608][ T5924] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 878.116562][ T5924] em28xx 3-1:0.0: board has no eeprom [ 878.360594][T11302] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 878.408601][T11302] usb 2-1: Invalid ep0 maxpacket: 9 [ 878.514591][ T978] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 878.554644][T11302] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 878.575405][T11302] usb 2-1: Invalid ep0 maxpacket: 9 [ 878.587508][T11302] usb usb2-port1: unable to enumerate USB device [ 878.605308][ T5989] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 878.670474][ T978] usb 5-1: config 0 has no interfaces? [ 878.680729][ T978] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 878.704054][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.725125][ T978] usb 5-1: Product: syz [ 878.734367][ T978] usb 5-1: Manufacturer: syz [ 878.741921][ T978] usb 5-1: SerialNumber: syz [ 878.755206][ T5989] usb 7-1: Using ep0 maxpacket: 16 [ 878.768247][ T5989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.785201][ T5989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.818457][ T978] usb 5-1: config 0 descriptor?? [ 878.824027][ T5989] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 878.842661][ T5989] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 878.873830][ T5989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.890406][ T5989] usb 7-1: config 0 descriptor?? [ 879.113284][ T5989] hid-multitouch 0003:0457:07DA.002D: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.6-1/input0 [ 879.165289][T16079] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 879.225981][ T5924] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 879.239694][ T5924] em28xx 3-1:0.0: dvb set to bulk mode. [ 879.257471][ T5989] em28xx 3-1:0.0: Binding DVB extension [ 879.305488][ T5924] usb 3-1: USB disconnect, device number 117 [ 879.327966][ T5924] em28xx 3-1:0.0: Disconnecting em28xx [ 879.389328][T15491] usb 7-1: USB disconnect, device number 78 [ 879.447716][ T5989] em28xx 3-1:0.0: Registering input extension [ 879.473470][ T5924] em28xx 3-1:0.0: Closing input extension [ 879.523648][ T5924] em28xx 3-1:0.0: Freeing device [ 880.135068][T15491] usb 2-1: new low-speed USB device number 93 using dummy_hcd [ 880.685141][T15491] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 880.848234][T15491] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 880.867191][T15491] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.887740][T15491] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 880.897193][T15491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.917585][T15491] hub 2-1:4.0: USB hub found [ 880.974684][T11302] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 881.117563][T15491] hub 2-1:4.0: 13 ports detected [ 881.132654][T15491] usb 2-1: selecting invalid altsetting 1 [ 881.142465][T15491] hub 2-1:4.0: Using single TT (err -22) [ 881.160132][T15491] hub 2-1:4.0: insufficient power available to use all downstream ports [ 881.203612][T11302] usb 7-1: Using ep0 maxpacket: 16 [ 881.293751][ T5924] usb 5-1: USB disconnect, device number 48 [ 881.439598][T11302] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 881.529041][T11302] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 881.606136][T11302] usb 7-1: Product: syz [ 881.610341][T11302] usb 7-1: Manufacturer: syz [ 881.662541][T11302] usb 7-1: SerialNumber: syz [ 881.732988][T11302] usb 7-1: config 0 descriptor?? [ 881.735116][ T5924] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 881.996654][ T5924] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 882.025050][T15491] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 882.045437][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.048919][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2572'. [ 882.058601][T15491] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 882.076979][ T5924] usb 5-1: config 0 descriptor?? [ 882.094610][T16139] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2572'. [ 882.181434][ T5924] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 882.257398][T15491] usb 2-1: USB disconnect, device number 94 [ 882.388509][ T5924] usb 5-1: USB disconnect, device number 49 [ 882.718306][T16161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2577'. [ 883.257042][T16180] netlink: 'syz.2.2583': attribute type 9 has an invalid length. [ 883.265631][T16180] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.2583'. [ 883.298251][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 883.298268][ T30] audit: type=1804 audit(1751939510.663:5118): pid=16180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2583" name="file0" dev="ramfs" ino=71169 res=1 errno=0 [ 883.305820][T16180] syzkaller1: entered promiscuous mode [ 883.352375][T16180] syzkaller1: entered allmulticast mode [ 883.456072][ T30] audit: type=1326 audit(1751939510.823:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16167 comm="syz.4.2580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20c858e929 code=0x0 [ 883.915907][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2588'. [ 884.158357][T15491] usb 7-1: USB disconnect, device number 79 [ 884.524915][ T978] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 884.706619][ T978] usb 3-1: config 0 has an invalid interface number: 33 but max is 0 [ 884.745135][ T978] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.755231][ T5924] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 884.784654][ T978] usb 3-1: config 0 has no interface number 0 [ 884.790818][ T978] usb 3-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 884.813517][ T978] usb 3-1: config 0 interface 33 altsetting 0 endpoint 0x7 has invalid maxpacket 52224, setting to 1024 [ 884.825505][ T978] usb 3-1: config 0 interface 33 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 884.838549][ T978] usb 3-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 884.860466][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.874668][ T978] usb 3-1: Product: syz [ 884.888985][ T978] usb 3-1: Manufacturer: syz [ 884.896006][ T978] usb 3-1: SerialNumber: syz [ 884.907380][ T5924] usb 5-1: not running at top speed; connect to a high speed hub [ 884.912961][ T978] usb 3-1: config 0 descriptor?? [ 884.921154][T16205] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 884.929573][T16205] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 884.935390][ T5924] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 82, changing to 4 [ 884.943449][ T978] hdpvr 3-1:0.33: Could not find bulk-in endpoint [ 884.955377][ T978] hdpvr 3-1:0.33: probe with driver hdpvr failed with error -12 [ 884.975833][ T5924] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 884.989417][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.998293][ T5924] usb 5-1: Product: ᧠妮ꥇ៌∊慤㪳濫䥖è©î¿‚辷♶려ᅕ౫幅ナ슮äŒê•—ﵦ抲ਠ蘖⨊孠汳Ⅺ栀㺺켗۫㆓ᇓ酈렆潤栲׾壭뭇膴簇馳⫚░騯傒ָ戥⣖⺸関ì†é†…턓肿舲耚å¸èº²à¥Šï¡´éŠ²ì¢¡è§¥çŸ é˜‹ê¤¥æ…¿îƒ¹é‡›ê Œâ€è’šï‰¯æ¶ºå¤è£˜æ¥Žì±»ä©æ£œá€¶êˆƒá‡¿èƒ™ïº§è¤©íŽ¥ï¢¾çŠ±â¦¨ [ 885.040766][ T5924] usb 5-1: Manufacturer: 䠧ͨ⺣삟୒캫ë⫶ቛ両鉵轩ä¬å“䒜髇턲휵ꕺ䖬鮡鶕஥觞ᔈ繆籸볷֌ꋡ뽞ペ䊆䟹⅙ [ 885.058350][ T5924] usb 5-1: SerialNumber: å°½ [ 885.210625][T16218] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 885.318638][ T5924] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 885.330244][ T5924] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 885.396230][ T5924] usb 5-1: USB disconnect, device number 50 [ 885.475748][T11993] udevd[11993]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 885.666700][T14464] usb 3-1: USB disconnect, device number 118 [ 885.685156][ T978] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 885.854842][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 885.866000][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.923864][ T978] usb 2-1: config 0 has no interfaces? [ 885.929819][ T978] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 885.950632][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.975976][ T978] usb 2-1: config 0 descriptor?? [ 886.172563][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2604'. [ 886.202637][T16247] xt_cgroup: invalid path, errno=-2 [ 886.216088][T16248] netlink: 'syz.0.2606': attribute type 1 has an invalid length. [ 886.298684][T16244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 886.368822][T16252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 886.578827][T16252] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 886.620581][T16252] bond1: (slave vcan1): Error -95 calling set_mac_address [ 886.706711][T16262] geneve2: entered promiscuous mode [ 886.840960][T16262] geneve2: entered allmulticast mode [ 887.391488][T16275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.605678][T16275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.387890][T14464] usb 2-1: USB disconnect, device number 95 [ 889.664779][T14464] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 889.834653][T14464] usb 3-1: Using ep0 maxpacket: 32 [ 889.842499][T14464] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 889.859606][T14464] usb 3-1: config 0 has no interface number 0 [ 889.865958][T14464] usb 3-1: config 0 interface 132 has no altsetting 0 [ 889.881193][T14464] usb 3-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 889.891376][T14464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.895635][ T92] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 889.900126][T14464] usb 3-1: Product: syz [ 889.911544][T14464] usb 3-1: Manufacturer: syz [ 889.919020][T16311] tipc: Enabled bearer , priority 0 [ 889.935256][T14464] usb 3-1: SerialNumber: syz [ 889.942708][T14464] usb 3-1: config 0 descriptor?? [ 890.085466][ T92] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.248650][ T92] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 890.269757][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 890.300874][ T92] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 890.325778][ T92] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 890.339131][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 890.348755][ T92] usb 5-1: Product: syz [ 890.353088][ T92] usb 5-1: Manufacturer: syz [ 890.364764][T14464] cdc_subset 3-1:0.132 usb0: register 'cdc_subset' at usb-dummy_hcd.2-1, Belkin, eTEK, or compatible, ae:86:b0:dd:d1:40 [ 890.365633][ T92] usb 5-1: SerialNumber: syz [ 890.455824][T16297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2618'. [ 890.511951][T16322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.524764][ T92] usb 5-1: config 0 descriptor?? [ 890.551797][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2627'. [ 890.560823][ T978] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 890.734680][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 890.739958][T16322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.772108][ T92] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 890.813347][T16327] ipvlan2: entered promiscuous mode [ 890.933525][T14464] usb 3-1: USB disconnect, device number 119 [ 890.941098][T14464] cdc_subset 3-1:0.132 usb0: unregister 'cdc_subset' usb-dummy_hcd.2-1, Belkin, eTEK, or compatible [ 890.993043][T16332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2628'. [ 891.045248][ T92] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 891.145637][ T92] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 891.621509][T16334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.652542][T16334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.990963][T16352] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 892.109295][T16352] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 892.126752][T16352] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 892.410340][T16355] tc_dump_action: action bad kind [ 892.444892][T11302] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 892.606128][T11302] usb 3-1: Using ep0 maxpacket: 16 [ 892.673743][T11302] usb 3-1: config 149 has an invalid interface number: 17 but max is 0 [ 892.697112][T11302] usb 3-1: config 149 has no interface number 0 [ 892.730241][T11302] usb 3-1: config 149 interface 17 has no altsetting 0 [ 892.756205][T11302] usb 3-1: New USB device found, idVendor=0d9f, idProduct=0002, bcdDevice=65.f4 [ 892.772137][T11302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.803078][T11302] usb 3-1: Product: syz [ 892.813926][T11302] usb 3-1: Manufacturer: syz [ 892.828356][T11302] usb 3-1: SerialNumber: syz [ 893.063895][T16357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.082003][ T5924] usb 5-1: USB disconnect, device number 51 [ 893.092168][T16357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.134104][T16371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.151854][T16371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.174116][T11302] cypress_m8 3-1:149.17: HID->COM RS232 Adapter converter detected [ 893.189979][T11302] cyphidcom ttyUSB0: required endpoint is missing [ 893.222180][T11302] usb 3-1: USB disconnect, device number 120 [ 893.267273][T11302] cypress_m8 3-1:149.17: device disconnected [ 893.301474][T16301] delete_channel: no stack [ 894.870259][ T978] usb 2-1: unable to get BOS descriptor or descriptor too short [ 894.996049][ T978] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 895.150430][ T978] usb 2-1: can't read configurations, error -71 [ 895.218111][T16410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2638'. [ 895.915302][T16433] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2644'. [ 897.599844][ T5924] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 898.245306][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 898.256674][ T5924] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 898.341923][ T5924] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 898.365146][ T5924] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 898.365412][T16463] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2651'. [ 898.376047][ T5924] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 898.397685][ T5924] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 898.407718][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.675430][ T5924] usb 3-1: GET_CAPABILITIES returned 0 [ 898.680932][ T5924] usbtmc 3-1:16.0: can't read capabilities [ 898.738181][T16467] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 898.892957][T16454] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2649'. [ 898.904150][ T978] usb 3-1: USB disconnect, device number 121 [ 899.592533][T16486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 899.915237][ T5924] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 900.120917][ T92] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 900.133287][T16494] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2661'. [ 900.143070][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 900.161037][ T5924] usb 3-1: config 0 has an invalid interface number: 248 but max is 0 [ 900.170488][ T5924] usb 3-1: config 0 has no interface number 0 [ 900.170602][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2661'. [ 900.177667][ T5924] usb 3-1: config 0 interface 248 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 900.209742][T16494] tipc: MTU too low for tipc bearer [ 900.212397][ T5924] usb 3-1: config 0 interface 248 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 900.228775][ T5924] usb 3-1: config 0 interface 248 has no altsetting 0 [ 900.231007][T16494] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 900.239761][ T5924] usb 3-1: New USB device found, idVendor=10c4, idProduct=82ef, bcdDevice=32.ad [ 900.291488][ T92] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.308933][ T92] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 900.327848][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.358621][ T5924] usb 3-1: Product: syz [ 900.366298][ T92] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 900.383267][ T92] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.397903][ T5924] usb 3-1: Manufacturer: syz [ 900.405251][ T92] usb 7-1: Product: syz [ 900.412823][ T5924] usb 3-1: SerialNumber: syz [ 900.422229][ T92] usb 7-1: Manufacturer: syz [ 900.435284][ T92] usb 7-1: SerialNumber: syz [ 900.442584][ T5924] usb 3-1: config 0 descriptor?? [ 900.451069][T16488] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 900.458936][T16488] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 900.481932][ T5924] cp210x 3-1:0.248: cp210x converter detected [ 900.501276][ T92] cdc_mbim 7-1:1.0: skipping garbage [ 900.644583][T11302] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 900.696146][ T5924] cp210x 3-1:0.248: failed to get vendor val 0x370b size 1: -32 [ 900.705194][T16490] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 900.720951][ T5924] cp210x 3-1:0.248: querying part number failed [ 900.736944][ T5924] usb 3-1: cp210x converter now attached to ttyUSB0 [ 900.764069][ T5924] usb 3-1: USB disconnect, device number 122 [ 900.811892][ T5924] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 900.826340][T11302] usb 5-1: config 0 has an invalid interface number: 90 but max is 0 [ 900.836057][ T5924] cp210x 3-1:0.248: device disconnected [ 900.839784][T11302] usb 5-1: config 0 has no interface number 0 [ 900.867025][T11302] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=de.7f [ 900.888933][T11302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.907455][T11302] usb 5-1: Product: syz [ 900.928422][T11302] usb 5-1: Manufacturer: syz [ 900.941119][T11302] usb 5-1: SerialNumber: syz [ 900.944393][ T92] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS [ 900.955875][ T92] cdc_mbim 7-1:1.0: bind() failure [ 900.984097][T11302] usb 5-1: config 0 descriptor?? [ 900.988318][ T92] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 901.019637][ T92] cdc_ncm 7-1:1.1: bind() failure [ 901.049941][ T92] usb 7-1: USB disconnect, device number 81 [ 901.200057][T11302] cdc_subset 5-1:0.90: probe with driver cdc_subset failed with error -22 [ 901.400655][T16499] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2663'. [ 901.439990][T16524] kvm: user requested TSC rate below hardware speed [ 901.457757][T16528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.503324][T16528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.580374][T11302] usb 7-1: new full-speed USB device number 82 using dummy_hcd [ 901.655282][ T10] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 901.730572][T11302] usb 7-1: device descriptor read/64, error -71 [ 901.798591][T16499] bond0 (unregistering): Released all slaves [ 901.826228][ T10] usb 2-1: no configurations [ 901.830038][T16532] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 901.830854][ T10] usb 2-1: can't read configurations, error -22 [ 901.846979][T16532] team0: Device ipvlan3 is already an upper device of the team interface [ 901.903298][ T978] usb 5-1: USB disconnect, device number 52 [ 901.964926][ T10] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 901.974652][T11302] usb 7-1: new full-speed USB device number 83 using dummy_hcd [ 902.134747][T11302] usb 7-1: device descriptor read/64, error -71 [ 902.155296][ T10] usb 2-1: no configurations [ 902.159936][ T10] usb 2-1: can't read configurations, error -22 [ 902.173002][ T10] usb usb2-port1: attempt power cycle [ 902.245080][T11302] usb usb7-port1: attempt power cycle [ 902.342707][ T978] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 902.685092][ T10] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 902.715049][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 902.723468][ T10] usb 2-1: no configurations [ 902.728306][ T10] usb 2-1: can't read configurations, error -22 [ 902.739732][ T978] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 902.752920][ T978] usb 5-1: config 0 has no interface number 0 [ 902.761961][ T978] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 902.781457][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.789664][ T978] usb 5-1: Product: syz [ 902.795047][ T978] usb 5-1: Manufacturer: syz [ 902.799662][ T978] usb 5-1: SerialNumber: syz [ 902.835876][ T978] usb 5-1: config 0 descriptor?? [ 902.855757][ T978] smsc95xx v2.0.0 [ 902.884657][ T10] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 902.915979][ T10] usb 2-1: no configurations [ 902.922443][ T10] usb 2-1: can't read configurations, error -22 [ 902.941209][ T10] usb usb2-port1: unable to enumerate USB device [ 902.953647][T16548] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2676'. [ 903.054643][T11302] usb 7-1: new full-speed USB device number 84 using dummy_hcd [ 903.096743][T11302] usb 7-1: device descriptor read/8, error -71 [ 903.354609][T11302] usb 7-1: new full-speed USB device number 85 using dummy_hcd [ 903.378338][T11302] usb 7-1: device descriptor read/8, error -71 [ 903.510680][T11302] usb usb7-port1: unable to enumerate USB device [ 903.620166][ T978] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -32 [ 903.704748][ T978] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 903.723186][ T978] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 903.736068][ T978] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 903.752751][ T978] usb 5-1: USB disconnect, device number 53 [ 903.798785][T16561] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2678'. [ 903.809008][T16561] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2678'. [ 903.820476][T16561] netlink: 492 bytes leftover after parsing attributes in process `syz.4.2678'. [ 903.971989][T16571] kvm: user requested TSC rate below hardware speed [ 903.983829][T16572] tipc: Enabling of bearer rejected, failed to enable media [ 904.560205][T16585] netlink: 'syz.6.2687': attribute type 10 has an invalid length. [ 904.568479][T16585] hsr_slave_0: left promiscuous mode [ 904.578553][T16585] hsr_slave_1: left promiscuous mode [ 904.825084][ T978] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 904.994737][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 905.009350][ T978] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 905.020755][ T978] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 905.034006][ T978] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 905.048788][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 905.059421][ T978] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 905.071810][ T978] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 905.087316][ T978] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 905.106605][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.226636][T16604] syz.4.2691: attempt to access beyond end of device [ 905.226636][T16604] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 905.285134][ T978] usb 2-1: config 0 descriptor?? [ 905.318760][T16606] usb usb8: usbfs: process 16606 (syz.2.2692) did not claim interface 0 before use [ 905.739807][ T978] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 102 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 905.792779][ T978] usb 2-1: USB disconnect, device number 102 [ 905.820171][ T978] usblp0: removed [ 906.022088][T16614] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2694'. [ 906.032901][T16614] netlink: 'syz.6.2694': attribute type 7 has an invalid length. [ 906.060928][T16614] netlink: 'syz.6.2694': attribute type 8 has an invalid length. [ 906.073174][T16614] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2694'. [ 906.141401][T16614] erspan0: entered promiscuous mode [ 906.256604][T16614] batadv_slave_1: entered promiscuous mode [ 906.263614][T16614] gretap0: entered promiscuous mode [ 906.272411][T16614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 906.274594][ T978] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 906.311109][T16614] Cannot create hsr debugfs directory [ 906.348821][T16614] hsr0: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 906.404215][T16614] hsr0: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 906.484601][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 906.503499][ T978] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 906.541956][ T978] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 906.568781][ T978] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 906.614574][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 906.641947][ T978] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 906.662218][ T978] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 906.712053][ T978] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 906.774579][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.800890][ T978] usb 2-1: config 0 descriptor?? [ 906.948325][ T92] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 907.034062][ T978] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 103 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 907.050330][T14464] hid-generic 00A0:000B:0003.002E: unknown main item tag 0x6 [ 907.122715][T14464] hid-generic 00A0:000B:0003.002E: unknown main item tag 0x0 [ 907.154681][T14464] hid-generic 00A0:000B:0003.002E: unknown main item tag 0x0 [ 907.182348][T14464] hid-generic 00A0:000B:0003.002E: unknown main item tag 0x0 [ 907.214508][T14464] hid-generic 00A0:000B:0003.002E: unknown main item tag 0x0 [ 907.242308][T14464] hid-generic 00A0:000B:0003.002E: unknown main item tag 0x0 [ 907.274538][T14464] hid-generic 00A0:000B:0003.002E: unknown main item tag 0x0 [ 907.299438][T14464] hid-generic 00A0:000B:0003.002E: unknown main item tag 0x0 [ 907.314336][T14464] hid-generic 00A0:000B:0003.002E: hidraw0: HID v0.05 Device [syz1] on syz0 [ 907.350154][ C0] usblp0: nonzero read bulk status received: -71 [ 907.358293][T16580] usblp0: error -71 reading from printer [ 907.368239][T14464] usb 2-1: USB disconnect, device number 103 [ 907.495173][T16641] fido_id[16641]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 907.725400][ T92] usb 7-1: new low-speed USB device number 87 using dummy_hcd [ 907.777205][T16650] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 907.946903][ T92] usb 7-1: Invalid ep0 maxpacket: 16 [ 907.952515][ T92] usb usb7-port1: attempt power cycle [ 908.294919][ T92] usb 7-1: new low-speed USB device number 88 using dummy_hcd [ 908.326237][ T92] usb 7-1: Invalid ep0 maxpacket: 16 [ 908.505108][ T92] usb 7-1: new low-speed USB device number 89 using dummy_hcd [ 908.522641][T16656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2704'. [ 908.536936][ T92] usb 7-1: Invalid ep0 maxpacket: 16 [ 908.542544][ T92] usb usb7-port1: unable to enumerate USB device [ 908.612037][T16580] usblp0: removed [ 908.747680][T16658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.757029][T16658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.865994][T16664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2707'. [ 908.880053][T16664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2707'. [ 909.008824][ T92] usb 2-1: new low-speed USB device number 104 using dummy_hcd [ 909.084304][T16677] program syz.4.2711 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 909.134948][ T5924] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 909.165162][ T92] usb 2-1: Invalid ep0 maxpacket: 64 [ 909.285131][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 909.293185][ T5924] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 909.310487][ T92] usb 2-1: new low-speed USB device number 105 using dummy_hcd [ 909.318712][ T5924] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 909.341711][ T5924] usb 3-1: language id specifier not provided by device, defaulting to English [ 909.354643][ T5924] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 909.364077][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.373079][ T5924] usb 3-1: Product: syz [ 909.378287][ T5924] usb 3-1: Manufacturer: à ¾ [ 909.383026][ T5924] usb 3-1: SerialNumber: syz [ 909.475193][ T92] usb 2-1: Invalid ep0 maxpacket: 64 [ 909.485536][ T92] usb usb2-port1: attempt power cycle [ 909.612659][T16668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.621758][T16668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.630622][T16668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.640400][T16668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.647907][T16682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.659622][T16682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.676211][ T5924] cdc_ncm 3-1:1.0: bind() failure [ 909.687544][ T5924] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 909.695255][ T5924] cdc_ncm 3-1:1.1: bind() failure [ 909.706382][ T5924] usb 3-1: USB disconnect, device number 123 [ 909.834972][ T92] usb 2-1: new low-speed USB device number 106 using dummy_hcd [ 909.855387][ T92] usb 2-1: Invalid ep0 maxpacket: 64 [ 909.984870][ T92] usb 2-1: new low-speed USB device number 107 using dummy_hcd [ 910.006070][ T92] usb 2-1: Invalid ep0 maxpacket: 64 [ 910.011598][ T92] usb usb2-port1: unable to enumerate USB device [ 911.010587][T14464] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 911.246395][T14464] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 911.257801][T14464] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.269055][T14464] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 911.325287][T14464] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 911.337851][T14464] usb 7-1: Manufacturer: syz [ 911.351804][T14464] usb 7-1: config 0 descriptor?? [ 911.514783][T14464] rc_core: IR keymap rc-hauppauge not found [ 911.523311][T14464] Registered IR keymap rc-empty [ 911.554139][T14464] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 911.581719][T14464] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input62 [ 911.936922][T16728] loop7: detected capacity change from 0 to 6 [ 911.945945][T11993] Dev loop7: unable to read RDB block 6 [ 911.951555][T11993] loop7: unable to read partition table [ 911.961390][T11993] loop7: partition table beyond EOD, truncated [ 911.994238][T16728] Dev loop7: unable to read RDB block 6 [ 912.054022][T16728] loop7: unable to read partition table [ 912.055937][T16728] loop7: partition table beyond EOD, truncated [ 912.055966][T16728] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 912.478415][ T978] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 912.535053][ T92] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 912.583489][ T5989] usb 7-1: USB disconnect, device number 90 [ 912.594964][T14464] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 912.655371][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 912.695858][ T92] usb 3-1: Using ep0 maxpacket: 8 [ 912.730776][ T978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.730822][ T92] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 912.767615][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.787196][ T92] usb 3-1: Product: syz [ 912.797624][ T978] usb 5-1: config 0 has no interfaces? [ 912.810366][ T92] usb 3-1: Manufacturer: syz [ 912.810530][T14464] usb 2-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 912.825808][ T92] usb 3-1: SerialNumber: syz [ 912.830548][T14464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.841237][ T92] usb 3-1: config 0 descriptor?? [ 912.896887][ T92] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 912.906147][ T92] usb 3-1: setting power ON [ 912.911713][ T92] dvb-usb: bulk message failed: -22 (2/0) [ 912.920546][ T978] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 912.926203][ T92] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 912.941353][ T92] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 912.950883][ T92] usb 3-1: media controller created [ 912.954298][T14464] usb 2-1: Product: syz [ 912.971888][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2732'. [ 912.983505][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 912.984600][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.000142][T14464] usb 2-1: Manufacturer: syz [ 913.023448][T14464] usb 2-1: SerialNumber: syz [ 913.043001][T14464] usb 2-1: config 0 descriptor?? [ 913.054577][ T978] usb 5-1: Product: syz [ 913.059552][ T978] usb 5-1: Manufacturer: syz [ 913.069835][T14464] f81232 2-1:0.0: f81232 converter detected [ 913.076484][ T978] usb 5-1: SerialNumber: syz [ 913.095862][T14464] usb 2-1: f81232 converter now attached to ttyUSB0 [ 913.099676][ T92] usb 3-1: selecting invalid altsetting 6 [ 913.104324][ T978] usb 5-1: config 0 descriptor?? [ 913.267325][ T92] usb 3-1: digital interface selection failed (-22) [ 913.393947][ T92] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 913.533981][ T92] usb 3-1: setting power OFF [ 913.539366][ T92] dvb-usb: bulk message failed: -22 (2/0) [ 913.547762][ T92] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 913.665154][ T92] (NULL device *): no alternate interface [ 913.732702][ T92] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 913.921459][ T92] usb 3-1: USB disconnect, device number 124 [ 915.012102][ T978] usb 5-1: USB disconnect, device number 54 [ 915.393655][ T5924] usb 2-1: USB disconnect, device number 108 [ 915.452839][ T5924] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 915.620957][ T5924] f81232 2-1:0.0: device disconnected [ 915.990096][ T5924] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 916.156603][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.431951][ T5924] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 916.462173][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.503061][ T5924] usb 2-1: config 0 descriptor?? [ 916.753743][ T5924] usbhid 2-1:0.0: can't add hid device: -71 [ 916.790470][ T5924] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 916.840671][T16808] fuse: Unknown parameter 'fä' [ 916.886610][ T5924] usb 2-1: USB disconnect, device number 109 [ 917.708889][T16831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2748'. [ 918.051681][T16843] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2754'. [ 918.061334][T14464] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 918.227723][T14464] usb 7-1: Using ep0 maxpacket: 16 [ 918.234123][T16852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2757'. [ 918.235686][T14464] usb 7-1: config 0 has an invalid interface number: 161 but max is 0 [ 918.252881][T14464] usb 7-1: config 0 has no interface number 0 [ 918.259748][T14464] usb 7-1: config 0 interface 161 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 918.274947][T14464] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=9a.fd [ 918.284242][T14464] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.300546][T14464] usb 7-1: Product: syz [ 918.309552][T14464] usb 7-1: Manufacturer: syz [ 918.317858][T14464] usb 7-1: SerialNumber: syz [ 918.317896][T16854] x_tables: duplicate underflow at hook 2 [ 918.334081][T14464] usb 7-1: config 0 descriptor?? [ 918.340415][T16836] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 918.351270][T14464] kvaser_usb 7-1:0.161: error -ENODEV: Cannot get usb endpoint(s) [ 918.606579][T16836] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2750'. [ 918.773990][T16866] fuse: Bad value for 'group_id' [ 918.790731][T16866] fuse: Bad value for 'group_id' [ 918.839809][T16863] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 918.879736][T16863] netlink: 'syz.2.2760': attribute type 29 has an invalid length. [ 918.892326][T16863] netlink: 'syz.2.2760': attribute type 29 has an invalid length. [ 918.954345][T16863] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2760'. [ 919.055033][ T5989] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 919.122674][T14464] usb 7-1: USB disconnect, device number 91 [ 919.216101][ T5989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.253803][ T5989] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 919.275993][ T5989] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= e.2a [ 919.319434][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.325747][T16874] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2763'. [ 919.331280][ T5989] usb 5-1: config 0 descriptor?? [ 919.514767][ T978] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 919.664540][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 919.706944][ T978] usb 2-1: config 1 interface 0 altsetting 173 bulk endpoint 0x1 has invalid maxpacket 64 [ 919.724530][ T978] usb 2-1: config 1 interface 0 altsetting 173 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 919.763743][ T5989] usbhid 5-1:0.0: can't add hid device: -71 [ 919.770166][ T5989] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 919.788428][ T5989] usb 5-1: USB disconnect, device number 55 [ 919.824718][ T978] usb 2-1: config 1 interface 0 has no altsetting 0 [ 919.927624][ T978] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 919.937344][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.945420][ T978] usb 2-1: Product: Д [ 919.973440][ T978] usb 2-1: Manufacturer: èµä²¹ë‘”߄∼ἔ餄臟箼⑔촋竀ìˆàº´ç¤‘猽㒸ḎçÚ쮌뷹嫫磵텦髞䷇ힾ쳠氧é¿â®£ï²—æ»‚á«²î–­ê£Žî…æ–¨é€‘Ჺ鋟൓㚓ﳾ幅夻鋫跇렌㱕꿯錞筑䂅휬Ò건ꑺ랸槽æŒì°ˆåŠ½ïž¿à¶±ë¥¢ã¹ë¡•⎕럆ᓊï’ự䉶ﲉ渡ê—궿⌔ቿꢪﻨ᭱鰽軡賂㨒벱﮾⇷℉î â§›ë°—枇‹螻秦㾑Ύï¼å˜ê²§é·¨ì¡·è´¥âŒì¯™éŸ˜ç’긙݅ [ 920.169018][ T978] usb 2-1: SerialNumber: ä Š [ 920.187463][T16876] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 920.200146][T16876] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 920.613822][T16876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.622693][T16876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.682476][ T978] usb 2-1: USB disconnect, device number 110 [ 920.834949][ T5924] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 921.027317][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.038035][ T5924] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 921.054009][ T5924] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 921.063238][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.075876][ T5924] usb 5-1: config 0 descriptor?? [ 921.088470][ T5924] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 921.114806][ T5924] dvb-usb: bulk message failed: -22 (3/0) [ 921.131876][ T5924] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 921.251598][ T5924] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 921.279766][ T5924] usb 5-1: media controller created [ 921.361997][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 921.441193][ T5924] dvb-usb: bulk message failed: -22 (6/0) [ 921.448962][ T5924] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 921.485173][ T5989] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 921.556209][ T5924] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input64 [ 921.724983][ T5989] usb 7-1: Using ep0 maxpacket: 16 [ 921.773095][ T5924] dvb-usb: schedule remote query interval to 150 msecs. [ 921.796407][ T5924] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 921.852148][ T5924] usb 5-1: USB disconnect, device number 56 [ 921.963255][ T5924] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 922.264908][T15491] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 922.285474][ T5924] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 922.373182][ T5989] usb 7-1: unable to get BOS descriptor or descriptor too short [ 922.415430][T15491] usb 3-1: Using ep0 maxpacket: 32 [ 922.438123][ T5989] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 922.457710][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 922.505507][T15491] usb 3-1: config 0 has an invalid interface number: 218 but max is 0 [ 922.522997][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 922.554948][ T5989] usb 7-1: can't read configurations, error -71 [ 922.561244][T15491] usb 3-1: config 0 has no interface number 0 [ 922.591219][ T5924] usb 5-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 922.609208][T15491] usb 3-1: New USB device found, idVendor=05ac, idProduct=35f9, bcdDevice=6d.89 [ 922.619137][T15491] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.627616][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.636038][T15491] usb 3-1: Product: syz [ 922.640218][T15491] usb 3-1: Manufacturer: syz [ 922.657760][ T5924] usb 5-1: config 0 descriptor?? [ 922.669037][T16914] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 922.680499][T15491] usb 3-1: SerialNumber: syz [ 922.715849][T15491] usb 3-1: config 0 descriptor?? [ 922.730376][T15491] ipheth 3-1:0.218: Unable to find alternate settings interface [ 922.784577][ T978] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 922.931628][T14464] usb 3-1: USB disconnect, device number 125 [ 922.975138][ T978] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 922.985169][ T978] usb 2-1: config 0 has no interface number 0 [ 922.992125][ T978] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=dd.b8 [ 923.027671][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.047019][ T978] usb 2-1: config 0 descriptor?? [ 923.233493][ T5924] aquacomputer_d5next 0003:0C70:F012.002F: hidraw0: USB HID v1.05 Device [HID 0c70:f012] on usb-dummy_hcd.4-1/input0 [ 923.281488][ T978] usb 2-1: string descriptor 0 read error: -71 [ 923.295594][ T978] lan78xx 2-1:0.168 (unnamed net_device) (uninitialized): USB bus speed not supported [ 923.323574][ T978] lan78xx 2-1:0.168: probe with driver lan78xx failed with error -5 [ 923.357008][ T978] usb 2-1: USB disconnect, device number 111 [ 923.625030][ T5989] usb 7-1: new full-speed USB device number 93 using dummy_hcd [ 923.868414][T16921] vlan4: entered promiscuous mode [ 923.986445][T16921] team0: entered promiscuous mode [ 924.141575][T16942] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 924.149855][T16942] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 924.211315][ T5989] usb 7-1: unable to get BOS descriptor or descriptor too short [ 924.258652][ T5989] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 924.292641][ T5989] usb 7-1: can't read configurations, error -71 [ 924.353709][ T5989] usb usb7-port1: attempt power cycle [ 924.485068][T15491] usb 5-1: reset full-speed USB device number 57 using dummy_hcd [ 924.662142][T16953] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2783'. [ 924.893536][T16958] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2785'. [ 924.924563][ T10] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 925.115059][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 925.140987][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.163682][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 925.195205][ T10] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 925.228762][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 61 [ 925.329811][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 925.436168][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 925.464939][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 925.473128][ T10] usb 2-1: SerialNumber: syz [ 925.537337][T16952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 925.581432][T16952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 925.668069][ T5924] usb 5-1: USB disconnect, device number 57 [ 925.703950][T16967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.769862][T16967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 925.875209][ T5924] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 926.017862][ T10] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 926.063888][ T5924] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 926.087669][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.087887][ T10] usb 2-1: USB disconnect, device number 112 [ 926.152123][ T5924] usb 5-1: Product: syz [ 926.199236][ T5924] usb 5-1: Manufacturer: syz [ 926.227898][ T5924] usb 5-1: SerialNumber: syz [ 926.285612][ T5924] usb 5-1: config 0 descriptor?? [ 926.349038][ T5924] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 926.719002][T16992] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2793'. [ 926.925685][ T10] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 927.174128][T17000] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2796'. [ 927.314821][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 927.324966][ T10] usb 2-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.340224][ T10] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 927.353039][ T10] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 927.367838][ T10] usb 2-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 927.382461][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 927.404925][T14464] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 927.420397][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 927.432973][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 927.441474][ T10] usb 2-1: SerialNumber: syz [ 927.467968][T16993] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 927.477705][T16993] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 927.515923][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2797'. [ 927.573270][T14464] usb 7-1: config 0 has no interfaces? [ 927.590165][T14464] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 927.600724][T14464] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.609109][T14464] usb 7-1: Product: syz [ 927.613419][T14464] usb 7-1: Manufacturer: syz [ 927.622573][T14464] usb 7-1: SerialNumber: syz [ 927.667108][T14464] usb 7-1: config 0 descriptor?? [ 927.713637][T16988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.722536][T16988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.738175][ T10] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 927.756809][ T10] usb 2-1: USB disconnect, device number 113 [ 928.236834][T14464] usb 5-1: USB disconnect, device number 58 [ 928.547080][T17019] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 928.581825][T17018] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 928.591756][T17018] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 928.629295][T17018] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 928.706567][T17018] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 928.722836][T17018] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 928.732655][T17018] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 928.742604][T17018] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 928.752252][T17018] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 928.763479][T17018] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 928.925609][ T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 928.948316][ T5924] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 929.165467][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 929.173922][ T5924] usb 3-1: config 1 interface 0 has no altsetting 0 [ 929.183772][ T5924] usb 3-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.40 [ 929.196853][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.211198][ T5924] usb 3-1: Product: 凃䈺㗀㑕胨볂䙑é믂èˆï¬ƒê„­å´ ä ºé ™ì…紶嫙괱⤿켲╖î—熌㷃㸨腠࿉唬쾎惖䛛ﭷꟜ태瓈﬉温袶䩫캮줥飫桢찂â®åŠç™·è«±î£ãœ´ë¦ ëç´¸å‰ç•˜è¥î ƒê¬¾äŽ„å¶ºæƒ‚î’‚æ›¢ê¬í‡Šî¿²ï§´ [ 929.212051][T17026] dummy0: entered promiscuous mode [ 929.256209][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 929.276692][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 929.294345][ T10] usb 5-1: config 0 has no interface number 0 [ 929.300956][ T5924] usb 3-1: Manufacturer: à° [ 929.307559][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 929.318730][ T5924] usb 3-1: SerialNumber: à°‡ [ 929.349995][T17026] dummy0: left promiscuous mode [ 929.363114][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 929.423248][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 929.447581][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 929.477937][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 929.508181][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.543524][ T10] usb 5-1: config 0 descriptor?? [ 929.570680][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 929.692034][T17028] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 929.698618][T17028] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 929.716846][T17028] vhci_hcd vhci_hcd.0: Device attached [ 929.807403][ T5924] usbhid 3-1:1.0: can't add hid device: -71 [ 929.813540][ T5924] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 929.894293][T15491] usb 5-1: USB disconnect, device number 59 [ 929.902793][T15491] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 929.904564][ T10] vhci_hcd: vhci_device speed not set [ 929.931238][ T5924] usb 3-1: USB disconnect, device number 126 [ 929.981779][ T10] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 930.045936][T17034] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2802'. [ 930.467329][ T978] usb 7-1: USB disconnect, device number 95 [ 930.607754][T17029] vhci_hcd: connection reset by peer [ 930.613398][T13925] vhci_hcd: stop threads [ 930.618771][T13925] vhci_hcd: release socket [ 930.635424][ T5989] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 930.645759][T13925] vhci_hcd: disconnect device [ 930.797264][ T5989] usb 3-1: unable to get BOS descriptor or descriptor too short [ 930.811190][ T5989] usb 3-1: config 6 has an invalid descriptor of length 113, skipping remainder of the config [ 930.831572][ T5989] usb 3-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 930.853483][ T5989] usb 3-1: New USB device found, idVendor=7f55, idProduct=02fc, bcdDevice=20.c2 [ 930.863319][ T5989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.874972][ T5989] usb 3-1: Product: syz [ 930.887013][ T5989] usb 3-1: Manufacturer: syz [ 930.902066][ T5989] usb 3-1: SerialNumber: syz [ 930.915924][ T978] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 930.974836][T14464] usb 7-1: new full-speed USB device number 96 using dummy_hcd [ 931.064790][ T978] usb 5-1: device descriptor read/64, error -71 [ 931.114643][T14464] usb 7-1: device descriptor read/64, error -71 [ 931.136786][ T5989] usb 3-1: USB disconnect, device number 127 [ 931.314639][ T978] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 931.405589][T14464] usb 7-1: new full-speed USB device number 97 using dummy_hcd [ 931.454682][ T978] usb 5-1: device descriptor read/64, error -71 [ 931.494550][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.500938][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.567085][ T978] usb usb5-port1: attempt power cycle [ 931.572596][T14464] usb 7-1: device descriptor read/64, error -71 [ 931.597993][T17053] netlink: 'syz.0.2809': attribute type 1 has an invalid length. [ 931.606120][T17053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 931.684999][T14464] usb usb7-port1: attempt power cycle [ 931.752842][T17059] bond0: up delay (59142) is not a multiple of miimon (100), value rounded to 59100 ms [ 931.771143][T17059] bond0: entered promiscuous mode [ 931.777211][T17059] bond0: entered allmulticast mode [ 931.792627][T17058] bond0: up delay (59142) is not a multiple of miimon (100), value rounded to 59100 ms [ 931.906479][T17066] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2813'. [ 931.927532][ T978] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 931.968665][ T978] usb 5-1: device descriptor read/8, error -71 [ 932.045809][T14464] usb 7-1: new full-speed USB device number 98 using dummy_hcd [ 932.065116][T15491] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 932.065241][T14464] usb 7-1: device descriptor read/8, error -71 [ 932.215984][ T978] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 932.221525][T15491] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 932.234173][T15491] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 932.247101][ T978] usb 5-1: device descriptor read/8, error -71 [ 932.247357][T15491] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 932.263073][T15491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 932.271523][T15491] usb 3-1: SerialNumber: syz [ 932.315711][T14464] usb 7-1: new full-speed USB device number 99 using dummy_hcd [ 932.346882][T14464] usb 7-1: device descriptor read/8, error -71 [ 932.357659][ T978] usb usb5-port1: unable to enumerate USB device [ 932.454956][T14464] usb usb7-port1: unable to enumerate USB device [ 932.560748][T17071] bridge_slave_0: entered promiscuous mode [ 932.569808][T17071] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 932.824718][T14464] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 932.987153][T14464] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 932.997718][T14464] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 933.007941][T14464] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 933.017115][T14464] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 933.025311][T14464] usb 2-1: SerialNumber: syz [ 933.258656][T14464] usb 2-1: 0:2 : does not exist [ 933.273662][T14464] usb 2-1: USB disconnect, device number 114 [ 933.303680][T12162] udevd[12162]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 934.644636][ T978] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 934.790536][T15491] usb 3-1: 0:2 : does not exist [ 934.826043][ T978] usb 7-1: Using ep0 maxpacket: 16 [ 934.834206][ T978] usb 7-1: config 0 has an invalid interface number: 107 but max is 0 [ 934.854114][ T978] usb 7-1: config 0 has no interface number 0 [ 934.869218][T15491] usb 3-1: USB disconnect, device number 2 [ 934.931854][ T978] usb 7-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 934.957137][T11993] udevd[11993]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 935.052024][ T978] usb 7-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 935.052261][T17111] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 935.105473][ T978] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 935.149166][T17112] sg_write: data in/out 1037/44 bytes for SCSI command 0x22-- guessing data in; [ 935.149166][T17112] program syz.0.2823 not setting count and/or reply_len properly [ 935.166499][ T10] vhci_hcd: vhci_device speed not set [ 935.207484][ T978] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 935.225189][ T978] usb 7-1: Product: syz [ 935.353197][ T978] usb 7-1: Manufacturer: syz [ 935.376620][ T978] usb 7-1: SerialNumber: syz [ 935.476745][ T978] usb 7-1: config 0 descriptor?? [ 935.508708][ T978] keyspan 7-1:0.107: Keyspan 4 port adapter converter detected [ 935.529671][ T978] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 81 [ 935.550663][ T978] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 1 [ 935.575857][ T978] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 935.762460][T17113] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2824'. [ 935.820582][ T978] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 2 [ 936.165515][ T978] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 936.194412][ T978] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 4 [ 936.218366][ T978] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 936.260917][ T978] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 6 [ 936.298931][T17129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2826'. [ 936.436951][ T978] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 936.784855][ T978] usb 7-1: USB disconnect, device number 100 [ 936.827694][T17140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2831'. [ 936.868418][ T978] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 936.921147][ T978] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 936.964843][ T978] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 937.054335][T17143] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2832'. [ 937.075172][ T978] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 937.111561][ T978] keyspan 7-1:0.107: device disconnected [ 937.335263][ T5924] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 937.496615][ T5924] usb 5-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 937.507735][ T5924] usb 5-1: config 0 has no interfaces? [ 937.641534][ T5924] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 937.655191][ T978] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 937.665262][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.704935][ T5924] usb 5-1: Product: syz [ 937.714155][ T5924] usb 5-1: Manufacturer: syz [ 937.724634][T11302] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 937.781010][ T5924] usb 5-1: SerialNumber: syz [ 937.792668][ T5924] usb 5-1: config 0 descriptor?? [ 937.823044][ T978] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 937.834211][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 937.850720][ T978] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 937.870037][ T978] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 937.879407][T11302] usb 2-1: Using ep0 maxpacket: 16 [ 937.890950][ T978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.899839][T11302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 937.939500][T17141] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 937.968731][T11302] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 937.991303][ T978] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 937.998661][T11302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.018584][ T10] usb 3-1: config 0 has no interfaces? [ 938.020275][ T5924] usb 5-1: USB disconnect, device number 64 [ 938.060875][T11302] usb 2-1: Product: syz [ 938.077251][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 938.097334][T11302] usb 2-1: Manufacturer: syz [ 938.101978][T11302] usb 2-1: SerialNumber: syz [ 938.132455][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.152189][ T10] usb 3-1: Product: syz [ 938.157949][ T10] usb 3-1: Manufacturer: syz [ 938.159325][T11302] usb 2-1: config 0 descriptor?? [ 938.183644][ T10] usb 3-1: SerialNumber: syz [ 938.215654][ T10] usb 3-1: config 0 descriptor?? [ 938.223953][T11302] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 938.239638][ T978] usb 7-1: USB disconnect, device number 101 [ 938.264898][T11302] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 938.830716][T11302] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 938.970264][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2841'. [ 939.149128][T17180] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2844'. [ 939.162340][T17180] unsupported nla_type 65024 [ 939.223401][T17182] syzkaller1: entered promiscuous mode [ 939.235209][T17182] syzkaller1: entered allmulticast mode [ 939.263163][T11302] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 939.277296][T11302] em28xx 2-1:0.0: board has no eeprom [ 939.291702][T17185] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2846'. [ 939.319305][T17187] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 939.542566][T17187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.558183][T17187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.314573][ T5924] usb 3-1: USB disconnect, device number 3 [ 940.365356][T17152] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 940.434951][T11302] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 940.452383][T11302] em28xx 2-1:0.0: dvb set to bulk mode. [ 940.458893][ T10] em28xx 2-1:0.0: Binding DVB extension [ 940.535788][ T5989] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 940.550812][T11302] usb 2-1: USB disconnect, device number 115 [ 940.640065][T11302] em28xx 2-1:0.0: Disconnecting em28xx [ 940.678303][ T10] em28xx 2-1:0.0: Registering input extension [ 940.705092][ T5989] usb 5-1: Using ep0 maxpacket: 16 [ 940.711053][T11302] em28xx 2-1:0.0: Closing input extension [ 940.715528][ T5989] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 940.752671][T11302] em28xx 2-1:0.0: Freeing device [ 940.787376][ T5989] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 940.797857][ T5989] usb 5-1: New USB device strings: Mfr=108, Product=3, SerialNumber=117 [ 940.829708][ T5989] usb 5-1: Product: syz [ 940.832870][T17213] netlink: 452 bytes leftover after parsing attributes in process `syz.2.2852'. [ 940.833913][ T5989] usb 5-1: Manufacturer: syz [ 940.866180][ T5989] usb 5-1: SerialNumber: syz [ 940.905183][ T5989] r8152-cfgselector 5-1: Unknown version 0x0000 [ 940.930152][ T5989] r8152-cfgselector 5-1: config 0 descriptor?? [ 941.008011][T17215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2853'. [ 941.256037][T17227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2857'. [ 941.554539][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 941.716529][ T10] usb 3-1: config 0 has no interfaces? [ 941.727208][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 941.739114][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.774598][ T10] usb 3-1: Product: syz [ 941.788993][ T10] usb 3-1: Manufacturer: syz [ 941.793637][ T10] usb 3-1: SerialNumber: syz [ 941.820411][ T10] usb 3-1: config 0 descriptor?? [ 942.054894][T17228] pimreg: entered allmulticast mode [ 942.060881][T17228] dvmrp0: left allmulticast mode [ 942.070466][T17228] pimreg: left allmulticast mode [ 943.270914][T11302] r8152-cfgselector 5-1: USB disconnect, device number 65 [ 943.593805][T17261] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 943.604313][T17261] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 943.885535][T15491] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 944.044901][T15491] usb 7-1: Using ep0 maxpacket: 16 [ 944.052002][T15491] usb 7-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 944.065072][T15491] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.092449][T15491] usb 7-1: config 0 descriptor?? [ 944.117956][T15491] usb 7-1: invalid MIDI EP [ 944.134928][ T5989] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 944.145295][T15491] usb 7-1: snd-bcd2000: error during probing [ 944.159908][T15491] snd-bcd2000 7-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 944.215713][T15491] usb 3-1: USB disconnect, device number 4 [ 944.290336][ T5989] usb 5-1: Using ep0 maxpacket: 16 [ 944.309548][ T5989] usb 5-1: config 132 has an invalid interface number: 81 but max is 0 [ 944.318797][ T5989] usb 5-1: config 132 has no interface number 0 [ 944.328233][ T5989] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 944.337908][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.346812][ T5989] usb 5-1: Product: syz [ 944.351135][ T5989] usb 5-1: Manufacturer: syz [ 944.357034][ T5989] usb 5-1: SerialNumber: syz [ 944.366523][T11302] usb 7-1: USB disconnect, device number 102 [ 944.607071][ T5989] usb-storage 5-1:132.81: USB Mass Storage device detected [ 944.626642][ T5989] usb-storage 5-1:132.81: Quirks match for vid 1908 pid 1315: 20000 [ 944.724016][ T5989] usb 5-1: USB disconnect, device number 66 [ 945.033814][T17292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2875'. [ 945.495347][ T5989] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 945.655299][ T5989] usb 7-1: Using ep0 maxpacket: 16 [ 945.666658][ T5989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.688351][ T5989] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 945.707893][T17308] syzkaller1: entered promiscuous mode [ 945.713618][T17308] syzkaller1: entered allmulticast mode [ 945.722054][T17313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2883'. [ 945.739469][ T5989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.764609][T11302] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 945.773500][ T5989] usb 7-1: config 0 descriptor?? [ 945.923307][T11302] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 945.941793][T11302] usb 5-1: config 0 has no interface number 0 [ 945.950684][T11302] usb 5-1: config 0 interface 9 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 945.966820][T11302] usb 5-1: New USB device found, idVendor=5050, idProduct=0104, bcdDevice=f9.9e [ 945.984625][T11302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.993083][T11302] usb 5-1: Product: syz [ 946.001838][T11302] usb 5-1: Manufacturer: syz [ 946.007471][T11302] usb 5-1: SerialNumber: syz [ 946.020522][T11302] usb 5-1: config 0 descriptor?? [ 946.032019][T11302] ftdi_sio 5-1:0.9: FTDI USB Serial Device converter detected [ 946.042387][T11302] ftdi_sio ttyUSB0: unknown device type: 0xf99e [ 946.065601][T17298] netlink: 186232 bytes leftover after parsing attributes in process `syz.6.2878'. [ 946.184926][ T10] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 946.311174][T17306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.334554][ T10] usb 2-1: device descriptor read/64, error -71 [ 946.341323][T17306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.355054][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2885'. [ 946.389189][T11302] usb 5-1: USB disconnect, device number 67 [ 946.407825][ T5989] mcp2221 0003:04D8:00DD.0030: collection stack underflow [ 946.410637][T11302] ftdi_sio 5-1:0.9: device disconnected [ 946.421366][ T5989] mcp2221 0003:04D8:00DD.0030: item 0 2 0 12 parsing failed [ 946.422077][ T5989] mcp2221 0003:04D8:00DD.0030: can't parse reports [ 946.448223][ T5989] mcp2221 0003:04D8:00DD.0030: probe with driver mcp2221 failed with error -22 [ 946.587120][T14464] usb 7-1: USB disconnect, device number 103 [ 946.633814][ T10] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 946.814575][ T10] usb 2-1: device descriptor read/64, error -71 [ 946.925083][ T10] usb usb2-port1: attempt power cycle [ 947.195735][T17336] netlink: 'syz.6.2888': attribute type 5 has an invalid length. [ 947.267090][ T10] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 947.337730][ T10] usb 2-1: device descriptor read/8, error -71 [ 947.539756][T17344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2891'. [ 947.575753][T17345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2891'. [ 947.595853][ T10] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 947.649925][ T10] usb 2-1: device descriptor read/8, error -71 [ 947.775218][ T10] usb usb2-port1: unable to enumerate USB device [ 948.049480][ T30] audit: type=1326 audit(1751939575.413:5120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17358 comm="syz.0.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363a78e929 code=0x7ffc0000 [ 948.103081][ T30] audit: type=1326 audit(1751939575.413:5121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17358 comm="syz.0.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363a78e929 code=0x7ffc0000 [ 948.137828][ T30] audit: type=1326 audit(1751939575.413:5122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17358 comm="syz.0.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f363a78e929 code=0x7ffc0000 [ 948.168407][ T30] audit: type=1326 audit(1751939575.413:5123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17358 comm="syz.0.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363a78e929 code=0x7ffc0000 [ 948.199468][T17361] netlink: 'syz.0.2895': attribute type 10 has an invalid length. [ 948.210814][T17361] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 948.220304][ T30] audit: type=1326 audit(1751939575.413:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17358 comm="syz.0.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363a78e929 code=0x7ffc0000 [ 948.246414][ T30] audit: type=1326 audit(1751939575.433:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17358 comm="syz.0.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f363a78e929 code=0x7ffc0000 [ 948.250937][T17361] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 948.276133][ T30] audit: type=1326 audit(1751939575.433:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17358 comm="syz.0.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363a78e929 code=0x7ffc0000 [ 948.305615][ T30] audit: type=1326 audit(1751939575.433:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17358 comm="syz.0.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363a78e929 code=0x7ffc0000 [ 948.333869][ T30] audit: type=1326 audit(1751939575.433:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17358 comm="syz.0.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f363a78e929 code=0x7ffc0000 [ 948.364974][T17361] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 948.373855][T17361] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 948.384958][T15491] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 948.392110][ T30] audit: type=1326 audit(1751939575.433:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17358 comm="syz.0.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363a78e929 code=0x7ffc0000 [ 948.515117][T15491] usb 3-1: device descriptor read/64, error -71 [ 948.755095][T15491] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 948.885121][T15491] usb 3-1: device descriptor read/64, error -71 [ 948.995436][T15491] usb usb3-port1: attempt power cycle [ 949.399992][T15491] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 949.455757][T15491] usb 3-1: device descriptor read/8, error -71 [ 949.624529][T11302] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 949.745022][T15491] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 949.785695][T15491] usb 3-1: device descriptor read/8, error -71 [ 949.794871][T11302] usb 2-1: Using ep0 maxpacket: 32 [ 949.813471][T11302] usb 2-1: unable to get BOS descriptor or descriptor too short [ 949.833650][T11302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 256, setting to 64 [ 949.877139][T11302] usb 2-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 949.888614][T11302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.897141][T15491] usb usb3-port1: unable to enumerate USB device [ 949.915619][T17392] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2902'. [ 949.932324][T11302] usb 2-1: Product: syz [ 949.945112][T17392] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2902'. [ 949.979265][T11302] usb 2-1: Manufacturer: syz [ 949.983920][T11302] usb 2-1: SerialNumber: syz [ 950.031660][T11302] usb 2-1: config 0 descriptor?? [ 950.524382][T11302] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 950.576148][T11302] usb 2-1: USB disconnect, device number 121 [ 951.290903][T17411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.303454][T17411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.454935][T11302] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 951.584627][ T978] usb 7-1: new low-speed USB device number 104 using dummy_hcd [ 951.692983][T11302] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 951.708629][T11302] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 951.720479][T11302] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 951.750952][T11302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.784621][ T978] usb 7-1: device descriptor read/64, error -71 [ 951.938205][T17424] xt_CT: No such helper "netbios-ns" [ 951.999129][T17408] delete_channel: no stack [ 952.024897][ T5989] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 952.026240][ T10] usb 3-1: USB disconnect, device number 9 [ 952.084591][T11302] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 952.092362][ T978] usb 7-1: new low-speed USB device number 105 using dummy_hcd [ 952.123690][T17428] bond0: entered promiscuous mode [ 952.129748][T17428] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 952.142150][T17428] bond0: left promiscuous mode [ 952.148802][T17428] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 952.219149][ T5989] usb 5-1: Using ep0 maxpacket: 32 [ 952.238449][ T5989] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 952.255282][ T978] usb 7-1: device descriptor read/64, error -71 [ 952.262650][ T5989] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 952.276054][T11302] usb 2-1: Using ep0 maxpacket: 16 [ 952.285019][T11302] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 952.294016][T11302] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 952.347244][T17429] block device autoloading is deprecated and will be removed. [ 952.355200][T11302] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 952.384232][ T978] usb usb7-port1: attempt power cycle [ 952.399054][T17429] syz.0.2911: attempt to access beyond end of device [ 952.399054][T17429] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 952.416532][ T5989] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 952.421399][T11302] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 952.454357][T11302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.467955][T11302] usb 2-1: Product: syz [ 952.472282][T11302] usb 2-1: Manufacturer: syz [ 952.478189][T11302] usb 2-1: SerialNumber: syz [ 952.502176][ T5989] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 952.554369][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 952.585049][ T5989] usb 5-1: SerialNumber: syz [ 952.619618][T17421] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 952.627499][T17421] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 952.784705][ T978] usb 7-1: new low-speed USB device number 106 using dummy_hcd [ 952.813298][ T978] usb 7-1: device descriptor read/8, error -71 [ 952.892469][T11302] usb 2-1: 0:2 : does not exist [ 953.093825][ T978] usb 7-1: new low-speed USB device number 107 using dummy_hcd [ 953.150403][T13481] usb 5-1: USB disconnect, device number 68 [ 953.160892][ T978] usb 7-1: device descriptor read/8, error -71 [ 953.296015][ T978] usb usb7-port1: unable to enumerate USB device [ 953.497149][T17419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.506900][T17419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.563407][T11302] usb 2-1: USB disconnect, device number 122 [ 954.344212][ T978] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 954.443310][T17440] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2915'. [ 954.606683][ T978] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 954.616049][ T978] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 954.626449][ T978] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 954.635547][ T978] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 954.646954][ T978] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 954.667134][ T978] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 954.681053][ T978] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 954.695403][ T978] usb 2-1: Product: syz [ 954.699603][ T978] usb 2-1: Manufacturer: syz [ 954.709896][ T978] cdc_wdm 2-1:1.0: skipping garbage [ 954.715545][ T978] cdc_wdm 2-1:1.0: skipping garbage [ 954.728599][ T978] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 954.735577][ T978] cdc_wdm 2-1:1.0: Unknown control protocol [ 955.008102][T17448] tun0: tun_chr_ioctl cmd 1074025675 [ 955.050255][T17448] tun0: persist enabled [ 955.070556][T17448] tun0: tun_chr_ioctl cmd 1074025675 [ 955.124016][T17448] tun0: persist disabled [ 955.209040][T17448] netlink: 'syz.1.2914': attribute type 10 has an invalid length. [ 955.271688][T17448] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2914'. [ 955.329808][T17459] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2919'. [ 955.354292][T17448] batman_adv: batadv0: Adding interface: vlan1 [ 955.361342][T17448] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.405265][T17448] batman_adv: batadv0: Interface activated: vlan1 [ 955.751020][T17449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 955.786999][T17464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2921'. [ 956.011363][T17467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2922'. [ 956.273663][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 956.273680][ T30] audit: type=1326 audit(1751939583.633:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9878e929 code=0x7ffc0000 [ 956.303764][ T30] audit: type=1326 audit(1751939583.663:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.2.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9878e929 code=0x7ffc0000 [ 956.565322][T13481] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 956.725097][T13481] usb 3-1: Using ep0 maxpacket: 32 [ 956.732218][T13481] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 956.747872][T13481] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 956.758243][T13481] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.780829][T13481] usb 3-1: Product: syz [ 956.790008][T13481] usb 3-1: Manufacturer: syz [ 956.795604][T13481] usb 3-1: SerialNumber: syz [ 956.809662][T13481] usb 3-1: config 0 descriptor?? [ 956.826453][T17472] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 956.840736][T13481] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 957.089407][T17472] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2924'. [ 957.221025][T13481] usb 2-1: USB disconnect, device number 123 [ 957.268126][ T978] usb 3-1: USB disconnect, device number 10 [ 957.685039][T13481] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 957.846890][T13481] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 957.866759][T13481] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 957.886986][T13481] usb 2-1: config 0 has no interface number 0 [ 957.903371][T13481] usb 2-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 957.926957][T13481] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 957.940873][T13481] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 957.968521][T13481] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 957.978999][T13481] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.996590][T13481] usb 2-1: Product: syz [ 958.000934][T13481] usb 2-1: Manufacturer: syz [ 958.006603][T13481] usb 2-1: SerialNumber: syz [ 958.015888][T13481] usb 2-1: config 0 descriptor?? [ 958.026839][T13481] HFC-S_USB 2-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 958.225141][ T5989] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 958.256744][T14464] usb 2-1: USB disconnect, device number 124 [ 958.378764][ T5989] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 958.389112][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.405779][ T5989] usb 5-1: config 0 descriptor?? [ 958.434816][ T978] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 958.535098][T13481] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 958.586419][ T978] usb 3-1: config 0 has an invalid interface number: 204 but max is 0 [ 958.597034][ T978] usb 3-1: config 0 has no interface number 0 [ 958.607829][ T978] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 958.620955][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.630479][ T978] usb 3-1: Product: syz [ 958.632580][T17504] bridge0: entered promiscuous mode [ 958.634967][ T978] usb 3-1: Manufacturer: syz [ 958.640860][T17504] macvlan2: entered promiscuous mode [ 958.649831][ T978] usb 3-1: SerialNumber: syz [ 958.658552][ T978] usb 3-1: config 0 descriptor?? [ 958.665124][T13481] usb 7-1: device descriptor read/64, error -71 [ 958.666516][ T978] ems_usb 3-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 958.683044][ T978] ems_usb 3-1:0.204: probe with driver ems_usb failed with error -22 [ 958.684397][ T5989] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 958.734937][T14464] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 958.893331][ T5989] [drm:udl_init] *ERROR* Selecting channel failed [ 958.909083][T14464] usb 2-1: Using ep0 maxpacket: 32 [ 958.915301][T13481] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 958.935018][T14464] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 958.952546][T17508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.956797][ T5989] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 958.971055][T14464] usb 2-1: config 0 has no interface number 0 [ 958.971922][ T5989] [drm] Initialized udl on minor 2 [ 958.985084][T17508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.987746][T14464] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 959.000591][ T5989] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 959.006575][T14464] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 959.030404][T14464] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 959.032319][ T5989] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 959.066014][T13481] usb 7-1: device descriptor read/64, error -71 [ 959.071254][T14464] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 959.084144][T14464] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 959.100352][T15491] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 959.101428][T14464] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 959.133828][T15491] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 959.136193][T14464] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 959.141725][ T5989] usb 5-1: USB disconnect, device number 69 [ 959.167933][T11302] usb 3-1: USB disconnect, device number 11 [ 959.180576][T14464] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 959.192264][T13481] usb usb7-port1: attempt power cycle [ 959.206028][T14464] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 959.217124][T14464] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 959.235323][T14464] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 959.269651][T14464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.289882][T14464] usb 2-1: Product: syz [ 959.294097][T14464] usb 2-1: Manufacturer: syz [ 959.303847][T14464] usb 2-1: SerialNumber: syz [ 959.315095][T14464] usb 2-1: config 0 descriptor?? [ 959.328769][T17519] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 959.338446][T17519] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 959.353696][T14464] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 959.362501][T14464] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 959.383037][T14464] scsi host1: microtekX6 [ 959.526412][T13481] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 959.570391][T13481] usb 7-1: device descriptor read/8, error -71 [ 959.678632][T17519] netlink: 'syz.1.2940': attribute type 10 has an invalid length. [ 959.686791][T17519] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2940'. [ 959.708144][T17533] geneve2: entered allmulticast mode [ 959.726705][T17519] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.744936][T17519] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.759323][T14464] hid-generic 0000:0002:2000000.0031: item fetching failed at offset 0/1 [ 959.782303][T17519] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.782881][T14464] hid-generic 0000:0002:2000000.0031: probe with driver hid-generic failed with error -22 [ 959.792419][T17519] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.835309][T13481] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 959.895715][T13481] usb 7-1: device descriptor read/8, error -71 [ 959.902392][T17519] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.934752][T17519] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.947325][T17519] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.986276][T17519] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.075626][T13481] usb usb7-port1: unable to enumerate USB device [ 960.100328][T17519] team0: Port device geneve0 added [ 960.182201][T15491] usb 2-1: USB disconnect, device number 125 [ 960.890865][T17554] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.904005][T17554] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.914278][T17554] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.925136][T17554] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.934257][T17554] geneve2: entered promiscuous mode [ 960.951343][T17554] geneve2: entered allmulticast mode [ 960.972313][T17554] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.983216][T17554] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.993935][T17554] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.004346][T17554] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.089404][T15491] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 961.235007][T15491] usb 7-1: device descriptor read/64, error -71 [ 961.703347][T17572] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 961.709925][T17572] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 961.756312][T17572] vhci_hcd vhci_hcd.0: Device attached [ 961.925111][ T5989] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 961.934800][T14464] vhci_hcd: vhci_device speed not set [ 962.004931][T14464] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 962.075014][ T5989] usb 5-1: Using ep0 maxpacket: 8 [ 962.082095][ T5989] usb 5-1: config 0 has an invalid interface number: 124 but max is 0 [ 962.098733][ T5989] usb 5-1: config 0 has no interface number 0 [ 962.110953][ T5989] usb 5-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01 [ 962.129932][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.157645][ T5989] usb 5-1: Product: syz [ 962.172517][ T5989] usb 5-1: Manufacturer: syz [ 962.189802][ T5989] usb 5-1: SerialNumber: syz [ 962.283272][ T5989] usb 5-1: config 0 descriptor?? [ 962.499555][T17574] vhci_hcd: connection reset by peer [ 962.525241][ T8532] vhci_hcd: stop threads [ 962.542543][ T8532] vhci_hcd: release socket [ 962.550403][T17569] input: syz0 as /devices/virtual/input/input68 [ 962.574016][ T8532] vhci_hcd: disconnect device [ 962.648666][ T5989] usb 5-1: USB disconnect, device number 70 [ 963.044929][ T978] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 963.204605][ T978] usb 3-1: device descriptor read/64, error -71 [ 963.343362][T17601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2961'. [ 963.465103][ T978] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 963.604545][ T978] usb 3-1: device descriptor read/64, error -71 [ 963.795934][ T978] usb usb3-port1: attempt power cycle [ 963.933689][T17607] fuse: Bad value for 'fd' [ 964.032064][T17610] FAULT_INJECTION: forcing a failure. [ 964.032064][T17610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 964.051754][T17610] CPU: 0 UID: 0 PID: 17610 Comm: syz.6.2963 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 964.051782][T17610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 964.051795][T17610] Call Trace: [ 964.051805][T17610] [ 964.051813][T17610] dump_stack_lvl+0x189/0x250 [ 964.051842][T17610] ? __pfx____ratelimit+0x10/0x10 [ 964.051872][T17610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 964.051896][T17610] ? __pfx__printk+0x10/0x10 [ 964.051922][T17610] ? __might_fault+0xb0/0x130 [ 964.051957][T17610] should_fail_ex+0x414/0x560 [ 964.051990][T17610] _copy_from_iter+0x1db/0x16f0 [ 964.052014][T17610] ? rcu_is_watching+0x15/0xb0 [ 964.052039][T17610] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 964.052063][T17610] ? __pfx__copy_from_iter+0x10/0x10 [ 964.052083][T17610] ? __build_skb_around+0x257/0x3e0 [ 964.052117][T17610] ? netlink_sendmsg+0x642/0xb30 [ 964.052139][T17610] ? skb_put+0x11b/0x210 [ 964.052166][T17610] netlink_sendmsg+0x6b2/0xb30 [ 964.052199][T17610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 964.052227][T17610] ? aa_sock_msg_perm+0x94/0x160 [ 964.052258][T17610] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 964.052286][T17610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 964.052311][T17610] __sock_sendmsg+0x21c/0x270 [ 964.052343][T17610] ____sys_sendmsg+0x505/0x830 [ 964.052374][T17610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 964.052408][T17610] ? import_iovec+0x74/0xa0 [ 964.052434][T17610] ___sys_sendmsg+0x21f/0x2a0 [ 964.052461][T17610] ? __pfx____sys_sendmsg+0x10/0x10 [ 964.052522][T17610] ? __fget_files+0x2a/0x420 [ 964.052546][T17610] ? __fget_files+0x3a0/0x420 [ 964.052582][T17610] __x64_sys_sendmsg+0x19b/0x260 [ 964.052609][T17610] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 964.052645][T17610] ? __pfx_ksys_write+0x10/0x10 [ 964.052669][T17610] ? rcu_is_watching+0x15/0xb0 [ 964.052697][T17610] ? do_syscall_64+0xbe/0x3b0 [ 964.052720][T17610] do_syscall_64+0xfa/0x3b0 [ 964.052738][T17610] ? lockdep_hardirqs_on+0x9c/0x150 [ 964.052767][T17610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.052787][T17610] ? clear_bhb_loop+0x60/0xb0 [ 964.052810][T17610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.052829][T17610] RIP: 0033:0x7f6662f8e929 [ 964.052847][T17610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 964.052865][T17610] RSP: 002b:00007f6663e27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 964.052887][T17610] RAX: ffffffffffffffda RBX: 00007f66631b5fa0 RCX: 00007f6662f8e929 [ 964.052903][T17610] RDX: 0000000022000040 RSI: 00002000000010c0 RDI: 0000000000000004 [ 964.052917][T17610] RBP: 00007f6663e27090 R08: 0000000000000000 R09: 0000000000000000 [ 964.052929][T17610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.052942][T17610] R13: 0000000000000000 R14: 00007f66631b5fa0 R15: 00007f66632dfa28 [ 964.052972][T17610] [ 964.497072][ T978] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 964.535670][ T978] usb 3-1: device descriptor read/8, error -71 [ 964.755500][T13481] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 964.774684][ T978] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 964.806747][ T978] usb 3-1: device descriptor read/8, error -71 [ 964.915042][ T978] usb usb3-port1: unable to enumerate USB device [ 964.985164][T13481] usb 2-1: device descriptor read/64, error -71 [ 965.224675][T13481] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 965.274747][ T978] usb 7-1: new full-speed USB device number 114 using dummy_hcd [ 965.355203][T13481] usb 2-1: device descriptor read/64, error -71 [ 965.459838][ T978] usb 7-1: config 0 has an invalid interface number: 84 but max is 0 [ 965.465305][T13481] usb usb2-port1: attempt power cycle [ 965.629959][ T978] usb 7-1: config 0 has no interface number 0 [ 965.649351][ T978] usb 7-1: config 0 interface 84 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 965.688835][ T978] usb 7-1: config 0 interface 84 altsetting 0 has an endpoint descriptor with address 0x74, changing to 0x4 [ 965.705176][ T978] usb 7-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 44457, setting to 64 [ 965.724549][ T978] usb 7-1: config 0 interface 84 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 965.812632][T17635] netlink: 'syz.0.2970': attribute type 9 has an invalid length. [ 965.835060][ T978] usb 7-1: New USB device found, idVendor=0424, idProduct=274e, bcdDevice=42.9a [ 965.871551][ T978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.880594][T17635] netlink: 200108 bytes leftover after parsing attributes in process `syz.0.2970'. [ 965.885051][T13481] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 965.905435][T17635] openvswitch: netlink: Message has 5 unknown bytes. [ 965.906140][ T978] usb 7-1: Product: syz [ 965.930121][T13481] usb 2-1: device descriptor read/8, error -71 [ 965.935342][ T978] usb 7-1: Manufacturer: syz [ 965.942429][ T978] usb 7-1: SerialNumber: syz [ 965.967938][ T978] usb 7-1: config 0 descriptor?? [ 965.999441][T17629] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 966.065240][ T978] cdc_acm 7-1:0.84: Zero length descriptor references [ 966.072650][ T978] cdc_acm 7-1:0.84: probe with driver cdc_acm failed with error -22 [ 966.247875][ T5989] usb 7-1: USB disconnect, device number 114 [ 966.256423][T13481] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 966.285885][T13481] usb 2-1: device descriptor read/8, error -71 [ 966.328510][T17641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2973'. [ 966.338098][T17641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2973'. [ 966.395769][T13481] usb usb2-port1: unable to enumerate USB device [ 966.737875][T17656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2976'. [ 966.943319][T17658] [U]  [ 967.171052][T14464] vhci_hcd: vhci_device speed not set [ 967.186282][ T10] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 967.366539][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 967.376326][ T10] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 967.389226][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 967.417173][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 967.426822][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.485081][ T10] usb 5-1: Product: syz [ 967.489470][ T10] usb 5-1: Manufacturer: syz [ 967.494127][ T10] usb 5-1: SerialNumber: syz [ 967.518740][T17675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2984'. [ 967.755885][T17663] netlink: 'syz.4.2978': attribute type 10 has an invalid length. [ 967.822132][T17663] veth0_vlan: left promiscuous mode [ 967.925965][T17663] veth0_vlan: entered promiscuous mode [ 967.998231][T17663] team0: Device veth0_vlan failed to register rx_handler [ 968.125924][ T10] usb 5-1: 0:2 : does not exist [ 968.147997][ T10] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 968.219042][ T10] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 968.237780][ T10] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 968.252045][ T10] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 968.265197][ T5989] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 968.281559][ T10] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 968.459046][ T10] usb 5-1: USB disconnect, device number 71 [ 968.464973][ T5989] usb 7-1: Using ep0 maxpacket: 16 [ 968.519901][ T5989] usb 7-1: unable to get BOS descriptor or descriptor too short [ 968.541956][ T5989] usb 7-1: config 1 has an invalid interface number: 125 but max is 0 [ 968.577539][T17690] vivid-000: disconnect [ 968.630615][ T5989] usb 7-1: config 1 has no interface number 0 [ 968.647269][ T5989] usb 7-1: config 1 interface 125 has no altsetting 0 [ 968.658041][T17683] netlink: 'syz.2.2987': attribute type 29 has an invalid length. [ 968.668936][ T5989] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=3c.51 [ 968.708949][T17676] vivid-000: reconnect [ 968.714549][T17687] can: request_module (can-proto-0) failed. [ 968.726348][ T5989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.733567][T17689] netlink: 'syz.2.2987': attribute type 29 has an invalid length. [ 968.734391][ T5989] usb 7-1: Product: syz [ 968.747442][ T5989] usb 7-1: Manufacturer: syz [ 968.752928][ T5989] usb 7-1: SerialNumber: syz [ 968.987589][ T5989] qmi_wwan 7-1:1.125: probe with driver qmi_wwan failed with error -22 [ 969.014724][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 969.026036][ T5989] usb 7-1: USB disconnect, device number 115 [ 969.155453][T14464] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 969.205155][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 969.218647][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 969.236888][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 969.253351][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 969.263179][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 53280, setting to 1024 [ 969.274592][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 969.284854][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 969.297986][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 969.307661][T14464] usb 5-1: device descriptor read/64, error -71 [ 969.313939][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.468455][T15491] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 969.527664][ T10] usb 3-1: usb_control_msg returned -32 [ 969.533757][ T10] usbtmc 3-1:16.0: can't read capabilities [ 969.554914][T14464] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 969.635242][T15491] usb 2-1: Using ep0 maxpacket: 8 [ 969.663351][T15491] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 969.694526][T14464] usb 5-1: device descriptor read/64, error -71 [ 969.710192][T15491] usb 2-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 969.739531][T15491] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 969.767312][T15491] usb 2-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 969.803561][T15491] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 969.814824][ T978] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 969.825003][T14464] usb usb5-port1: attempt power cycle [ 969.827932][T15491] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.851254][T15491] usb 2-1: Product: syz [ 969.863527][T15491] usb 2-1: Manufacturer: syz [ 969.875036][T15491] usb 2-1: SerialNumber: syz [ 969.925499][T15491] hso 2-1:6.0: Can't find BULK OUT endpoint [ 969.995211][ T978] usb 7-1: Using ep0 maxpacket: 16 [ 970.017611][ T978] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 970.033850][ T978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 970.049878][ T978] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 970.061820][ T978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 970.081515][ T978] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 970.093210][ T978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.104379][ T978] usb 7-1: Product: syz [ 970.110761][ T978] usb 7-1: Manufacturer: syz [ 970.118820][ T978] usb 7-1: SerialNumber: syz [ 970.121274][T15491] usb 2-1: USB disconnect, device number 4 [ 970.150267][ T978] usb 7-1: config 0 descriptor?? [ 970.174256][ T978] port100 7-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 970.199697][T14464] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 970.235637][T14464] usb 5-1: device descriptor read/8, error -71 [ 970.394932][T13481] usb 7-1: USB disconnect, device number 116 [ 970.474569][T14464] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 970.495992][T14464] usb 5-1: device descriptor read/8, error -71 [ 970.507435][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2994'. [ 970.619380][T14464] usb usb5-port1: unable to enumerate USB device [ 970.673311][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2995'. [ 970.682601][T17717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2995'. [ 970.895515][T17720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2996'. [ 970.946066][T15491] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 971.017621][T17724] gretap0: mtu less than device minimum [ 971.023497][T17724] gretap0: mtu less than device minimum [ 971.026555][T17725] ------------[ cut here ]------------ [ 971.030116][T17724] gretap0: mtu less than device minimum [ 971.034625][T17725] WARNING: CPU: 0 PID: 17725 at fs/exec.c:119 path_noexec+0x1af/0x200 [ 971.040249][T17724] gretap0: mtu less than device minimum [ 971.048634][T17725] Modules linked in: [ 971.048810][T17725] CPU: 0 UID: 0 PID: 17725 Comm: syz.0.2998 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 971.048834][T17725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 971.048848][T17725] RIP: 0010:path_noexec+0x1af/0x200 [ 971.048871][T17725] Code: 02 31 ff 48 89 de e8 d0 3d 8a ff d1 eb eb 07 e8 e7 38 8a ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 38 8a ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 971.048889][T17725] RSP: 0018:ffffc9000eb3fbd8 EFLAGS: 00010293 [ 971.048909][T17725] RAX: ffffffff8235ed2e RBX: ffff888072931900 RCX: ffff888025690000 [ 971.048926][T17725] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 971.048938][T17725] RBP: 0000000000080000 R08: ffff888025690000 R09: 0000000000000003 [ 971.048952][T17725] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000013 [ 971.048965][T17725] R13: 1ffff92001d67f90 R14: 0000000000000000 R15: dffffc0000000000 [ 971.048980][T17725] FS: 00007f363b6306c0(0000) GS:ffff888125c1d000(0000) knlGS:0000000000000000 [ 971.048999][T17725] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 971.049014][T17725] CR2: 0000000000000040 CR3: 00000000343dc000 CR4: 00000000003526f0 [ 971.049033][T17725] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 971.049045][T17725] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 971.049059][T17725] Call Trace: [ 971.049067][T17725] [ 971.049085][T17725] do_mmap+0xa43/0x10d0 [ 971.049122][T17725] ? __pfx_do_mmap+0x10/0x10 [ 971.049142][T17725] ? down_write_killable+0x178/0x230 [ 971.049167][T17725] ? end_current_label_crit_section+0x152/0x180 [ 971.049200][T17725] ? __pfx_down_write_killable+0x10/0x10 [ 971.049231][T17725] vm_mmap_pgoff+0x31b/0x4c0 [ 971.063764][T17724] gretap0: mtu less than device minimum [ 971.069233][T17725] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 971.069277][T17725] ? __fget_files+0x2a/0x420 [ 971.069310][T17725] ? __fget_files+0x3a0/0x420 [ 971.069336][T17725] ? __fget_files+0x2a/0x420 [ 971.069368][T17725] ksys_mmap_pgoff+0x51f/0x760 [ 971.069400][T17725] do_syscall_64+0xfa/0x3b0 [ 971.069421][T17725] ? lockdep_hardirqs_on+0x9c/0x150 [ 971.069449][T17725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.069471][T17725] ? clear_bhb_loop+0x60/0xb0 [ 971.069496][T17725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.069518][T17725] RIP: 0033:0x7f363a78e929 [ 971.069537][T17725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.069557][T17725] RSP: 002b:00007f363b630038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 971.069582][T17725] RAX: ffffffffffffffda RBX: 00007f363a9b6080 RCX: 00007f363a78e929 [ 971.069600][T17725] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000ffd000 [ 971.069615][T17725] RBP: 00007f363a810b39 R08: 0000000000000028 R09: 0000000008000000 [ 971.069631][T17725] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000000 [ 971.069645][T17725] R13: 0000000000000000 R14: 00007f363a9b6080 R15: 00007f363aadfa28 [ 971.069688][T17725] [ 971.069711][T17725] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 971.069726][T17725] CPU: 0 UID: 0 PID: 17725 Comm: syz.0.2998 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 971.069748][T17725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 971.069760][T17725] Call Trace: [ 971.069768][T17725] [ 971.069776][T17725] dump_stack_lvl+0x99/0x250 [ 971.069801][T17725] ? __asan_memcpy+0x40/0x70 [ 971.069822][T17725] ? __pfx_dump_stack_lvl+0x10/0x10 [ 971.069845][T17725] ? __pfx__printk+0x10/0x10 [ 971.069880][T17725] panic+0x2db/0x790 [ 971.069907][T17725] ? __pfx_panic+0x10/0x10 [ 971.069948][T17725] __warn+0x31b/0x4b0 [ 971.069968][T17725] ? path_noexec+0x1af/0x200 [ 971.069989][T17725] ? path_noexec+0x1af/0x200 [ 971.070008][T17725] report_bug+0x2be/0x4f0 [ 971.070036][T17725] ? path_noexec+0x1af/0x200 [ 971.070056][T17725] ? path_noexec+0x1af/0x200 [ 971.070075][T17725] ? path_noexec+0x1b1/0x200 [ 971.070094][T17725] handle_bug+0x84/0x160 [ 971.070116][T17725] exc_invalid_op+0x1a/0x50 [ 971.070138][T17725] asm_exc_invalid_op+0x1a/0x20 [ 971.070157][T17725] RIP: 0010:path_noexec+0x1af/0x200 [ 971.070177][T17725] Code: 02 31 ff 48 89 de e8 d0 3d 8a ff d1 eb eb 07 e8 e7 38 8a ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 38 8a ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 971.070200][T17725] RSP: 0018:ffffc9000eb3fbd8 EFLAGS: 00010293 [ 971.070218][T17725] RAX: ffffffff8235ed2e RBX: ffff888072931900 RCX: ffff888025690000 [ 971.070234][T17725] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 971.070247][T17725] RBP: 0000000000080000 R08: ffff888025690000 R09: 0000000000000003 [ 971.070261][T17725] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000013 [ 971.070273][T17725] R13: 1ffff92001d67f90 R14: 0000000000000000 R15: dffffc0000000000 [ 971.070296][T17725] ? path_noexec+0x1ae/0x200 [ 971.070321][T17725] ? path_noexec+0x1ae/0x200 [ 971.070342][T17725] do_mmap+0xa43/0x10d0 [ 971.070375][T17725] ? __pfx_do_mmap+0x10/0x10 [ 971.070394][T17725] ? down_write_killable+0x178/0x230 [ 971.070417][T17725] ? end_current_label_crit_section+0x152/0x180 [ 971.070448][T17725] ? __pfx_down_write_killable+0x10/0x10 [ 971.070478][T17725] vm_mmap_pgoff+0x31b/0x4c0 [ 971.070505][T17725] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 971.070538][T17725] ? __fget_files+0x2a/0x420 [ 971.070568][T17725] ? __fget_files+0x3a0/0x420 [ 971.070593][T17725] ? __fget_files+0x2a/0x420 [ 971.070623][T17725] ksys_mmap_pgoff+0x51f/0x760 [ 971.070653][T17725] do_syscall_64+0xfa/0x3b0 [ 971.070678][T17725] ? lockdep_hardirqs_on+0x9c/0x150 [ 971.070706][T17725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.070726][T17725] ? clear_bhb_loop+0x60/0xb0 [ 971.070750][T17725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.070769][T17725] RIP: 0033:0x7f363a78e929 [ 971.070785][T17725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.070803][T17725] RSP: 002b:00007f363b630038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 971.070823][T17725] RAX: ffffffffffffffda RBX: 00007f363a9b6080 RCX: 00007f363a78e929 [ 971.070838][T17725] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000ffd000 [ 971.070851][T17725] RBP: 00007f363a810b39 R08: 0000000000000028 R09: 0000000008000000 [ 971.070865][T17725] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000000 [ 971.070877][T17725] R13: 0000000000000000 R14: 00007f363a9b6080 R15: 00007f363aadfa28 [ 971.070908][T17725] [ 971.080147][T17725] Kernel Offset: disabled