last executing test programs: 13.892764536s ago: executing program 4 (id=4977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffbfff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x805d5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 13.315311297s ago: executing program 4 (id=4979): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x8800) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0xfff3}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4000000) 12.53495727s ago: executing program 2 (id=4982): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x8000000) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x18, 0x2, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtaction={0xe68, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x8001, 0x10000000, 0x8}, 0x92, 0x6}, [{0x4, 0xe, 0x8, 0xe42, 0x4, 0xec87}, {0x6, 0x40, 0x6, 0x458, 0x400, 0x7}, {0x40, 0xa6, 0x8, 0x0, 0x7, 0xf63}, {0x1, 0x2, 0xfc78, 0x3, 0x4, 0x7fff}, {0x0, 0x3c98, 0x1, 0x7fffffff, 0x9, 0xc}, {0x3, 0x7, 0x3, 0x0, 0x6, 0x4}, {0x1, 0x2, 0x0, 0x51, 0x6, 0x6}, {0xf, 0xfff, 0x9, 0x99, 0x6b2b}, {0x8e73, 0x3f8000, 0x1, 0x4, 0x7, 0x7}, {0x4, 0x3, 0x1, 0x4, 0x0, 0x400}, {0xec25, 0x60, 0xffffff00, 0xb45d, 0x552, 0x39f}, {0x100000, 0xfffff317, 0x2, 0x5, 0x974f, 0x17}, {0x4, 0x7, 0x100, 0x9, 0xfff, 0xffffffff}, {0xfffffff7, 0x101, 0x400, 0x6, 0x40, 0xb}, {0x0, 0x4, 0x5, 0x3, 0x81, 0x2}, {0xb2, 0x4c81440c, 0x8, 0x800, 0x2, 0xd66}, {0x4, 0x2bb, 0x80, 0xa, 0xfffffffa, 0x5}, {0xfffffffe, 0x5b92, 0x7, 0x4, 0x88f5, 0x9}, {0x6, 0xc, 0x200, 0x4, 0xfffffff1, 0x26}, {0x9, 0x56, 0x1, 0xd, 0x5, 0x1}, {0x5, 0x3, 0xc, 0xfffffff7, 0x2}, {0xfffffff7, 0xf9f5, 0x8, 0xfff, 0xe1, 0x2d5e}, {0x6, 0x10001, 0x2, 0xcb, 0x5, 0x4}, {0xe, 0x101, 0x80, 0xd, 0xfffffffc, 0x9}, {0x0, 0xb, 0xfffffff4, 0x9, 0xfff, 0x81}, {0x6, 0x4, 0x9, 0x38f5, 0xe, 0xb4}, {0x2, 0x6, 0x9, 0x3, 0xe5, 0x3800}, {0x9, 0x4, 0x1, 0x101, 0x49a, 0x40}, {0x100, 0xffffffff, 0x80000001, 0x3, 0x12ab, 0xbc}, {0xa4a9, 0x3, 0x9, 0x7, 0x9, 0xb}, {0x7fffffff, 0x4, 0x5, 0x3, 0x7fff, 0xc}, {0x5, 0x9, 0x75, 0xffff8001, 0x9, 0x6}, {0xb0, 0x4, 0xffffffff, 0x6d, 0x81, 0xfffffffa}, {0x100, 0x6, 0xffffffff, 0x0, 0x4, 0x9}, {0x6, 0x9, 0x9, 0x1, 0xffff, 0x2}, {0x800, 0x4, 0xfffffffe, 0x10001, 0x7fffffff, 0x100}, {0xb, 0x2, 0x4, 0xfffffff8, 0x6, 0xfffffff9}, {0x1, 0x9, 0x5, 0x6, 0x84, 0x7}, {0xa, 0x0, 0x909d, 0x1, 0x9}, {0xbe0, 0x3, 0x5, 0x2, 0x3, 0x80000001}, {0x6, 0x0, 0x8001, 0xce8, 0xc7f, 0x10001}, {0xcf4, 0xaad, 0x8, 0x6, 0x1, 0x3}, {0x6, 0x5, 0x5, 0x7, 0x7247, 0x2}, {0x80000000, 0xfe9, 0x32b2, 0x7, 0x5, 0x7ff}, {0x40, 0x9, 0x68, 0x0, 0x2, 0x98a}, {0x7, 0x0, 0x5b02, 0x6, 0x8001, 0x2}, {0x6, 0x4, 0x1ff, 0xd, 0x8, 0xfff}, {0x2, 0x9, 0x800, 0x0, 0xfffffff8, 0x3a}, {0x4, 0x9, 0x9, 0xfff, 0x3, 0xd4f}, {0xb44, 0x8, 0x9, 0x7f, 0x3, 0x3}, {0xc1, 0x6, 0x2, 0x6, 0x1, 0x5}, {0x40, 0x6be, 0x4d1, 0x5, 0x2, 0x7}, {0x1ff, 0xb25, 0x80000001, 0x1, 0xf}, {0x4, 0x6, 0x1, 0x32}, {0xe6e1, 0x5, 0xfffffff9, 0x2, 0x60, 0x1a0}, {0x401, 0x0, 0x8000, 0xffff65ca, 0xffffffc0, 0xf9}, {0xf, 0x2, 0x9, 0xa, 0x3, 0xffffffff}, {0x4, 0x3, 0x9, 0x6, 0x4, 0x7ff}, {0x7ff, 0xfffffffc, 0x15e5a53f, 0x67b, 0x1, 0x4}, {0x4, 0x7, 0x5, 0x10001, 0x8, 0x6}, {0x8f2, 0xfff, 0x6, 0x2, 0xc5, 0xfffffff8}, {0x8000, 0xc1, 0x8, 0x7fff, 0x7fff, 0x400}, {0x2900416, 0x10000, 0xe, 0x9, 0x1000, 0x9}, {0x10, 0xfffffff8, 0x0, 0x4, 0xe, 0x9}, {0x8, 0x8, 0x8000, 0x0, 0xd01, 0x3}, {0x800, 0x3, 0x0, 0x0, 0x4, 0xf87b}, {0x1, 0x1ff, 0x3, 0x3, 0x9, 0x3ff}, {0x7, 0xfffffff6, 0x0, 0xde, 0x3, 0x7}, {0x8, 0xaf00, 0x1, 0x1, 0x8, 0x1}, {0x4, 0x2, 0x9, 0xfd, 0x0, 0x7}, {0x0, 0x6, 0x8, 0xc, 0xf15f10b, 0x6}, {0x4d, 0x6, 0x8, 0x7, 0xe582, 0x6}, {0x4, 0x0, 0x40, 0x8, 0x0, 0xffff8000}, {0x9, 0x4, 0x6, 0x6, 0xa, 0x8}, {0x3, 0x401, 0x6, 0xe, 0x1ff000, 0x1}, {0xfffffb2a, 0x8, 0x5, 0xffff, 0x2, 0xffffff00}, {0x400, 0x6, 0x3, 0x9a, 0x1, 0x2000}, {0x5, 0x2, 0x81, 0xf, 0x5, 0x8}, {0x1, 0x4241, 0xfffffff8, 0x9, 0x400, 0xebed}, {0x5, 0x1ed, 0x2, 0x8, 0x707, 0xfc1a}, {0x1d, 0x33, 0xfffffff8, 0x2, 0x6, 0x9}, {0x9b, 0x6, 0x3a438d3b, 0x8000, 0x4}, {0x9, 0x81, 0x7fff, 0x800, 0x9}, {0x10, 0x4, 0x1, 0x622e, 0xd8, 0x9}, {0x33, 0x7, 0x9, 0x6, 0x1e, 0xd}, {0xd2, 0x7, 0x6, 0x2, 0x7, 0x1000}, {0x3, 0x0, 0x7, 0xab7, 0x5, 0x5}, {0xb, 0x7, 0xc, 0x1, 0x6, 0x80000000}, {0x3, 0x1, 0x2, 0x8, 0x2c, 0x10}, {0x50a49641, 0x2, 0x4, 0xef1, 0x8, 0x9a90}, {0x5e300141, 0x0, 0x7, 0x93, 0xa, 0x6e}, {0x36, 0x5, 0x6de, 0x80000001, 0x4}, {0x8, 0x2, 0x5, 0x4, 0x0, 0x57d}, {0x3, 0x6, 0x7fc, 0x6, 0x7, 0x8}, {0x5000, 0x7, 0x0, 0x4, 0x6, 0x4}, {0x4, 0x7fffffff, 0x7fff, 0xfffffffe, 0x100000, 0x5}, {0x7d, 0x343, 0x6, 0x1, 0xa19a, 0x5}, {0x1, 0x4, 0x962, 0xd, 0x1, 0x8}, {0x1a4, 0x2, 0xffff, 0xa, 0x0, 0x1}, {0x800, 0x81, 0x6, 0x3, 0xfffffff9, 0x8001}, {0x8000, 0x3, 0x0, 0x1, 0x2, 0x8}, {0x101, 0x4, 0x7f, 0x3b24, 0xc16, 0x1ff}, {0x80, 0x8, 0x3, 0x2, 0x34c, 0x2}, {0x9, 0x6, 0x2, 0x88, 0x4, 0x3ff}, {0x6, 0x4, 0xf, 0x5, 0xfffff157, 0x7}, {0x400000, 0xbefa, 0x9, 0x6, 0x4, 0xffffffff}, {0x2fd, 0x4, 0x8, 0x3, 0x6, 0x1}, {0xa1, 0x1, 0xd, 0x7, 0x4, 0xe1}, {0x6, 0x101, 0x7, 0x3, 0x0, 0x3}, {0x3, 0x6, 0x7, 0x9}, {0x2, 0xc, 0x23c, 0x8, 0x12, 0x80}, {0x0, 0x292, 0x2, 0x8, 0xffff, 0x2}, {0x9, 0x0, 0x3, 0x4, 0x40, 0xffffffff}, {0x80000000, 0x6f95, 0x23, 0xf9, 0x8, 0x7fff}, {0x5, 0x19de554e, 0xfffff4b2, 0xb97, 0x1, 0x7}, {0x9, 0x0, 0x521, 0x5, 0x3}, {0xffff, 0x4, 0xfb1, 0x3, 0x0, 0xfffffff8}, {0x6, 0x19c1, 0x7ff, 0xa, 0xda8b, 0x9b}, {0x3, 0x8, 0x7fff, 0x6, 0x7, 0x8}, {0x80, 0x5, 0x48, 0xce6, 0x3, 0x4}, {0x9, 0x3ae2, 0x1, 0x7, 0x7, 0xfff}, {0xb5, 0x7f, 0xffffacad, 0x0, 0x4}, {0x3, 0x0, 0x7455, 0xe, 0x8000, 0x4}, {0x8, 0x8, 0x10, 0x0, 0x0, 0x3}, {0x2, 0x8, 0x0, 0x5, 0x1ff, 0x6}, {0xd, 0x4, 0x73f57df3, 0x8, 0xffffff61, 0x8}, {0x7, 0x8, 0x5, 0x5, 0xb, 0x40}, {0x6f, 0x0, 0xffff, 0x81, 0xc, 0x10000}], [{0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {}, {}, {}, {0x5}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x5}, {}, {0x2}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x5}, {0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 12.532559849s ago: executing program 0 (id=4983): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sndseq(0xffffffffffffff9c, 0x0, 0x402) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0xcd3, &(0x7f0000000400)={0x0, 0x5889, 0x1000, 0x0, 0xffeffc03}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x61, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r1, 0x3516, 0x483, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x111, &(0x7f0000000380)={0x0, 0x5887, 0x1000, 0x0, 0x36f}, &(0x7f0000001140)=0x0, &(0x7f0000001080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x3516, 0x8000067f, 0x4, 0x0, 0x0) 12.472218346s ago: executing program 1 (id=4984): setrlimit(0x1, &(0x7f0000000000)) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x1000000010, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0xf3}, 0xf338}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0xd}], 0x3fffe16, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 12.19541812s ago: executing program 2 (id=4985): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0x4) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) lsetxattr$security_capability(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 11.586836797s ago: executing program 0 (id=4986): syz_io_uring_setup(0xa3d, &(0x7f0000000180)={0x0, 0x43ed, 0x0, 0x2000005, 0x8002ae}, &(0x7f0000000000), &(0x7f0000000380)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74f280, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x18, 0xb}, {0x6, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x1, 0x406, 0x4, 0xffffffff, 0xb}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x81d3, 0x44, 0x80, 0x4}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 11.569434996s ago: executing program 3 (id=4987): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x5) r4 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r4, 0x0, 0x4800) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 11.319581615s ago: executing program 0 (id=4988): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000100)={0x5, r1, 0x10, {0x141f, 0x8}, 0x24}, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) openat$null(0xffffffffffffff9c, &(0x7f00000007c0), 0x262001, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008400)="44ea07862a07eefa4de37092cf4356f54454db90301c4d373d57166f794f169d63344840a37048638ffd5e30beade3fd768b18191001eb890277fad8bdfe3742686deeb34395963bcf7a870addd76c80aba9f771ebdf410c7d7542fc2b6ae9a458d79457755d94ba8a3248b01a2293d8a70e60815b90297002652966a6b836065bcae0b44f4b26be93dec3cd4cdcbbc84c5b916a1b0d8313340675d67fb0c785d0307f95e426546c9a4d0161a8f52b02b95f4da53ced705a658722091864d74ac0a3a5f3853a0ad71ddb29835680ca9ff30531f8df0f0ac66f7f1433c33d75fa8f0f022b175df093648a81af5ed701b2e7a14199c83b539e763dbe7228f2e184a02becd41bae305d3f34c72e8db93dd214ec203eee6e6dab26b41848c95fe1ece8ca157a90bb7a990dac5f3c64cf49c5c5aa8414b9153f82eca9df88d90a8d6c0e72eacd52f82939d46d41e0f5ccf708c03fccecea467f33f5a49888514787e42c0a12255bca89e82344ab01ac3b6c6158e3c1b34ad953eaf55f3a2c487efd9423a542e41dbd0058aa021cb6fdc5df88f807033edd31abaf5ff7e6a9578d2be6a2d925d98108fda2a7e56a0bbcdce0689fa9e2111b0be8f3e2807f7f3728489917a031f2187ad98a744f19851687adf59a4b4c328ad5c4f2eaa0d112041369319f6d3f928c22d05f9fd68b5c268da5e2f433d651bc602a65ee83752c0c92f7e29002faf9475fbb57788d725f6f8fd495a58d88d55ab8467a85d1f41db5964a19bdd45377c7c8c792de5e76e87da9296ff90e7fa9e57f09358d998c8779bb2348d651808e969e960763c5231c65a06ee16979f4d990dbe7e10b3a2392dfd6483bf2c7c5f6f3d941cc17663668cca83dcc38089b4342a801c74039b32550c2d9cf95a0236523933ce3e7538ff9da2b7b741f3cbf53e6084702d0a5dadab4350848f6e7ba46d4736c7a2ae702c480c30dd78f994a10b9c3157a17e9e29576a68139403300586eb0c673252a319aa1cb01efa777228d8242ebdbef9db5c03e4c8e09bf7a009b7eb19357d1ad6d1defc0dbb58c31d85b9f1035056615ad0b0ded12751273c8bb7810ccc5b2efe51d223894b141dda837e6b7ba21de9a978ac447d995394b800e1065906455af544b9d7f353d1eefcd3387d18e3611f3913926f3a4b87efb3a9707d6136dc00e49ea5e7a6d0bea17eb49cae93c0c4422374b0f46380e0d554e1087c1392716d368b04b1da85d271206b465608468802fae00c7ad9425974d822cffbc420e739f7617f59a879f791ab5dd7a6215298cc7dc6904679889e60a09114b0f421b6f1286d0a6ab3dc887c2d3a48d53a7611ec270530b07a83ae1a2bfa6da42ab38bec3eb8ed1e207d91c02e74a31c29abbd25f5779189f5f2494ea5c3f4b829b96de0c54b3851dd58610c2b9ddcc2960f34fb857c5ab1aa67e8eb10a59639db2ddebd0206ae7ee56b21ef484e3c66003af46326f1c456ad2ab5273d0c0b2bf412f71f820ae12723c74e1857e0ae3d5587a0427c1595e06b1d5ab5e815a5558302e0d9c50b8c6cbd599eb554df6f7323b01f1353b557c565dfe0de51032a88541b49ab682a7dbe4dccb9b952ba9c9ce3bbff80af01e47953666327b8acd7d2cf363c6f7172caaf01d8e3417f768ab08f2cfa7ff26efd219e25ef0f9a84c7b116978eeafe3410972490203dbe49aec33f14d5592a466a6efe630904db9c77ece20bec7552b3dfb48d4e0427ce5024fdc0aec7271e93c51aab19d7a40670add6ea5820f625831a593137f60543e424892856b3bb9e608e88e65cc6dca098d5139a38ada517cd788b9f13618d9c2c31d7918cac6cd669710692797e61f4df3938dd429d977cc11e7465a7a23740052039d9b31cd26b95efba17bfcefe121fcbb762d29287145b11a3abb3e0683b9216a8b5d9744baa75da5d840e70cb310c507c4f7eef1d6535d8e11079edcb51df7ea63a7204e314147eeb57916171ca33c0f5932916e4d568d9e7dd3555500ae119f0c63045658303e1f4ea99c896eaeff3ebf76b2def0ea856a3f24cd76dc437236b71dad9a26fbf3882e81565851eb6c5b265a0721be43f0844f4d0e4296011e280236a0ed7656f2eb906e6b2ec4a8e5bf91eb7e8be889ded6d8492bb72f1de26cf3973249ebcb5c993d1dfa896a658a528aadf57dc28a8db32656ed8e416f96e1f89ac24d4ba587df31f3d2d8d7809d06c8b2d68eb15b377918424499cd6a7fb62e49a78831f0e4b1476bef657fb34bd59e34793d21da3f7bd0278bbea8beed261c697ce17f36f1cbc1b94aef11dd1dbf1c68496765258f4cfc8b5fdc9197d7260b733d2061f399c861bc5912ac76cfb62b9218196fe054b92a295a9b9526871167d436b830a7b4944f527fb4d75a036acf3a71a1a710f609f4e794f1d764a5317ac067e8194666dbc73e32b2870eecf8776bb7641dcdd6d764f91dec83fbb53a97e6531211dd8b86bbb57f8acd637f4b1b66fd9705a200e3081ea382262d54edb161927eb1d85cf7b9373a24607c99f3d66b85e22d2cd5cfe24020d56e0552bd43d803882128317d9a56e63a4808ed6401b662187888a0d0b311364fbddad07911b5244877eeace22ab5bd8501d748ed5cb05809e1639678c4c6cc43a3c2fcdd5b0970332429c3cde09d9556c8360f26caa744ce5e57bfaabcf7d124b2d4fa97d7e72f16cdfc35f87493717e2a852b64fa344db5ec72dbdf22dbdfcd12ff796d515d5f3fd3cddbf53426183bbd92e2fd3e91fca8fee1c1ef4f8d59036df9c48fc7677f2c4905b6cf4adcf448029c6c6a2968b13e3b77d578e2661ae7d07ef84fa098bae9a564bc8c507a103990c00a0e6d2854a1689f7b095a100b7f38df028baf20bd56c843c24f8ca4a81130256b13636440836837429c1c86ae1668d3b250108406acdd21b40450399872c1da6178184bf9c2cc11ad80caa9997d3c6631f09ba2a4d96e6b74313f1e40fbf8a29962648f400dd256c4852c556deca2e3443b858efa43d53efcd496bf5037a82e14868b508632bdb2dde924ce2cd6c65f1708c18cf49073e536f09e8fcfa9a44fdbc349ae75e17205754d3bb82d3ee8a93c59aea1bd7ea6d124224b11405f815ed518a1cb9a80191249ac1cc0e5c1f9aab8fe67bb737cdfefac82a89a7d6ae08bb9e1f710cee451d851b35ba9b886dfd9c277dd67891331d43f36353c78c65e9f3524e1b9b229c9f91de7b5ab16a66017d171e2a4e185481d33cb5bd9c5e3d93c49d2c620c16467bf4db73621957f76d656e6d4cb4d59cacf1209da4e39352554cc2abcc8e82379b4f819fd6d261c6d7615f85f6c5d0b9f57976836493367e1bbb14c57983aa97c6e4e7c4fe2a166284c904ac4f70ef2e52e4e7dbd677ace683cd61aa60b702770aa0ddf14b694bf3cfaeb585f8fd8a85bee2f78400a0874dfb4c319be24a46d1914b6e902d5de8d8375c9ec786ef6eccf1ee7a003f83d2e163097980a06ab9fe23c4ae8e91755e4217d3c302111febfa9dce02a49b217aef709d183a5ab8ad1d39e9a697a79be303fdb2290c827279ce187d1c647cc28e20c0b3ebcab2b1c75850db46211150a8bc5d80d868141f885f7a5ef520ecee6d33842141003df4ce066090c8359b5dc32dd9ecb1039454d0b691d8f97932b69981be240804e860a88d1a047f46ff43609b41ea36dc276b28e87364049940ea7b6dc78848221b30dc6aa1b60f17942c96c46e347606d14ef02ed3ebddb20f7f4d28b9460f4af047b772927ca6a046b7de2a21b8ce79eadb74e4825af5e19ac2955999d7304a35851a4b9086ff922da8845da10a55fbb62fd13d98d45f60842d0d6301cd72e7cb97bc84393a414f671e5e0115a6c1c26054a80ddde10e0a83a4ffd123504c881a844bb7187c604f87588dd0d0f11930f9a3cfeb7098f38f84923637f1a9f6b3e3d0899a156d50d7e740b118c4865ec5e69aac247a930007452748bea9af0af511cc1129740510b13f48fe07ef1417ccc765b2cd0138cb51dd71fbdbe967fc321082a9ee4bbd1ea404cb24971de5a1ee7d7993b5d11d67d30e8ba94a9e943852675a07b88a51df6f4abb507cdaee96726023855e4dee6bccb3e26a2a88fb60d812e7856c13af5f4fcb6776ba8e27a35bffc5e46473b31a4b83ea1a3376f4549af87d03102413faccc3fc897ccae95d2700163f1fc5170a643554169018c5cfcf8f50c7981270995d8aaa9f923c0679b258aab60f79111627b71404e1ce8751228972cbb2bebbe25973cf98bf8fe8e63575950a0aaa1ff060f01e96791d128d0b7b40855126ef3910ed7d7a6d9490618da352ad7b889f7d905bca2214224e170f30a088cff91921917c937950926cb11c04fdc6bee776b9abd2aa286ea5074e72756482fcb6a7d072edc075f99e02747ea49a40b26b58118b6692fbe55b09b054a044d1f481173e8923a74806cb770c4c61ffa982077f82bc4db7fee4ae2beed4673e39f5ff0614072a771034174a0f052ce39e27450d18920664e924ee963c9bbc9852fe68f30a199ee4856c1dadc08c061165867438bd3bb73f5a50f5131b7867dc80e0c5d43eae80cc2874d48edc910e7f8f9b73e032a8ccd7c348e84b4179fa101d488c2fc16cdf953e269a9cf13c0dfe575e0da49d7d2c09293296c0232bca9fe0aa8199b21e19746c4783630e432b5c7e1e25864fcd4deae07c2b07782d155fe6e6b5d9eed4beb9db47bae4007753d8be56b10723b5467c64acb0eee4cb9050b4ef2b57b630f4608af96fbe484816454ff385aa3765051408779384c6585f2e24662fcc3008dc17abb07ba9cf96ff4c795c97811e73b06c65e1b5c66c2e1873191d972830b1f53bbfedf8b5e8a64a29fb3b3eca67f1791652f9ac037c2f87c6d1d9d453b12d5d2b0c070a8084aa15505e240bd0c61895383f23f0460027d60dd9efd8539807f717bc353f9b858b9bfd2acecf2190e280faf6a1603566ff8893dba33ad3300e10438241709ba7413fde84810b966b4556f9c8a51aef27f9b9010e7b6208715169a585e42bf3f7333209afb5b19c0de7722004850d53329d93e2e4909eced3da67dd7d2c82a4c9d0d7cb6f5ff7dbf195e8b39ba9cf0c1699ea1f8b6d1293509774ef3bf48597146a60aa5b6eff2bc8a64f9ae9a81becb9c398ab9676d2cecb14d28f819d08050269bb0ca9bcf59d5c9bd2fe2bcdfe82a8f037781c6275c9229b0729cd085e66e2712bdf22009440c4136c2daa54e547386e1acd16a1d30f3d55c1ef0fe10c108210b9d8894d31e5ef17b049106700bae524eef744ef4b3a69e9cfed4efa9b0c9262177f9fe16f5b1fe5bfe5fc6a611e6ffcb9c5f329d4e328cb69912f0dfb7f4a83d326cb20b053653663096870e7ad2753e992dced7405a00a39dc55e652eb6b2e1b1e9782b42f443890c4067b07376c6f0fb2ea6589e04a8eb39a94d913d9f4410d238e6880c167a0a23b266577c41ec3e0f513eb7fc948c12b26ea2646c0481488417d9911a0107ca0ae11c2c4b8c2eefa5144ecf8b149d22abbd26d1b2a3fe51016b9bbfd229c090fc2fbbca4803217c991e36f86d4720b45ae45e6b20f09fcd8e5decd79997e79177bd67de7433282c1d0be5d585a71c873e7171a133d9f5ea35ac0ac5c1a643279ca66a365d278d14eee3ea90961eebb3f6c098c00d051d4716853ec7069be2a4625cef4c0f72abae5309d2709901d05217fc3e52049c4aa16b50121e43ce491d1bc9adb01679ec25ab5009f746170c2517f0072f16c574cb447c6d8ce4a2e45426900463c5303413bf4fe7fd64c273b404cf936068cb3085c3a81b9872ad2cb79aa4c051e7ad97cd4e8c6b94bb0df87e4347ca6f11f155ea265762f81eb0e9fbaf3dc05157eb9f12596ccdf9193018a2226824db6bbebf4e89a070688f698bbf23f30dfb04db7c3d804a7587ad0fd03e68cff7e516e5109e328e1eb3b887a6aced15804f2c898f41c5452e160ca30e35843705c150bad932d2d3fbd791100b1535d9f3306dcf127fa49c1a36b172f46b1fb676ea8783c23edf89b2446560dc1b95b39f80eb9d0994c8dcac9a5a304c554133e1d6ba368468a17312167cda37932cbd4b93c58b7ef772d56d4311182a680e19da6fb938848aad40242856379310b61d6113de6814644092712133823ee2281639b52cec52ab0dbd65ddae631e7113ca75a5476797cde5f5456acbfe63c6ca8b83774690eaca3a019771ca0e742815ca5645418730ee17f52fa2531e5487c10da3ee080acd50fbd19710ed5cb924e28a18985132afbb7d2ff90f6c3855c56970854b9a48ec4f7566d2829e271af3f0ce26742602241fef70461a484499591a9079ed53aed113589fd74918146e1917a063514d7eaa7f4720a386eb2f32b6d35baaa5d36c2013eb405cec607202f19bda80bfeda8005c5d1582208b861437fff41ec0708a6a98f2b4b4463141c1c312a8115509e363a274864898be996176049d5f7e6cba76b3a37c9b2ee9553fc70f79503797464d736d97d0bb4741ea8ad14fde6f18fbb02ae97e5a77bc1527a13f18624927d79aa5b4df2dffde7fb5356e521c7a419209031df8138838151c7e90783c9af133b6961b44f8de89d6348b191cfa6c0ab652746b8582134537727b18c670691f3c1e8ca0e3cefcd26111bef476eb816482b7726399c86cbc98f0f06929c26cf831163bdbe1fa8d8f96a65d3bbb3d37657cec4b77516864cb32404996dae1d0d9f3c12b7f2698f07930b791813b7ccf0f0dcd3320b78833f077ee55aae156af804fa9a15e60c709fb30b06ac092bf97a4fe4732ea7bc93aa73232024c80434b4900cc30de20cbc1ea407746fb186a610fe31635766f5edaa8c9ae974ff8cecc4e7e391a50bdb34ca1dec1567e866497bb59852cfc1fdb361b235c803d70cfc90c229078079619b4a8086a68d420ee1d7fac403b18c7f6aad91612e2f2b9e5e206bf897bd98a3b24a0637e2b986ae7f5d376bd63d63f6c4f151ce7eaa97a30d9d51f1a9207dca6b596831a9b92517b9d5571e72b4a06c07d5ff0d325896a1b32e9fb4f9d67a903946b205fba7beda108fde3fc503c7352c59c03bebc2891007fbe966a0441a7f4bc8320b901563ac8eadba643bdfc1636864d33549a1b9ad3ce01bec94b631ac6f46c453c57c62f2cf0f76d9f1e0731e266311624a138e607e699c91e37a33096117f418b4c92c66d96fa1b1324cfb569e3d558598ee65e69b8e0b9625d551af54a09db8082f2fa9da1386f92245aadaa13bfa3cf5c39fe455180bbb5e2427e4067bd2f5a5c755c31405477ba832dbbdd4af66acc7c11e576f700e24fb4c26160b4443b8c17805238519c7c732df774b92579e02a8da5e9a17e3c20e92afba7fab49000a7b83987ea48d5854a0411615462cabd245ab3f49ba375ef179c0a78059ffc14264177a6e45dc5f2fe6c957a313ba9889fef33b788933bb37a17943551db9cd08fd8d823fd0b35110ad589c3bb3af4f69bd1c7c7a3e726f933e4a0cb1209e75ff14910061c3750b9312de42c86838d5c35a681899c25220ea87aff02bf72fdd8745f5d751e6d62861496890c956143c08a222774974789bb46924b68a6e3138ce9dbca622e78c5aeed8215de4ee5c1f8312b6349a91ef1e210f18522b7a644700e90eff995e950c8eda05d0bb8e799ef32a7ddb8a87b4120a798a3f87cc78b6db0c7947b4786db1618c523203c097ef3d3dc0f4e1e87d0d597c4eaaac05a033a3fa91309c05cd8c14de649d7dd16d8ed81e5290950f66b66fd519a2a16fc6b3526f97aa1121b4fb52b30640122dfb50ff619fb5c88eb1c4e6ed7f6d09fd29e27b3375a1aad5b09f8175157018467f883ba385208fcd32a50a311b22f7951bd0e912d234364f8590e247dea604872f9bb847bb32b3906339f5698d6e7c0f2a3ed17b194239299091f5ee4ed51c75b76bc949cf05df5dd03cd8a553e7ec81881fdc1e15cef5e72eecd7843a981eff417682604769e302f378ff9519cdbd3ba2bfe50f85a903aa08b900118226889e9bc68124777f6e02fb26fff91d1f31d3828243cc46d4b4fa2965445774e0ddc521fe5fc9626fe3428403e746de0196a45d6acef57f662faf27294be80fed39778a7585b41178ea38f64893f9a46334af6425a4aa46e25e92b0d77750c6737b237dff19913fd9e69ed92c4b6671b4226776b34ae2468907c654bb0f619b2c9b55920fb99e97bf32212f852b615689f3cf4c03d51d1587455b5720692430fe2684522bfe6dae871aa2ff5f00045861ffcfc219888fef8320bec1307236a7a42dd4a691cb6cd4d8436f31a3f2d642b05946dbfee692aee0da31419f9b8bc0e1dcf89a8ffd7856b21b1180ebc8ad75308b1370b93d680e968bcde7d235f601760a5d181f7b55daf330a001ae1da86c130c76fbd956442b6c705889d665560f8b34663390592d85ddde790e0f4f1f0df09c1c6f95477f9d72dc0894b2efe2c3d162ad80f80cae03a06548014293a02f00d6386723d42ab09052f019a1d71d88a78db27afead58bc516be8d23893f007a17ff47b32777752a15648d0ececd345aee1f36c58abb7efaff5567100c0bfa54f172c862e15872abc9d96cead6688f02ea8466fe1134bd3756c6f0df8903fe7935dbe3e635da368f13a10e3018cfb5557d38f859a983a54d660a02bdb3dac2922e7a37651677bfc664d58df59ea625e8e63ee776bcc2937b921f5544924b75cba04bf3cd0df831938f9e9c79572e8492d884646244990920400192c63e15024e2e1239f41390bf7c0e18f852e23d514256ccb8ccb2726710401c4306657fd75eba94a353987780a6d6219012cfe80858060e37652a84ae89d07f5d651fe82a2a8d0e8568492156713b1f76e89e12f76a0254da7d526df51a089600f5b7559afdc63d4872fe8d6ce00a8d0c9b00db5ee676ae2545e74fb7b39f8345a67913b234cfb4f6e3b4e2b1e1f4f1c7fcce8c09cdeb6a1a21bd2370004e583ef62971aec24ce0c6c049b6a2e22081d36854956a362b6cbad48049d7d5f90134d3e77febf87bf4a32c07cdeb36c9cc56b2b3cc8c8b47879a32ff00f3b2e977cee0acb30fc424dbfe24c88d1a08d047925cd7d65a5834e56db2b3e7e0a23dbf948c799db5a48fd4a5fdea43913b2b2c149ae9a98f452b797b55abe1dd44b30232387f466856d6c38ca735dd6175b455363dbf228ef52e443da22a1ee3a158ee304d9ca63c110a3d19ca3bab6d1745affd81c480ff8bcf5f8f7c1ea6d08a7b3c3958c324d42732711170e19523bd209134674b184d4d442a774e04d6eb4ac89a6d018cf0bb68a73da87abce127e57428cf73a5a551c85ea8c376ae951cb8357506f037d17d163172dc5764682c753050f35c6802fb269d7490b196d57bb8a1ada55da7550f82357320e14cf573ed39860f02a11bdad917b2ba2de885c7ea8b30dd62bdad207dfe10e97c8b71abbc8c5661a4483bb6f9488ada0f5885c471cfc1271b60d54f903317cca28ce977f4444cefac5c2ff233dc872d4e809091f8452de9c774ab3bbebf62de92cd6aa7421a41f7d1dea42e4f94bd3a4869c958f3940a99c88835ed2f4021114b9a5bb17240f468887b213814956f9f5e6344cbae19d8753b97c7ce2e9d0954a30dde23dea2748e1c9514672bf4ea3ec3e348a563d9649899e7227708e2e77d0fc5847dc16b59ac3dea9449c176dea2d2ff6b6af764d28dee5ccfd0dfd6e3100d97040657d7ac5da4032e3b7f6b0cef2ec55a83350c3045abb10200c264e6e68e3e03b68546ae48a538063b86315bb8073103a812717f2d8816534fa98d0e956e0f9a67bcdc522cacefc77b0be71832a69ffb72fa15ca4d8b15f7fe03da0f4b24c5fb68e5f3a2297bb0cb0b7bfdeeec4deb64bf71f57820d62c47276e2780b4341b6bc65ac49be09c94013783455a95de92c11d91b9e921a484ed69532b92e202d684d2293a2666709ee38d2114add4c5337bfeef31d481e12530c5c7e83a6c8aa2f580f6da2d735ee5260cf9a7185eff84eb22d6e0d5ac0e63fe6a3def819274a144be5ab90fa157bb7517a54c208aa82da926d5b09ba649e326a654fe8fa9dd7e6d83b0a66253526e5b5aa03e665f2eb4678e8293110420c9d7556df07c7dd1c3e817a4c7409890c4ff5044ecdb34eb652a4d7e20b4b0d596f46ee3c3dad675e958e91c3b40f2d22e671bae51518443042c529c31e343647d6ddeac7ec370970fcc71a24a0826b58d111e9b776ac0e2fa40b3099298ffd0d1c04d41ee1dd039425f52f9f8057ac1f206203f20e1ae9cbae356518ba2fe9e49b47e36942ed7204f3d7da9e71b8d69df3ae7b2de05a13a879af6a1ea6241c645ed73c139e15060aeab6f423c2180dd101863a24f1688ec1a33edc624c3f5e80a20e4cc5c86ab2c692c2d3d17d8a68bb3924efffb29c9fc3df937526452d82a8ca9a558c75d6b2504df1b66c91823216a1c3b3bc39dee0d22491b9c891b9eea193c8af8a992096d0cd74630f7222e9a3530034a582f40601a694cf1085fda7fb33b07332c6aebfa70e2ebb8d7ccf19a69dfb5e4c166add5e153504eeec92f4ea2fe47f291625e1c470b832a488f884692b8ec49b96df235f193027ed38fb4d8b88ed382825df8ffe5b0c6fab8db3e38d60d467f9da725023deb72c378258e911442afae4db650be3621a033a3b84eee65c4c0664ec6d5771cc138937434a6a361de3dc1c12a2a6735f080e94314ddf291516971af252e3cc56e1c65ba5cf8ac2538878b22034ba458e08db26205608ae941a42a27f2643ded87bde626387c2b791ce57991dd2ba08010237279cac2760e19cab9059b229ea002ce4d3b4afa495230e424752f289003a240f5cafc7a83112636321107918d582fad2606a4319199a06ef2cbeaa3e1a4d8c30501aab796f5cbe15453b61218a396b79c547d15d5c11033b3746b432b426404f7b0421b9daafd9e8558f1901283d58e173c4db0511ee826ddc6363eb51e0837c9be6b2078d808d2c05db7495d29322ee6af68b0d52c45f00a59731c0e5b2608ae046af8bcf830f001ffd2f955ea89bed216e71ccb5b44713e2abf5ee5438d63829c9aea34b57f7ab52b820c24a7e9fa138243e4afb2df93588e805e719c1767146a351debb34678a86dd19f0587af31195460a3aa3e68773859fe13b47b6b31a501b4a25c6660cfc47f3318b33b77b10ed4ba91086482db039a56fbd1490f440a6fbb280b62b6d2333afe1c42c3f16865b9c0e484a4f6f393b8bc34fbba856cc5ffad2fe423e79f691b95e7e0dbdb2b2757d9d4443f9a23a8b1bfdb16f8bffd81b4789f80f1fc4bf751627965755d008d134e2c35da34f54718615e9deaca0685396ae7e58121327e0c0696591f6af93f2999ebd3b4e03cfe2a48b2b94015eb06b2a9031ab5e129b2700648fd62ab75f77734b89abb402282635eee41606eb306619e2dae84488e2aac1df54f78460b36115072a2c28801fc122482f1d46de4b2eec07bbbbcf85f30ffb3829c5d0fdbdf3af8c6322d62f4c55ebe8fd52728e2d5d1a24f096fffcec6ff2e752f7500", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000780)={{0x77359400}}, 0x0) 10.520154149s ago: executing program 4 (id=4989): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@dstopts_2292={{0x90, 0x29, 0x4, {0x4, 0xe, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x39, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @pad1, @ra={0x5, 0x2, 0xbf4}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x78, 0x29, 0x36, {0x5e, 0xb, '\x00', [@pad1, @pad1, @padn, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x2, 0x966, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}, @generic={0x1, 0x3, "2bdb86"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x158}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.366565265s ago: executing program 1 (id=4990): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(0xffffffffffffffff, 0x111, 0x8, 0x0, &(0x7f00000001c0)=0x2b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) syz_emit_vhci(0x0, 0x15) 10.184942268s ago: executing program 3 (id=4991): ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) r0 = socket(0x2a, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 10.048156632s ago: executing program 2 (id=4992): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8500}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6, 0x0, 0xfffffe0000000005, 0xa713, 0x401}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket(0x1e, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x80) readv(r5, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/246, 0xf6}, {&(0x7f0000000480)=""/190, 0xbe}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x2000, 0x3, 0x4, 0x0, 0xd, {}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "9e2bba01"}, 0x7fffffff, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) 9.74866863s ago: executing program 4 (id=4993): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x7, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x145cc2, 0x0) socket$kcm(0xa, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=',\x00'/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x33) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000100)={0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800ddff07001b00009ab8727f000d000100000005fbaf3662de04c8902df365b71667ab948e657f1601ba97f2053927c9b6913a28e98f2c52"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 8.308162082s ago: executing program 2 (id=4994): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x446982, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/90, 0x5a}], 0x1}, 0x40010022) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = open(0x0, 0x3c3140, 0xa2) r4 = syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="060000000400000000100000200b000000000000", @ANYRESHEX=r3, @ANYRES8=r4], 0x48) 7.214724615s ago: executing program 0 (id=4995): clock_gettime(0x73d120d1a3af8f7f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x0, 0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x50, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = fcntl$getown(r0, 0x9) ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x2, 0x2002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x4, 0x0, 0x0, 0x1, 0xd3, &(0x7f0000001380)=""/211, 0x100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x10, 0x8c}, 0x94) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80800}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001600)={@cgroup, 0x24, 0x0, 0x2, 0x0, 0x55, 0x0, &(0x7f0000000980), 0x0, 0x0}, 0x40) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001f000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000005900008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) syz_usb_connect(0x5, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x16, 0x24, 0xc1, 0x8, 0x45e, 0x775, 0xdd6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x8, 0xe0, 0x42, [{{0x9, 0x4, 0x8e, 0x0, 0x0, 0xff, 0xf2, 0x1e, 0x6}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0}) 6.766386368s ago: executing program 1 (id=4996): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000402, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x28, 0x0, 0x0, 0xb49, 0x7, 0x8, 0x0, 0x3}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0xa801, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, &(0x7f00000003c0)={0x10, 0x1}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, 0x0) ioprio_get$uid(0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r6, &(0x7f0000001600)=""/4103, 0x1007, 0x97) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x18, r8, 0xef5ebf77ce25880d, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0xb, 0x4, 0x5, 0x2, 0x0, 0x70bd27, 0x25dfdc02}, 0x10}}, 0x24000840) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) 6.218187388s ago: executing program 3 (id=4997): keyctl$update(0x2, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = memfd_create(&(0x7f0000000700)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\b\x003\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x9c\xce\xf5|q+\t\x11G\x1c\xe7\x9e\x88\xfb\x96\xbe\v:0', 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x7af7, 0x80, 0x1, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r0], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x6000, @fd_index, 0x5, 0x0, 0x0, 0x2a}) io_uring_enter(r1, 0x6d13, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$TCXONC(r4, 0x540a, 0x2) close(r4) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000900)) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0xfffffff0, 0x7fffffff, 0x2001, 0x8, 0x8, 0x7, 0x1, 0x1}}) 5.857107714s ago: executing program 4 (id=4998): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000440)=""/162, 0xa2}, {&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000500)=""/156, 0x9c}], 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff", 0x52}], 0x1) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r8, 0xd01c4813, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x1, 'Y'}, 0x0}) socket(0x840000000002, 0x3, 0xff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) 5.691458384s ago: executing program 3 (id=4999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 4.948145143s ago: executing program 3 (id=5000): syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000be02e708cf100355678f0102030109022d00010806007c0904bc0003e404ac0009050403100006070309050503"], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x52, &(0x7f0000000800)={@link_local, @random="ca007d050086", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff38f5", 0x1c, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, @local, {[@dstopts={0x73}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) writev(r1, &(0x7f00000025c0)=[{&(0x7f00000020c0)="c56e53e0", 0x4}], 0x1) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000880)={r4, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, 0x1}}, 0x0, 0xeffc}, &(0x7f0000000300)=0x90) syz_usb_connect$uac1(0x1, 0xf1, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdf, 0x3, 0x1, 0x9, 0x80, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x8}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x1ff, 0x3, 0x1, 0x1, 0x10, 0x9}, @selector_unit={0x8, 0x24, 0x5, 0x2, 0x5, "c10bf3"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x3, 0x7, 0x6, 0x74, 0x8}, @extension_unit={0xd, 0x24, 0x8, 0x2, 0x2, 0x5, "69d4ce29dec2"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x2, 0x6, 0xe8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6, 0x2, 0x0, 0x4, "0bed20a1"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4a, 0x3, 0x5, 0x3, "ff03"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x7, 0x4c, {0x7, 0x25, 0x1, 0x81, 0x47, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x81}, @as_header={0x7, 0x24, 0x1, 0xe0, 0x5, 0x1001}, @format_type_i_continuous={0xffffffffffffff99, 0x24, 0x2, 0x1, 0x1, 0x1, 0x9, 0x7, '&i|', "636e87"}, @as_header={0x7, 0x24, 0x1, 0x3e, 0x3, 0x1002}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x4, 0x5, 0x8, "9993"}, @as_header={0x7, 0x24, 0x1, 0xb, 0x26, 0x1006}]}, {{0x9, 0x5, 0x82, 0x9, 0x36f, 0x94, 0x5, 0x7, {0x7, 0x25, 0x1, 0x82, 0xfe, 0xfffc}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x33, 0xca, 0x81, 0x80, 0xdb}, 0x44, &(0x7f0000000180)={0x5, 0xf, 0x44, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x91, 0x6, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "94fe42b9401a4e6595e86a03a6bed4bd"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x50, 0x80, 0x3, 0xb46, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x8, 0xc1, 0xf, 0x8}, @wireless={0xb, 0x10, 0x1, 0x0, 0x1a, 0x1, 0x99, 0x0, 0xff}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1404}}, {0x54, &(0x7f0000000240)=@string={0x54, 0x3, "a4942a514e351e5da359e540e1204bda05783e374bcea803f508cb5a836c6c86550e13fe4e9136470cef388c834bdad8b66c4633d469a59bcfa6ab4dddc36e358ff1c42268a127b36c97563a272fa3745735"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x449}}]}) 4.940100515s ago: executing program 2 (id=5001): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x10f0, r2}, 0x38) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x381, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 3.772100973s ago: executing program 1 (id=5002): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) r3 = syz_io_uring_setup(0x4ba, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0xfffffffd, 0x283}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x9, 0x22, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x63, 0x0, 0x0) 2.244906573s ago: executing program 0 (id=5003): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2c020400) timerfd_gettime(0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x5110c5f71c31c5a4, 0x0, 0x0) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f00000002c0)=0x5, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) 1.226802564s ago: executing program 4 (id=5004): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8500}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6, 0x0, 0xfffffe0000000005, 0xa713, 0x401}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket(0x1e, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x80) readv(r5, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/246, 0xf6}, {&(0x7f0000000480)=""/190, 0xbe}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x2000, 0x3, 0x4, 0x0, 0xd, {}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "9e2bba01"}, 0x7fffffff, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) 1.226096405s ago: executing program 3 (id=5005): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0}) 637.312371ms ago: executing program 1 (id=5006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x9, 0x1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 313.57284ms ago: executing program 0 (id=5007): clock_gettime(0x73d120d1a3af8f7f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x0, 0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x50, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = fcntl$getown(r0, 0x9) ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x2, 0x2002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x4, 0x0, 0x0, 0x1, 0xd3, &(0x7f0000001380)=""/211, 0x100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x10, 0x8c}, 0x94) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80800}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001600)={@cgroup, 0x24, 0x0, 0x2, 0x0, 0x55, 0x0, &(0x7f0000000980), 0x0, 0x0}, 0x40) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001f000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000005900008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) syz_usb_connect(0x5, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x16, 0x24, 0xc1, 0x8, 0x45e, 0x775, 0xdd6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x8, 0xe0, 0x42, [{{0x9, 0x4, 0x8e, 0x0, 0x0, 0xff, 0xf2, 0x1e, 0x6}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0}) 2.271148ms ago: executing program 2 (id=5008): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x7, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x145cc2, 0x0) socket$kcm(0xa, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=',\x00'/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x33) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000100)={0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800ddff07001b00009ab8727f000d000100000005fbaf3662de04c8902df365b71667ab948e657f1601ba97f2053927c9b6913a28e98f2c52"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 0s ago: executing program 1 (id=5009): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000340)=[@code={0xa, 0x39, {"f36e400f0d3e48b8fcff0000000000000f23c80f21f8350800d0000f23f8420f69d8470f011f2e66460fc7b497464c69020f01f866b813010f00d0430f01c466baa10066ed"}}], 0x56}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x13, 0x7, 0x106c, 0x8, 0x8000000000000, 0x8000000400007f, 0x0, 0x6, 0x0, 0x204, 0x0, 0x8001], 0xeeee0000, 0x2c0290}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) kernel console output (not intermixed with test programs): 0 descriptor too short (expected 301, got 45) [ 2224.277789][ T5890] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2224.291727][ T5890] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2224.303946][ T5890] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2224.315738][ T5890] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2224.340070][ T5890] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2224.350176][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2224.373194][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2224.532150][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 2224.540945][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2224.553172][ T9] usb 2-1: config 7 has an invalid interface number: 142 but max is 0 [ 2224.562277][ T9] usb 2-1: config 7 has no interface number 0 [ 2224.572217][T12708] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2224.583194][ T5890] usb 1-1: usb_control_msg returned -32 [ 2224.588960][ T5890] usbtmc 1-1:16.0: can't read capabilities [ 2224.600005][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2224.609928][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2224.618600][ T9] usb 2-1: Product: syz [ 2224.624248][ T9] usb 2-1: Manufacturer: syz [ 2224.634111][ T9] usb 2-1: SerialNumber: syz [ 2224.737602][T17754] usb 5-1: USB disconnect, device number 32 [ 2224.742414][T12708] usb 3-1: Using ep0 maxpacket: 8 [ 2224.754458][T12708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2224.766533][T12708] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2224.780951][T12708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2224.811560][T12708] usb 3-1: config 0 descriptor?? [ 2224.830165][T20473] pyra 0003:1E7D:2CF6.00C9: couldn't init struct pyra_device [ 2224.852511][T20473] pyra 0003:1E7D:2CF6.00C9: couldn't install mouse [ 2224.880115][T20473] pyra 0003:1E7D:2CF6.00C9: probe with driver pyra failed with error -71 [ 2224.892084][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2224.899157][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2224.911564][T20473] usb 4-1: USB disconnect, device number 63 [ 2224.952233][T27368] usbtmc 1-1:16.0: stb usb_control_msg returned -32 [ 2225.036899][T12708] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 2225.150765][T27371] fido_id[27371]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2225.233676][ T9248] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2225.257152][T27367] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 2225.406544][ T9248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2225.427968][ T9248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2225.445566][ T9248] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2225.456026][ T9248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2225.478983][ T9248] usb 5-1: config 0 descriptor?? [ 2225.906276][ T9248] cp2112 0003:10C4:EA90.00CA: unknown main item tag 0x0 [ 2225.916185][ T9248] cp2112 0003:10C4:EA90.00CA: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 2225.932026][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2225.939228][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2226.103611][ T9248] cp2112 0003:10C4:EA90.00CA: Part Number: 0x82 Device Version: 0xFE [ 2226.452880][ T9] usb 2-1: USB disconnect, device number 42 [ 2226.709440][ T9248] cp2112 0003:10C4:EA90.00CA: error reading lock byte: -71 [ 2226.738034][ T9248] usb 5-1: USB disconnect, device number 33 [ 2226.843402][T20473] usb 3-1: USB disconnect, device number 52 [ 2226.905897][T21875] usb 1-1: USB disconnect, device number 40 [ 2226.972031][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2226.979081][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2227.062590][T12708] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2227.142803][T20251] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2227.256786][T12708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2227.323588][T20251] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2227.341197][T12708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2227.373993][T20251] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2227.390788][T12708] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2227.424195][T20251] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2227.446511][T12708] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2227.472801][T20251] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2227.482026][T12708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2227.507017][T20251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2227.533859][T12708] usb 4-1: config 0 descriptor?? [ 2227.539965][T20251] usb 2-1: config 0 descriptor?? [ 2227.555682][T27388] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2227.653569][T27390] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2227.952023][T20473] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2228.012081][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2228.019213][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2228.125790][T20473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2228.143984][T20251] plantronics 0003:047F:FFFF.00CB: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2228.235229][T20473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2228.289639][T20473] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2228.337777][T20473] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2228.355673][T20473] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2228.377129][T20473] usb 1-1: config 0 descriptor?? [ 2228.383901][T27401] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2228.399667][T12708] plantronics 0003:047F:FFFF.00CC: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2228.860667][T20473] plantronics 0003:047F:FFFF.00CD: hiddev2,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2229.052046][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2229.059319][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2229.462001][T20473] usb 2-1: reset high-speed USB device number 43 using dummy_hcd [ 2229.480068][T27420] binder: 27419:27420 ioctl c0306201 2000000003c0 returned -14 [ 2230.092040][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2230.099267][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2230.172046][T17754] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2230.334317][T17754] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 2230.345790][T17754] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2230.355246][T17754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2230.408506][T17754] usb 5-1: Product: syz [ 2230.420276][T17754] usb 5-1: Manufacturer: syz [ 2230.435961][T17754] usb 5-1: SerialNumber: syz [ 2230.469343][T17754] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2230.488345][ T5890] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2230.628686][T12708] usb 4-1: USB disconnect, device number 64 [ 2230.674724][T27440] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 2230.713635][T27428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2230.774917][T27428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2230.793583][T27443] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4660'. [ 2230.832408][T27428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2230.863409][T27428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2230.899151][T27428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2230.899225][T27443] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4660'. [ 2230.950527][T27428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2230.971295][T12708] usb 5-1: USB disconnect, device number 34 [ 2231.003091][T17754] usb 1-1: USB disconnect, device number 41 [ 2231.072044][T20473] usb 2-1: device descriptor read/64, error -71 [ 2231.132035][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2231.139113][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2231.512002][T20473] usb 2-1: reset high-speed USB device number 43 using dummy_hcd [ 2231.526837][T20473] usb 2-1: device reset changed ep0 maxpacket size! [ 2231.613286][ T5890] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2231.620316][ T5890] ath9k_htc: Failed to initialize the device [ 2231.628183][T12708] usb 5-1: ath9k_htc: USB layer deinitialized [ 2231.628867][ T9] usb 2-1: USB disconnect, device number 43 [ 2231.831951][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2232.062015][T12708] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2232.082100][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 2232.089380][ T9] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 2232.100358][ T9] usb 2-1: config 0 has no interface number 0 [ 2232.120726][ T9] usb 2-1: config 0 interface 23 has no altsetting 0 [ 2232.130877][ T9] usb 2-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b [ 2232.151995][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2232.162516][ T9] usb 2-1: config 0 descriptor?? [ 2232.172040][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2232.179184][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2232.260257][T12708] usb 5-1: Using ep0 maxpacket: 32 [ 2232.287398][T12708] usb 5-1: config index 0 descriptor too short (expected 241, got 72) [ 2232.302337][T12708] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2232.329411][T12708] usb 5-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 2232.344471][T12708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2232.360593][T12708] usb 5-1: config 0 descriptor?? [ 2232.386132][T27468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4668'. [ 2232.398347][T12708] mos7840 5-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 2232.419452][ T9] usb 2-1: string descriptor 0 read error: -71 [ 2232.441475][ T9] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 2232.479716][ T9] gspca_mr97310a: reg write [21] error -22 [ 2232.508526][ T9] mr97310a 2-1:0.23: probe with driver mr97310a failed with error -22 [ 2232.530011][ T9] usb 2-1: USB disconnect, device number 44 [ 2232.642671][T27468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4668'. [ 2232.822320][T20251] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2233.222068][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2233.229233][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2233.262767][T20251] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2233.292807][T12708] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 2233.320902][T20251] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2233.350197][T12708] mos7840 ttyUSB1: probe with driver mos7840 failed with error -71 [ 2233.391983][T21875] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2233.449764][T20251] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2233.479669][T12708] usb 5-1: USB disconnect, device number 35 [ 2233.502944][T20251] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2233.518426][T12708] mos7840 5-1:0.0: device disconnected [ 2233.571119][T20251] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2233.596182][T21875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2233.653866][T21875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2233.671945][T21875] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2233.688448][T20251] usb 4-1: config 0 descriptor?? [ 2233.703051][T27475] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2233.729526][T21875] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2233.739340][T21875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2233.771728][T21875] usb 3-1: config 0 descriptor?? [ 2233.790720][T27481] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2234.195540][T20251] plantronics 0003:047F:FFFF.00CE: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2234.252021][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2234.259098][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2234.363104][ T5890] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2234.505385][T21875] plantronics 0003:047F:FFFF.00CF: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2234.701917][T20251] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2234.772187][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2234.904374][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2234.964306][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2234.972009][T20251] usb 5-1: Using ep0 maxpacket: 8 [ 2235.010838][ T5890] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2235.029391][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2235.087433][T20251] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2235.087951][ T5890] usb 1-1: config 0 descriptor?? [ 2235.121191][T27497] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2235.161217][T20251] usb 5-1: config 7 has an invalid interface number: 142 but max is 0 [ 2235.186687][T20251] usb 5-1: config 7 has no interface number 0 [ 2235.220337][T20251] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2235.246703][T20251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2235.287217][T20251] usb 5-1: Product: syz [ 2235.292172][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2235.299296][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2235.327881][T20251] usb 5-1: Manufacturer: syz [ 2235.345918][T20251] usb 5-1: SerialNumber: syz [ 2235.685858][ T9] usb 4-1: reset high-speed USB device number 65 using dummy_hcd [ 2235.722102][ T5890] plantronics 0003:047F:FFFF.00D0: hiddev2,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2236.332039][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2236.339249][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2236.808924][ T5890] usb 3-1: USB disconnect, device number 53 [ 2237.382013][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2237.389159][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2237.495760][T20251] usb 5-1: USB disconnect, device number 36 [ 2237.946162][ T5890] usb 1-1: USB disconnect, device number 42 [ 2238.093332][T20473] usb 4-1: USB disconnect, device number 65 [ 2238.272988][T20473] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 2238.412521][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2238.419839][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2238.467935][T20473] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2238.478088][T20473] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2238.509314][T20473] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2238.556715][T20473] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2238.571749][T20473] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2238.653348][T20473] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2238.661204][T20473] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2238.683905][T20473] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2238.707929][T20473] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2238.766636][T20473] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2238.781998][T21875] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2238.800089][T20473] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2238.808141][T20473] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2238.829491][T20473] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2238.863242][T20473] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2238.881961][T20473] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2238.907121][T20473] usb 4-1: string descriptor 0 read error: -22 [ 2238.932916][T20473] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2238.944583][T21875] usb 1-1: Using ep0 maxpacket: 8 [ 2238.953954][T20473] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2238.953963][T21875] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2238.955005][T21875] usb 1-1: config 7 has an invalid interface number: 142 but max is 0 [ 2238.992020][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2238.992029][T21875] usb 1-1: config 7 has no interface number 0 [ 2239.036997][T21875] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2239.048561][T20473] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2239.057871][T21875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2239.057903][T21875] usb 1-1: Product: syz [ 2239.057921][T21875] usb 1-1: Manufacturer: syz [ 2239.057938][T21875] usb 1-1: SerialNumber: syz [ 2239.201984][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 2239.209019][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2239.217704][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2239.240945][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2239.293540][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2239.317741][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2239.347330][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2239.366789][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2239.468795][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2239.475919][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2239.624658][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 2239.630601][ T9] usbtmc 2-1:16.0: can't read capabilities [ 2239.997101][T20251] usb 2-1: USB disconnect, device number 45 [ 2240.496541][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2240.503748][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2241.401082][T21875] usb 1-1: USB disconnect, device number 43 [ 2241.532025][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2241.539154][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2241.561186][ T9] usb 4-1: USB disconnect, device number 66 [ 2242.141951][T20473] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2242.276128][T27565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4693'. [ 2242.343015][T20473] usb 4-1: Using ep0 maxpacket: 8 [ 2242.351023][T20473] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2242.360807][T20473] usb 4-1: config 7 has an invalid interface number: 142 but max is 0 [ 2242.369870][T20473] usb 4-1: config 7 has no interface number 0 [ 2242.379770][T20473] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2242.389962][T20473] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2242.398444][T20473] usb 4-1: Product: syz [ 2242.403609][T20473] usb 4-1: Manufacturer: syz [ 2242.408382][T20473] usb 4-1: SerialNumber: syz [ 2242.572100][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2242.579340][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2243.482047][T21875] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2243.622145][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2243.629293][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2243.657819][T21875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2243.696205][T21875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2243.753525][T21875] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2243.808515][T21875] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2243.841350][T21875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2243.893933][T21875] usb 3-1: config 0 descriptor?? [ 2243.916409][T27576] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2244.557001][T21875] plantronics 0003:047F:FFFF.00D1: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2244.652032][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2244.659221][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2244.838479][T20473] usb 4-1: USB disconnect, device number 67 [ 2245.392145][T20473] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2245.432010][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2245.575844][T20473] usb 4-1: Using ep0 maxpacket: 8 [ 2245.592334][T20473] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2245.613037][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2245.629071][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2245.645128][T20473] usb 4-1: config 7 has an invalid interface number: 142 but max is 0 [ 2245.655921][T20473] usb 4-1: config 7 has no interface number 0 [ 2245.689223][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2245.702051][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2245.709121][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2245.712497][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2245.726130][ T9] usb 2-1: SerialNumber: syz [ 2245.734626][T20473] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2245.744631][T20473] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2245.756576][T20473] usb 4-1: Product: syz [ 2245.766767][T20473] usb 4-1: Manufacturer: syz [ 2245.778065][T20473] usb 4-1: SerialNumber: syz [ 2245.861940][T21875] usb 3-1: reset high-speed USB device number 54 using dummy_hcd [ 2245.999362][ T9] usb 2-1: 0:2 : does not exist [ 2246.044044][T12708] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2246.119703][ T9] usb 2-1: USB disconnect, device number 46 [ 2246.180718][T17587] udevd[17587]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2246.242038][T12708] usb 5-1: Using ep0 maxpacket: 16 [ 2246.254124][T12708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 2246.283173][T12708] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 2246.312526][T12708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2246.332550][T12708] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2246.358712][T12708] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 2246.368557][T12708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.382006][T12708] usb 5-1: Product: syz [ 2246.386311][T12708] usb 5-1: Manufacturer: syz [ 2246.391046][T12708] usb 5-1: SerialNumber: syz [ 2246.410499][T12708] usb 5-1: config 0 descriptor?? [ 2246.423647][T27602] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 2246.443357][ C1] port100 5-1:0.0: NFC: Urb failure (status -71) [ 2246.454045][T12708] port100 5-1:0.0: NFC: Could not get supported command types [ 2246.664718][ T9] usb 5-1: USB disconnect, device number 37 [ 2246.732042][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2246.739139][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2247.183173][ T5890] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2247.622508][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 2247.632028][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2247.772038][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2247.779200][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2248.048138][T20251] usb 3-1: USB disconnect, device number 54 [ 2248.170182][ T5890] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2248.191149][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2248.279731][T20473] usb 4-1: USB disconnect, device number 68 [ 2248.322005][ T5890] usb 1-1: Product: syz [ 2248.326324][ T5890] usb 1-1: Manufacturer: syz [ 2248.342543][ T5890] usb 1-1: SerialNumber: syz [ 2248.371968][T21875] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2248.375204][ T5890] usb 1-1: config 0 descriptor?? [ 2248.420861][ T5890] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2248.431922][ T5890] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 2248.521985][T21875] usb 5-1: Using ep0 maxpacket: 16 [ 2248.531495][T21875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2248.550260][T21875] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2248.570296][T21875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2248.589610][T21875] usb 5-1: Product: syz [ 2248.604483][T21875] usb 5-1: Manufacturer: syz [ 2248.609136][T21875] usb 5-1: SerialNumber: syz [ 2248.646126][T21875] usb 5-1: config 0 descriptor?? [ 2248.698195][T21875] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2248.732496][T21875] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 2248.812041][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2248.819183][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2249.008011][ T5890] em28xx 1-1:0.0: chip ID is em2765 [ 2249.162440][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2249.282632][T20473] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2249.306224][T21875] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 2249.322119][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 2249.329767][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2249.344123][ T9] usb 4-1: config 7 has an invalid interface number: 142 but max is 0 [ 2249.360431][ T9] usb 4-1: config 7 has no interface number 0 [ 2249.420395][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2249.452719][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2249.481665][T20473] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2249.502494][ T9] usb 4-1: Product: syz [ 2249.507015][T20473] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2249.519318][ T9] usb 4-1: Manufacturer: syz [ 2249.524199][ T9] usb 4-1: SerialNumber: syz [ 2249.529019][T20473] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2249.547059][T20473] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2249.559328][T20473] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2249.574201][T20473] usb 2-1: config 0 descriptor?? [ 2249.581208][T27636] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2249.666106][ T5890] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2249.676409][ T5890] em28xx 1-1:0.0: board has no eeprom [ 2249.852133][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2249.859276][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2249.962528][ T5890] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2249.970793][ T5890] em28xx 1-1:0.0: dvb set to bulk mode. [ 2249.976589][T17754] em28xx 1-1:0.0: Binding DVB extension [ 2250.010294][ T5890] usb 1-1: USB disconnect, device number 44 [ 2250.056917][ T5890] em28xx 1-1:0.0: Disconnecting em28xx [ 2250.069909][T17754] em28xx 1-1:0.0: Registering input extension [ 2250.082006][ T5890] em28xx 1-1:0.0: Closing input extension [ 2250.089452][T20473] plantronics 0003:047F:FFFF.00D2: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2250.146756][ T5890] em28xx 1-1:0.0: Freeing device [ 2250.334731][T21875] em28xx 5-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=255) [ 2250.352673][T21875] em28xx 5-1:0.0: board has no eeprom [ 2250.672297][T21875] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2250.685053][T21875] em28xx 5-1:0.0: dvb set to bulk mode. [ 2250.700524][T20251] em28xx 5-1:0.0: Binding DVB extension [ 2250.730106][T21875] usb 5-1: USB disconnect, device number 38 [ 2250.771415][T21875] em28xx 5-1:0.0: Disconnecting em28xx [ 2250.892102][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2250.899295][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2250.933025][T20251] em28xx 5-1:0.0: Registering input extension [ 2250.944965][T21875] em28xx 5-1:0.0: Closing input extension [ 2250.973326][T21875] em28xx 5-1:0.0: Freeing device [ 2251.041979][T12708] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2251.215706][T12708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2251.227385][T12708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2251.243662][T12708] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2251.261035][T12708] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2251.292392][T12708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2251.639029][T12708] usb 3-1: config 0 descriptor?? [ 2251.704341][T27648] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2251.870756][ T9] usb 4-1: USB disconnect, device number 69 [ 2251.932026][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2251.939186][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2251.965071][T21875] usb 2-1: USB disconnect, device number 47 [ 2252.182548][T12708] plantronics 0003:047F:FFFF.00D3: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2252.403218][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2252.572620][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 2252.583354][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2252.597848][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2252.624303][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2252.671241][ T9] usb 4-1: Product: syz [ 2252.709282][ T9] usb 4-1: Manufacturer: syz [ 2252.753978][ T9] usb 4-1: SerialNumber: syz [ 2252.894751][ T9] usb 4-1: config 0 descriptor?? [ 2252.972047][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2252.979185][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2253.449125][ T9] gs_usb 4-1:0.0: Couldn't get device config: (err=-32) [ 2253.482116][ T9] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -32 [ 2253.626001][T27669] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2253.642168][T21875] usb 3-1: reset high-speed USB device number 55 using dummy_hcd [ 2254.012021][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2254.019181][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2254.721387][T21875] usb 3-1: device descriptor read/64, error -71 [ 2254.814398][T20251] usb 4-1: USB disconnect, device number 70 [ 2254.974088][T21875] usb 3-1: reset high-speed USB device number 55 using dummy_hcd [ 2255.052118][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2255.059227][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2255.143306][T21875] usb 3-1: device firmware changed [ 2255.150771][T12708] usb 3-1: USB disconnect, device number 55 [ 2255.302096][T12708] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2255.527210][ T9] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 2255.551633][T12708] usb 3-1: config 0 has no interfaces? [ 2255.562002][T12708] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2255.588244][T12708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2255.618013][T12708] usb 3-1: config 0 descriptor?? [ 2255.640289][T27686] kvm: pic: single mode not supported [ 2255.640409][T27686] kvm: pic: level sensitive irq not supported [ 2255.649575][T27686] kvm: pic: level sensitive irq not supported [ 2255.656727][T27686] kvm: pic: single mode not supported [ 2255.713785][ T9] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2255.803346][ T9] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2255.837527][T12708] usb 3-1: USB disconnect, device number 56 [ 2255.841850][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2255.862316][ T9] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 2255.885558][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2255.940489][ T9] usb 1-1: config 0 descriptor?? [ 2256.092038][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2256.099202][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2256.371972][T12708] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2256.520842][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 2256.539842][T12708] usb 5-1: Using ep0 maxpacket: 8 [ 2256.601086][T12708] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2256.601100][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2256.612631][ T9] usb 1-1: USB disconnect, device number 45 [ 2256.709271][T12708] usb 5-1: config 7 has an invalid interface number: 142 but max is 0 [ 2256.724402][T12708] usb 5-1: config 7 has no interface number 0 [ 2256.770469][T12708] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2256.945455][T12708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2256.954081][T12708] usb 5-1: Product: syz [ 2256.958725][T12708] usb 5-1: Manufacturer: syz [ 2256.965215][T12708] usb 5-1: SerialNumber: syz [ 2257.132030][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2257.139212][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2257.182305][T21875] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2257.363073][T21875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2257.397667][T21875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2257.564370][T21875] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2257.599542][T21875] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2257.620736][T21875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2257.652146][T21875] usb 4-1: config 0 descriptor?? [ 2257.763257][T27715] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2258.172225][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2258.179381][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2258.265640][T21875] plantronics 0003:047F:FFFF.00D4: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2259.222052][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2259.229184][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2259.242118][ T5890] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2259.711939][T20473] usb 4-1: reset high-speed USB device number 71 using dummy_hcd [ 2260.134488][ T5890] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 2260.150557][ T5890] usb 3-1: config 0 has no interface number 0 [ 2260.175745][ T5890] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2260.187359][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2260.220942][ T5890] usb 3-1: Product: syz [ 2260.246074][ T5890] usb 3-1: Manufacturer: syz [ 2260.252954][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2260.260037][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2260.275567][ T5890] usb 3-1: SerialNumber: syz [ 2260.295013][ T5890] usb 3-1: config 0 descriptor?? [ 2260.349089][ T5890] yurex 3-1:0.50: Could not find endpoints [ 2260.550270][T21875] usb 3-1: USB disconnect, device number 57 [ 2260.664498][T12708] usb 5-1: USB disconnect, device number 39 [ 2261.292018][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2261.299154][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2261.932505][ T5890] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 2262.042035][T17754] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2262.071940][T20473] usb 4-1: device descriptor read/64, error -71 [ 2262.086734][ T5890] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2262.125815][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2262.166263][ T5890] usb 2-1: Product: syz [ 2262.193769][ T5890] usb 2-1: Manufacturer: syz [ 2262.232805][ T5890] usb 2-1: SerialNumber: syz [ 2262.314800][T20473] usb 4-1: reset high-speed USB device number 71 using dummy_hcd [ 2262.332013][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2262.339107][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2262.375273][ T5890] usb 2-1: config 0 descriptor?? [ 2262.382211][T20473] usb 4-1: device reset changed ep0 maxpacket size! [ 2262.403424][ T9] usb 4-1: USB disconnect, device number 71 [ 2262.460317][T17754] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2262.491538][T17754] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2262.532673][T17754] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2262.583118][ T9] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2262.598340][ T5890] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2262.611028][T17754] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2262.634939][T17754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.684168][T17754] usb 3-1: config 0 descriptor?? [ 2262.710992][T27753] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2262.797471][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 2262.834356][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2262.882284][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2262.919815][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2262.959448][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2262.992383][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2263.038040][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2263.070568][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2263.242333][ T5890] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2263.372276][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2263.375633][T17754] plantronics 0003:047F:FFFF.00D5: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2263.379580][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2263.433085][ T9] usb 4-1: usb_control_msg returned -32 [ 2263.471116][ T9] usbtmc 4-1:16.0: can't read capabilities [ 2263.591935][T12708] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2263.832098][T12708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2263.879746][T12708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2263.898702][T12708] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2263.912121][T12708] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2263.921202][T12708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2264.025467][T12708] usb 1-1: config 0 descriptor?? [ 2264.150299][T27775] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 2264.412033][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2264.419260][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2264.442028][T21875] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2264.635525][T20251] usb 2-1: USB disconnect, device number 48 [ 2264.702407][ T9] usb 3-1: reset high-speed USB device number 58 using dummy_hcd [ 2264.710512][T21875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2264.724039][T21875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2264.781296][T12708] plantronics 0003:047F:FFFF.00D6: hiddev2,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2264.799679][T21875] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2264.838815][T21875] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2264.858059][T21875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2264.886568][T21875] usb 5-1: config 0 descriptor?? [ 2265.002093][T20251] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2265.017255][T27787] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 2265.154217][T20251] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2265.167051][T20251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2265.200749][T20251] usb 2-1: config 0 descriptor?? [ 2265.430358][T20251] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2265.452051][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2265.459216][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2265.531260][T21875] plantronics 0003:047F:FFFF.00D7: hiddev3,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2265.667033][T20251] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 2265.696767][T20251] [drm] Initialized udl on minor 2 [ 2265.953075][T21875] usb 4-1: USB disconnect, device number 72 [ 2266.095251][T20251] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 2266.117477][T20251] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 2266.279673][T12708] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2266.301668][T12708] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 2266.367030][T20251] usb 2-1: USB disconnect, device number 49 [ 2266.492097][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2266.499231][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2266.606247][ T5890] usb 1-1: USB disconnect, device number 46 [ 2266.783617][T17754] usb 3-1: USB disconnect, device number 58 [ 2267.542071][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2267.549275][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2267.856290][T27813] binder: transaction release 115 bad handle 1, ret = -22 [ 2268.332451][ T5890] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2268.409826][T20251] usb 5-1: USB disconnect, device number 40 [ 2268.512582][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 2268.533990][ T5890] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2268.552007][ T5890] usb 3-1: config 7 has an invalid interface number: 142 but max is 0 [ 2268.565642][ T5890] usb 3-1: config 7 has no interface number 0 [ 2268.582009][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2268.589154][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2268.608610][ T5890] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2268.656286][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2268.683189][ T5890] usb 3-1: Product: syz [ 2268.697300][ T5890] usb 3-1: Manufacturer: syz [ 2268.713087][ T5890] usb 3-1: SerialNumber: syz [ 2269.622026][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2269.629161][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2269.678023][T27846] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2269.810796][T17754] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2269.892063][T20251] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2269.990660][T17754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2270.004358][T17754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2270.032502][T17754] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2270.058156][T20251] usb 2-1: Using ep0 maxpacket: 8 [ 2270.066289][T20251] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2270.077584][T20251] usb 2-1: config 7 has an invalid interface number: 142 but max is 0 [ 2270.086518][T20251] usb 2-1: config 7 has no interface number 0 [ 2270.097327][T20251] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2270.107927][T20251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2270.117492][T17754] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2270.139503][T20251] usb 2-1: Product: syz [ 2270.151966][T20251] usb 2-1: Manufacturer: syz [ 2270.156805][T20251] usb 2-1: SerialNumber: syz [ 2270.162148][T17754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2270.248693][T17754] usb 5-1: config 0 descriptor?? [ 2270.270243][T27842] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2270.652037][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2270.659173][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2270.811100][T17754] plantronics 0003:047F:FFFF.00D8: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2271.201236][ T5890] usb 3-1: USB disconnect, device number 59 [ 2271.692019][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2271.699119][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2272.742035][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2272.749336][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2273.487272][T17754] usb 5-1: USB disconnect, device number 41 [ 2273.583446][T20251] usb 2-1: USB disconnect, device number 50 [ 2273.772016][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2273.779085][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2274.241909][ T5890] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2274.422036][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 2274.446153][ T5890] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2274.482422][ T5890] usb 2-1: config 7 has an invalid interface number: 142 but max is 0 [ 2274.542213][ T5890] usb 2-1: config 7 has no interface number 0 [ 2274.609054][ T5890] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2274.635424][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2274.713192][ T5890] usb 2-1: Product: syz [ 2274.758146][ T5890] usb 2-1: Manufacturer: syz [ 2274.792206][ T5890] usb 2-1: SerialNumber: syz [ 2274.822014][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2274.829055][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2275.021942][T20251] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2275.132551][T17754] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2275.215481][T20251] usb 5-1: config 0 has an invalid interface number: 79 but max is 0 [ 2275.243973][T20251] usb 5-1: config 0 has no interface number 0 [ 2275.264245][T20251] usb 5-1: config 0 interface 79 has no altsetting 0 [ 2275.317505][T20251] usb 5-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=fc.92 [ 2275.322509][T17754] usb 4-1: Using ep0 maxpacket: 8 [ 2275.358461][T20251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2275.374699][T17754] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2275.382044][T20251] usb 5-1: Product: syz [ 2275.391587][T20251] usb 5-1: Manufacturer: syz [ 2275.401586][T20251] usb 5-1: SerialNumber: syz [ 2275.420782][T17754] usb 4-1: config 7 has an invalid interface number: 142 but max is 0 [ 2275.420862][T20251] usb 5-1: config 0 descriptor?? [ 2275.443131][T27900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4781'. [ 2275.452741][T27900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4781'. [ 2275.463851][T17754] usb 4-1: config 7 has no interface number 0 [ 2275.479238][T17754] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2275.495191][T17754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2275.496575][T20251] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 2275.513030][T27900] ip6gretap0: entered promiscuous mode [ 2275.555377][T17754] usb 4-1: Product: syz [ 2275.555506][T20251] dvb-usb: bulk message failed: -22 (2/0) [ 2275.616362][T20251] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 2275.682469][T17754] usb 4-1: Manufacturer: syz [ 2275.692260][T27900] syz_tun: entered promiscuous mode [ 2275.694112][T20251] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 2275.697633][T17754] usb 4-1: SerialNumber: syz [ 2275.784116][T27900] debugfs: 'hsr0' already exists in 'hsr' [ 2275.790414][T20251] usb 5-1: media controller created [ 2275.818941][T27900] Cannot create hsr debugfs directory [ 2275.844638][T20251] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2275.853463][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2275.853676][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2275.875200][T27900] hsr0: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 2275.900802][T27900] hsr0: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 2275.934203][T20251] usb 5-1: DVB: registering adapter 2 frontend 0 (WideView USB DVB-T)... [ 2275.964532][T20251] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 2276.162746][T20251] rc_core: IR keymap rc-dtt200u not found [ 2276.185788][T20251] Registered IR keymap rc-empty [ 2276.204637][T20251] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 2276.261430][T20251] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input242 [ 2276.304140][T20251] dvb-usb: schedule remote query interval to 300 msecs. [ 2276.320451][T20251] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 2276.397523][T20251] usb 5-1: USB disconnect, device number 42 [ 2276.594118][T20251] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 2276.669991][T27906] netlink: 'syz.4.4783': attribute type 1 has an invalid length. [ 2276.771061][T27908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4783'. [ 2276.868016][T27906] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2276.892021][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2276.899133][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2277.015579][ T5890] usb 2-1: USB disconnect, device number 51 [ 2277.713041][T17754] usb 4-1: USB disconnect, device number 73 [ 2277.742300][T20251] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2277.932108][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2277.939278][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2278.200443][T20251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2278.228318][T20251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2278.284967][T20251] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2278.350909][T20251] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2278.368970][T20251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2278.396588][T20251] usb 5-1: config 0 descriptor?? [ 2278.409454][T27922] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2278.769289][T27939] loop5: detected capacity change from 0 to 7 [ 2278.797330][T17587] loop5: [POWERTEC] p1 p2 [ 2278.806714][T27941] netlink: 'syz.0.4792': attribute type 4 has an invalid length. [ 2278.815472][T17587] loop5: p1 start 65528 is beyond EOD, truncated [ 2278.839807][T17587] loop5: p2 size 4293525504 extends beyond EOD, truncated [ 2278.850833][T20251] plantronics 0003:047F:FFFF.00D9: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2278.865300][T27944] netlink: 'syz.0.4792': attribute type 4 has an invalid length. [ 2278.958083][T27939] loop5: [POWERTEC] p1 p2 [ 2278.964008][T27939] loop5: p1 start 65528 is beyond EOD, truncated [ 2278.971192][T27939] loop5: p2 size 4293525504 extends beyond EOD, truncated [ 2278.982145][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2278.989378][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2279.023438][T27943] syzkaller0: entered promiscuous mode [ 2279.031440][T27943] syzkaller0: entered allmulticast mode [ 2279.160539][T17587] udevd[17587]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 2279.256966][T17587] udevd[17587]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 2279.328147][T27948] syzkaller0: entered promiscuous mode [ 2279.369164][T27948] syzkaller0: entered allmulticast mode [ 2279.436091][ C0] syzkaller0: tun_net_xmit 48 [ 2279.440850][ C0] syzkaller0: tun_net_xmit 48 [ 2279.458998][T27948] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 2279.477601][T27948] syzkaller0: create flow: hash 2014444439 index 2 [ 2279.531389][T27947] syzkaller0: delete flow: hash 2014444439 index 2 [ 2279.961959][T17754] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2280.012006][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2280.019134][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2280.137164][T17754] usb 1-1: Using ep0 maxpacket: 8 [ 2280.151346][T17754] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2280.161057][T17754] usb 1-1: config 7 has an invalid interface number: 142 but max is 0 [ 2280.169747][T17754] usb 1-1: config 7 has no interface number 0 [ 2280.180784][T17754] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2280.191354][T17754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2280.200057][T17754] usb 1-1: Product: syz [ 2280.204677][T17754] usb 1-1: Manufacturer: syz [ 2280.282592][T17754] usb 1-1: SerialNumber: syz [ 2280.724200][ T9] usb 5-1: USB disconnect, device number 43 [ 2281.052012][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2281.059147][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2281.235927][T27980] geneve3: entered promiscuous mode [ 2282.091999][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2282.099179][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2282.145734][T27996] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2282.772452][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2282.868768][T17754] usb 1-1: USB disconnect, device number 47 [ 2282.993568][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 2283.095981][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2283.113073][ T9] usb 3-1: config 7 has an invalid interface number: 142 but max is 0 [ 2283.132005][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2283.134388][ C0] syzkaller0: tun_net_xmit 48 [ 2283.139238][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2283.143736][ C0] syzkaller0: tun_net_xmit 48 [ 2283.156473][ T9] usb 3-1: config 7 has no interface number 0 [ 2283.216340][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.232600][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.352428][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2283.361674][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2283.378473][ T9] usb 3-1: Product: syz [ 2283.385102][ T9] usb 3-1: Manufacturer: syz [ 2283.390377][ T9] usb 3-1: SerialNumber: syz [ 2283.742012][T28012] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4814'. [ 2283.766992][T28008] binder: 28007:28008 ioctl c0306201 200000000280 returned -14 [ 2283.822009][T17754] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2283.991644][T17754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2284.011142][T17754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2284.089235][T17754] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2284.144928][T17754] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2284.172049][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2284.179238][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2284.186567][T17754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2284.222644][T17754] usb 1-1: config 0 descriptor?? [ 2284.229589][T28006] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2284.719418][T17754] plantronics 0003:047F:FFFF.00DA: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2285.212086][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2285.219170][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2285.321983][T12708] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2285.690285][T12708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2285.730626][T12708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2285.785185][T12708] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2285.845280][T12708] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2285.880261][T12708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2285.900942][ T9] usb 3-1: USB disconnect, device number 60 [ 2286.054975][T12708] usb 4-1: config 0 descriptor?? [ 2286.061984][T28031] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2286.252071][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2286.259203][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2286.581284][T12708] plantronics 0003:047F:FFFF.00DB: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2287.152239][ T9] usb 1-1: USB disconnect, device number 48 [ 2287.292017][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2287.299181][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2287.652005][T12708] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2287.903621][T12708] usb 3-1: Using ep0 maxpacket: 8 [ 2287.942578][T12708] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2287.984521][T12708] usb 3-1: config 7 has an invalid interface number: 142 but max is 0 [ 2287.992992][T12708] usb 3-1: config 7 has no interface number 0 [ 2288.032211][T12708] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2288.068887][T12708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2288.108204][T12708] usb 3-1: Product: syz [ 2288.160242][T12708] usb 3-1: Manufacturer: syz [ 2288.174036][T12708] usb 3-1: SerialNumber: syz [ 2288.332531][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2288.339633][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2288.743010][T20251] usb 4-1: USB disconnect, device number 74 [ 2289.056259][T28056] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2289.372003][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2289.379146][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2290.422049][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2290.429583][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2290.834143][T28064] syzkaller0: entered promiscuous mode [ 2290.839720][T28064] syzkaller0: entered allmulticast mode [ 2290.892159][ C0] syzkaller0: tun_net_xmit 48 [ 2290.897549][ C0] syzkaller0: tun_net_xmit 48 [ 2291.102256][T28073] netlink: 'syz.0.4829': attribute type 27 has an invalid length. [ 2291.111267][T28069] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2291.329660][T12708] usb 3-1: USB disconnect, device number 61 [ 2291.462022][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2291.469154][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2292.492013][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2292.499225][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2293.351941][T17754] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2293.500080][T28099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4834'. [ 2293.531992][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2293.539215][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2293.637002][T17754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2293.648918][T17754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2293.698715][T17754] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2293.739201][T17754] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2293.780314][T17754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2293.952805][T17754] usb 1-1: config 0 descriptor?? [ 2294.047680][T28093] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2294.572053][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2294.579267][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2294.779570][T17754] plantronics 0003:047F:FFFF.00DC: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2294.795763][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2294.922879][ T5890] usb 4-1: new low-speed USB device number 75 using dummy_hcd [ 2295.094760][ T5890] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2295.116467][ T5890] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 2295.157803][ T5890] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 2295.188350][ T5890] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2295.221602][ T5890] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2295.238089][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2295.252660][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2295.266052][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2295.282329][ T5890] usb 4-1: string descriptor 0 read error: -22 [ 2295.288660][ T5890] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2295.298913][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2295.307192][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2295.404679][T28106] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2295.412450][T28106] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2295.429871][ T5890] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 2295.440892][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2295.517222][ T9] usb 5-1: config 0 descriptor?? [ 2295.582409][T28110] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2295.611989][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2295.619286][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2295.636262][ T5890] usb 4-1: USB disconnect, device number 75 [ 2295.742089][T12708] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2295.822011][T20251] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2295.892861][T12708] usb 2-1: Using ep0 maxpacket: 8 [ 2295.902827][T12708] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2295.912599][T12708] usb 2-1: config 7 has an invalid interface number: 142 but max is 0 [ 2295.921082][T12708] usb 2-1: config 7 has no interface number 0 [ 2295.934238][T12708] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2295.943874][T12708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2295.955594][T12708] usb 2-1: Product: syz [ 2295.962483][T12708] usb 2-1: Manufacturer: syz [ 2295.972049][T12708] usb 2-1: SerialNumber: syz [ 2295.978879][T20251] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2295.992933][T20251] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2296.021530][ T9] plantronics 0003:047F:FFFF.00DD: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2296.036818][T20251] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2296.109319][T20251] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2296.143844][T20251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2296.233058][T20251] usb 3-1: Product: syz [ 2296.242086][T20251] usb 3-1: Manufacturer: syz [ 2296.261644][T20251] usb 3-1: SerialNumber: syz [ 2296.540371][T28127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4842'. [ 2296.574118][T20251] usblp 3-1:1.0: usblp2: USB Unidirectional printer dev 62 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2296.652063][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2296.659226][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2297.180913][T28134] netlink: 'syz.3.4843': attribute type 27 has an invalid length. [ 2297.442280][ T9] usb 1-1: reset high-speed USB device number 49 using dummy_hcd [ 2297.692051][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2297.699208][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2298.375670][ T5890] usb 5-1: USB disconnect, device number 44 [ 2298.732173][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2298.739288][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2298.822044][ T9] usb 1-1: device descriptor read/64, error -71 [ 2298.896849][T12708] usb 2-1: USB disconnect, device number 52 [ 2299.061989][ T9] usb 1-1: reset high-speed USB device number 49 using dummy_hcd [ 2299.070756][ T9] usb 1-1: device reset changed ep0 maxpacket size! [ 2299.080976][T17754] usb 1-1: USB disconnect, device number 49 [ 2299.418503][T17754] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2299.591984][T12708] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2299.771984][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2299.779269][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2299.791957][T17754] usb 1-1: Using ep0 maxpacket: 8 [ 2299.800886][T17754] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2299.801894][T12708] usb 2-1: Using ep0 maxpacket: 8 [ 2299.845104][T21875] usb 3-1: USB disconnect, device number 62 [ 2299.877246][T21875] usblp2: removed [ 2299.882938][T12708] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2299.883072][T17754] usb 1-1: config 7 has an invalid interface number: 142 but max is 0 [ 2299.908415][T12708] usb 2-1: config 7 has an invalid interface number: 142 but max is 0 [ 2299.979698][T17754] usb 1-1: config 7 has no interface number 0 [ 2299.990447][T12708] usb 2-1: config 7 has no interface number 0 [ 2300.021429][T12708] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2300.102662][T12708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2300.123357][T17754] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2300.157977][T12708] usb 2-1: Product: syz [ 2300.164132][T17754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2300.172174][T12708] usb 2-1: Manufacturer: syz [ 2300.172195][T12708] usb 2-1: SerialNumber: syz [ 2300.244283][T17754] usb 1-1: Product: syz [ 2300.290864][T17754] usb 1-1: Manufacturer: syz [ 2300.317246][T17754] usb 1-1: SerialNumber: syz [ 2300.812036][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2300.819194][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2300.850369][T28164] syzkaller0: entered promiscuous mode [ 2300.889840][T28164] syzkaller0: entered allmulticast mode [ 2301.852026][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2301.859159][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2302.716916][T12708] usb 2-1: USB disconnect, device number 53 [ 2302.892031][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2302.899228][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2303.348573][T17754] usb 1-1: USB disconnect, device number 50 [ 2303.374744][ T9] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2303.521531][T28189] netlink: 'syz.0.4857': attribute type 27 has an invalid length. [ 2303.558335][T20473] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2303.578463][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 2303.642057][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 2303.652531][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2303.663920][ T9] usb 4-1: config 0 descriptor?? [ 2303.674277][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 2303.755569][T20473] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2303.767512][T20473] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2303.793355][T20473] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2303.860734][T20473] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2303.899707][T20473] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2303.932037][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2303.939255][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2303.983332][T20473] usb 2-1: config 0 descriptor?? [ 2304.462025][T20473] plantronics 0003:047F:FFFF.00DE: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2304.981986][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2304.989140][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2305.613048][ C0] syzkaller0: tun_net_xmit 48 [ 2305.617853][ C0] syzkaller0: tun_net_xmit 48 [ 2305.722019][T20473] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2306.022003][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2306.029178][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2306.134423][T20473] usb 5-1: Using ep0 maxpacket: 8 [ 2306.145594][T20473] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2306.187229][T20473] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2306.197720][T20473] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2306.212155][T20473] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2306.428283][T20473] usb 2-1: USB disconnect, device number 54 [ 2306.472973][T12708] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2306.538747][ T9] gspca_sonixj: reg_w1 err -71 [ 2306.545857][ T9] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 2306.582643][ T9] usb 4-1: USB disconnect, device number 76 [ 2306.641998][T12708] usb 3-1: Using ep0 maxpacket: 8 [ 2306.669074][T12708] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2306.694008][T12708] usb 3-1: config 7 has an invalid interface number: 142 but max is 0 [ 2306.716343][T12708] usb 3-1: config 7 has no interface number 0 [ 2306.750707][T12708] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2306.792228][T12708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2306.804625][T12708] usb 3-1: Product: syz [ 2306.813733][T12708] usb 3-1: Manufacturer: syz [ 2306.818373][T12708] usb 3-1: SerialNumber: syz [ 2307.052003][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2307.059166][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2307.550275][T28226] syzkaller0: entered promiscuous mode [ 2307.550303][T28226] syzkaller0: entered allmulticast mode [ 2308.092002][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2308.092212][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2308.496272][ T5890] usb 5-1: USB disconnect, device number 45 [ 2308.892250][T12708] usb 3-1: USB disconnect, device number 63 [ 2309.007729][T28242] netlink: 'syz.0.4872': attribute type 27 has an invalid length. [ 2309.131982][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2309.139158][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2309.346628][T28246] netlink: 'syz.2.4873': attribute type 27 has an invalid length. [ 2310.178208][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2310.178413][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2311.212050][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2311.219174][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2312.252000][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2312.259118][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2312.550869][T28260] syzkaller0: left promiscuous mode [ 2312.558539][T28260] syzkaller0: left allmulticast mode [ 2312.688545][T28265] syzkaller0: entered promiscuous mode [ 2312.696552][T28265] syzkaller0: entered allmulticast mode [ 2312.712938][ T5890] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2313.194020][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2313.240290][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2313.279233][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2313.292119][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2313.292309][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2313.306359][T20473] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2313.485932][T28289] netlink: 'syz.0.4885': attribute type 27 has an invalid length. [ 2313.561926][T20473] usb 4-1: Using ep0 maxpacket: 8 [ 2313.602267][ T5890] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2313.680491][T20473] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2313.761651][T20473] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2313.774702][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2313.784426][T20473] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2313.932471][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2313.957233][ T5890] usb 2-1: config 0 descriptor?? [ 2314.018719][T28253] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2314.040413][T20473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2314.216250][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 2314.332029][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2314.339377][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2314.356569][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2314.390097][ T9] usb 5-1: config 7 has an invalid interface number: 142 but max is 0 [ 2314.416533][ T9] usb 5-1: config 7 has no interface number 0 [ 2314.468186][ T5890] plantronics 0003:047F:FFFF.00DF: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2314.516958][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2314.578170][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2314.619827][ T9] usb 5-1: Product: syz [ 2314.657645][ T9] usb 5-1: Manufacturer: syz [ 2314.672293][ T9] usb 5-1: SerialNumber: syz [ 2315.371991][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2315.379134][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2316.412020][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2316.419175][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2316.522324][T12708] usb 4-1: USB disconnect, device number 77 [ 2316.542071][ T5890] usb 2-1: reset high-speed USB device number 55 using dummy_hcd [ 2316.922069][T12708] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 2317.086020][ T9] usb 5-1: USB disconnect, device number 46 [ 2317.098204][T12708] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2317.152223][T12708] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2317.161467][T12708] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 2317.203488][T12708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2317.250704][T12708] usb 4-1: config 0 descriptor?? [ 2317.285848][ T30] audit: type=1326 audit(1770171059.981:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28311 comm="syz.4.4890" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f473139aeb9 code=0x0 [ 2317.423398][T28316] syzkaller0: entered promiscuous mode [ 2317.434798][T28316] syzkaller0: entered allmulticast mode [ 2317.452000][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2317.459081][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2317.680392][T17754] usb 2-1: USB disconnect, device number 55 [ 2317.816955][T28321] syzkaller0: entered promiscuous mode [ 2317.855141][T28321] syzkaller0: entered allmulticast mode [ 2318.078303][T12708] usb 4-1: USB disconnect, device number 78 [ 2318.472474][T17754] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2318.492015][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2318.499243][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2318.662188][T17754] usb 1-1: Using ep0 maxpacket: 16 [ 2318.699144][T28338] netlink: 'syz.2.4897': attribute type 27 has an invalid length. [ 2318.775442][T17754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2318.833227][T17754] usb 1-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 2318.842858][T17754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2318.891169][T17754] usb 1-1: config 0 descriptor?? [ 2319.532058][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2319.539410][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2319.664594][T17754] kye 0003:0458:0087.00E0: reserved main item tag 0xd [ 2319.691916][T17754] kye 0003:0458:0087.00E0: unexpected long global item [ 2319.722925][T17754] kye 0003:0458:0087.00E0: parse failed [ 2319.728538][T17754] kye 0003:0458:0087.00E0: probe with driver kye failed with error -22 [ 2320.141984][T17754] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2320.571982][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2320.576093][T17754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2320.579333][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2320.603272][T12708] usb 1-1: USB disconnect, device number 51 [ 2320.650021][T20473] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2320.668980][T17754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2320.671105][T28356] syzkaller0: entered promiscuous mode [ 2320.719189][T28356] syzkaller0: entered allmulticast mode [ 2320.749201][T17754] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2320.785111][T17754] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2320.819106][T17754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2320.848137][T17754] usb 2-1: config 0 descriptor?? [ 2320.866721][T28349] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2320.912483][T20473] usb 4-1: Using ep0 maxpacket: 8 [ 2320.954024][T20473] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2320.964286][T20473] usb 4-1: config 7 has an invalid interface number: 142 but max is 0 [ 2320.975486][T20473] usb 4-1: config 7 has no interface number 0 [ 2320.990299][T20473] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2320.999690][T20473] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2321.008139][T20473] usb 4-1: Product: syz [ 2321.015903][T20473] usb 4-1: Manufacturer: syz [ 2321.020558][T20473] usb 4-1: SerialNumber: syz [ 2321.291323][T17754] plantronics 0003:047F:FFFF.00E1: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2321.622160][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2321.629450][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2322.652013][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2322.659317][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2322.669422][T28375] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 2323.421598][T20473] usb 4-1: USB disconnect, device number 79 [ 2323.526865][T12708] usb 2-1: USB disconnect, device number 56 [ 2323.691981][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2323.699108][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2323.752122][T28381] netlink: 'syz.0.4905': attribute type 27 has an invalid length. [ 2324.036911][T28387] syzkaller0: entered promiscuous mode [ 2324.111530][T28387] syzkaller0: entered allmulticast mode [ 2324.732030][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2324.739152][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2324.992169][T20473] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2325.097132][T28408] netlink: 'syz.0.4911': attribute type 27 has an invalid length. [ 2325.154894][T20473] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2325.168550][T20473] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2325.217828][T20473] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2325.231500][T20473] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2325.248526][T20473] usb 5-1: SerialNumber: syz [ 2325.362671][T17754] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2325.480403][T20473] usb 5-1: 0:2 : does not exist [ 2325.525562][T17754] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2325.535917][T17754] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2325.550057][T20473] usb 5-1: USB disconnect, device number 47 [ 2325.562415][T17754] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2325.590066][T17754] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2325.639304][T17754] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2325.648769][T17754] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2325.686279][T28303] udevd[28303]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2325.696290][T17754] usb 2-1: Product: syz [ 2325.718004][T17754] usb 2-1: Manufacturer: syz [ 2325.737445][T17754] cdc_wdm 2-1:1.0: skipping garbage [ 2325.746251][T17754] cdc_wdm 2-1:1.0: skipping garbage [ 2325.761311][T17754] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2325.772020][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2325.779148][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2325.966535][T17754] cdc_wdm 2-1:1.0: Unknown control protocol [ 2326.812021][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2326.819235][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2327.091920][T12708] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2327.235376][T12708] usb 3-1: device descriptor read/64, error -71 [ 2327.612117][T12708] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2327.782458][T12708] usb 3-1: device descriptor read/64, error -71 [ 2327.862041][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2327.869132][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2327.941691][T12708] usb usb3-port1: attempt power cycle [ 2328.321902][T12708] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2328.433477][T12708] usb 3-1: device descriptor read/8, error -71 [ 2328.691884][T17754] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2328.794422][ T5890] usb 2-1: USB disconnect, device number 57 [ 2328.816304][T12708] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2328.851928][T17754] usb 5-1: Using ep0 maxpacket: 32 [ 2328.872458][T12708] usb 3-1: device descriptor read/8, error -71 [ 2328.891999][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2328.894565][T17754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2328.899197][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2328.936346][T28442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4920'. [ 2328.986333][T17754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2329.027454][T17754] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2329.029543][T12708] usb usb3-port1: unable to enumerate USB device [ 2329.094115][T17754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2329.124010][T17754] usb 5-1: config 0 descriptor?? [ 2329.585223][T17754] savu 0003:1E7D:2D5A.00E2: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 2329.597521][ T5890] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2329.772803][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 2329.784870][ T5890] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2329.796737][ T5890] usb 2-1: config 7 has an invalid interface number: 142 but max is 0 [ 2329.805752][ T5890] usb 2-1: config 7 has no interface number 0 [ 2329.877914][ T5890] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2329.925846][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2329.939157][ T5890] usb 2-1: Product: syz [ 2329.941958][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2329.950582][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2329.987315][T17754] usb 5-1: USB disconnect, device number 48 [ 2330.083927][ T5890] usb 2-1: Manufacturer: syz [ 2330.105315][ T5890] usb 2-1: SerialNumber: syz [ 2330.972035][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2330.979173][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2331.601224][T28464] netlink: 'syz.2.4926': attribute type 1 has an invalid length. [ 2331.883302][T28468] netlink: 'syz.4.4927': attribute type 27 has an invalid length. [ 2332.011986][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2332.019195][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2332.601525][T20473] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2332.931969][T17754] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2333.050553][T20473] usb 3-1: Using ep0 maxpacket: 8 [ 2333.061971][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2333.069159][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2333.087355][T20473] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2333.102730][T20473] usb 3-1: config 7 has an invalid interface number: 142 but max is 0 [ 2333.111941][T20473] usb 3-1: config 7 has no interface number 0 [ 2333.218420][T17754] usb 4-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 2333.293556][T17754] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2333.431042][T20473] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2333.460798][T17754] usb 4-1: New USB device found, idVendor=056e, idProduct=019b, bcdDevice= 0.00 [ 2333.482067][T20473] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2333.491942][T17754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2333.510191][T20473] usb 3-1: Product: syz [ 2333.516067][T20473] usb 3-1: Manufacturer: syz [ 2333.537615][T20473] usb 3-1: SerialNumber: syz [ 2333.552837][T17754] usb 4-1: config 0 descriptor?? [ 2333.929640][ T5890] usb 2-1: USB disconnect, device number 58 [ 2334.092009][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2334.099135][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2334.898213][T28485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4932'. [ 2335.049418][T17754] usb 4-1: string descriptor 0 read error: -71 [ 2335.056324][ C0] syzkaller0: tun_net_xmit 48 [ 2335.056395][ C0] syzkaller0: tun_net_xmit 48 [ 2335.131990][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2335.136664][T17754] usb 4-1: USB disconnect, device number 80 [ 2335.139103][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2335.173595][T28487] syzkaller0: entered promiscuous mode [ 2335.201013][T28487] syzkaller0: entered allmulticast mode [ 2335.451431][T20473] usb 3-1: USB disconnect, device number 68 [ 2336.171972][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2336.179240][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2336.495591][T20473] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2336.662474][T20473] usb 4-1: Using ep0 maxpacket: 8 [ 2336.683813][T20473] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2336.696152][T20473] usb 4-1: config 7 has an invalid interface number: 142 but max is 0 [ 2336.716678][T20473] usb 4-1: config 7 has no interface number 0 [ 2336.809259][T20473] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2336.821337][T20473] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2336.876523][T20473] usb 4-1: Product: syz [ 2336.893339][T20473] usb 4-1: Manufacturer: syz [ 2336.898286][T20473] usb 4-1: SerialNumber: syz [ 2337.211987][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2337.219100][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2338.251989][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2338.259257][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2338.791902][T12708] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2338.984159][ C1] syzkaller0: tun_net_xmit 76 [ 2338.988901][ C1] syzkaller0: tun_net_xmit 76 [ 2338.994315][T12708] usb 1-1: Using ep0 maxpacket: 8 [ 2339.042055][T28520] tipc: Enabled bearer , priority 0 [ 2339.072497][T12708] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2339.101416][T28520] tipc: Resetting bearer [ 2339.107971][T12708] usb 1-1: config 7 has an invalid interface number: 142 but max is 0 [ 2339.118480][ C1] syzkaller0: tun_net_xmit 76 [ 2339.123235][ C1] syzkaller0: tun_net_xmit 76 [ 2339.151954][T12708] usb 1-1: config 7 has no interface number 0 [ 2339.225377][T28520] syzkaller0: tun_net_xmit 76 [ 2339.230412][T28520] syzkaller0: tun_net_xmit 76 [ 2339.291980][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2339.299072][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2339.361953][ C0] syzkaller0: tun_net_xmit 76 [ 2339.366730][ C0] syzkaller0: tun_net_xmit 76 [ 2339.428385][T12708] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2339.438364][T12708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2339.443686][T20473] usb 4-1: USB disconnect, device number 81 [ 2339.508355][T12708] usb 1-1: Product: syz [ 2339.551946][T17754] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2339.559648][T12708] usb 1-1: Manufacturer: syz [ 2339.578176][T12708] usb 1-1: SerialNumber: syz [ 2339.632054][ C0] syzkaller0: tun_net_xmit 76 [ 2339.637381][ C0] syzkaller0: tun_net_xmit 76 [ 2339.716813][T17754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2339.802012][T17754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2339.846264][T17754] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2339.932196][T28532] netlink: 'syz.1.4943': attribute type 27 has an invalid length. [ 2339.975220][T17754] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2340.020940][T17754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2340.081140][T17754] usb 5-1: config 0 descriptor?? [ 2340.163535][ C0] syzkaller0: tun_net_xmit 76 [ 2340.168343][ C0] syzkaller0: tun_net_xmit 76 [ 2340.342001][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2340.349245][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2340.400203][T20473] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2340.452411][T28521] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2340.568585][T20473] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 2340.579057][T20473] usb 3-1: config 0 has no interface number 0 [ 2340.586140][T20473] usb 3-1: config 0 interface 122 has no altsetting 0 [ 2340.653817][T20473] usb 3-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 2340.663311][T20473] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.686473][T20473] usb 3-1: Product: syz [ 2340.726853][T20473] usb 3-1: Manufacturer: syz [ 2340.734728][T20473] usb 3-1: SerialNumber: syz [ 2340.779324][T20473] usb 3-1: config 0 descriptor?? [ 2341.017408][T17754] plantronics 0003:047F:FFFF.00E3: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2341.212864][ C0] syzkaller0: tun_net_xmit 76 [ 2341.217692][ C0] syzkaller0: tun_net_xmit 76 [ 2341.381990][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2341.389113][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2341.920977][T12708] usb 1-1: USB disconnect, device number 52 [ 2342.252058][ C0] syzkaller0: tun_net_xmit 76 [ 2342.256850][ C0] syzkaller0: tun_net_xmit 76 [ 2342.411987][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2342.419158][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2342.596498][T28548] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2342.642579][T28548] syzkaller0: entered promiscuous mode [ 2342.656945][T28548] syzkaller0: entered allmulticast mode [ 2342.771896][T12708] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2342.782013][T21875] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2342.981736][T21875] usb 2-1: Using ep0 maxpacket: 32 [ 2343.000839][T21875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2343.012079][T12708] usb 1-1: Using ep0 maxpacket: 8 [ 2343.030569][T21875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2343.050883][T21875] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2343.071190][T21875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2343.096127][T12708] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2343.105875][T12708] usb 1-1: config 7 has an invalid interface number: 142 but max is 0 [ 2343.114208][T12708] usb 1-1: config 7 has no interface number 0 [ 2343.146030][T12708] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2343.155222][T12708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2343.165587][T21875] usb 2-1: config 0 descriptor?? [ 2343.183415][T21875] hub 2-1:0.0: USB hub found [ 2343.189191][T12708] usb 1-1: Product: syz [ 2343.211831][T12708] usb 1-1: Manufacturer: syz [ 2343.216643][T12708] usb 1-1: SerialNumber: syz [ 2343.292719][ C0] syzkaller0: tun_net_xmit 76 [ 2343.297682][ C0] syzkaller0: tun_net_xmit 76 [ 2343.378230][T21875] hub 2-1:0.0: 1 port detected [ 2343.452001][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2343.459146][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2343.574194][T17754] usb 3-1: USB disconnect, device number 69 [ 2343.581518][T17754] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 2343.666123][T20473] usb 5-1: USB disconnect, device number 49 [ 2343.795702][ T30] audit: type=1326 audit(1770171086.491:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28545 comm="syz.1.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629899aeb9 code=0x7ffc0000 [ 2343.928072][ T30] audit: type=1326 audit(1770171086.491:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28545 comm="syz.1.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f629899aeb9 code=0x7ffc0000 [ 2343.979778][ T30] audit: type=1326 audit(1770171086.491:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28545 comm="syz.1.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629899aeb9 code=0x7ffc0000 [ 2344.049337][T28547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2344.060903][T28547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2344.070965][ T30] audit: type=1326 audit(1770171086.491:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28545 comm="syz.1.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f629899aeb9 code=0x7ffc0000 [ 2344.102171][ T30] audit: type=1326 audit(1770171086.491:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28545 comm="syz.1.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f629893c2d9 code=0x7ffc0000 [ 2344.148094][ T30] audit: type=1326 audit(1770171086.491:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28545 comm="syz.1.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629899aeb9 code=0x7ffc0000 [ 2344.331960][ C0] syzkaller0: tun_net_xmit 76 [ 2344.336947][ C0] syzkaller0: tun_net_xmit 76 [ 2344.342447][T21875] hub 2-1:0.0: activate --> -90 [ 2344.383588][ T30] audit: type=1326 audit(1770171086.491:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28545 comm="syz.1.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f629899ab4b code=0x7ffc0000 [ 2344.422323][ T30] audit: type=1326 audit(1770171086.491:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28545 comm="syz.1.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f629899ab4b code=0x7ffc0000 [ 2344.491623][ T30] audit: type=1326 audit(1770171086.511:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28545 comm="syz.1.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f629895b78e code=0x7ffc0000 [ 2344.522003][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2344.529337][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2344.576168][ T30] audit: type=1326 audit(1770171086.731:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28545 comm="syz.1.4947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f629899aeb9 code=0x7ffc0000 [ 2344.622197][T20473] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2344.947286][T20473] usb 3-1: Using ep0 maxpacket: 16 [ 2344.982229][T21875] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 2344.990467][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.997037][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.018084][T21875] usb 2-1-port1: cannot disable (err = -71) [ 2345.024653][T20251] usb 2-1: USB disconnect, device number 59 [ 2345.067656][T20473] usb 3-1: config 0 has no interfaces? [ 2345.129919][T20473] usb 3-1: New USB device found, idVendor=04e8, idProduct=a100, bcdDevice=b2.9d [ 2345.331846][T20473] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2345.339899][T20473] usb 3-1: Product: syz [ 2345.344323][T20473] usb 3-1: Manufacturer: syz [ 2345.348925][T20473] usb 3-1: SerialNumber: syz [ 2345.372457][ C0] syzkaller0: tun_net_xmit 76 [ 2345.377296][ C0] syzkaller0: tun_net_xmit 76 [ 2345.400314][T20473] usb 3-1: config 0 descriptor?? [ 2345.504900][T12708] usb 1-1: USB disconnect, device number 53 [ 2345.531967][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2345.539099][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2345.701998][T20473] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2345.941873][T20473] usb 5-1: Using ep0 maxpacket: 8 [ 2346.017087][T28578] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4955'. [ 2346.054226][T20473] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2346.095636][T20473] usb 5-1: config 7 has an invalid interface number: 142 but max is 0 [ 2346.131462][T20473] usb 5-1: config 7 has no interface number 0 [ 2346.185892][T20473] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2346.224548][T20473] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2346.247179][T20473] usb 5-1: Product: syz [ 2346.265467][T20473] usb 5-1: Manufacturer: syz [ 2346.295317][T20473] usb 5-1: SerialNumber: syz [ 2346.412621][ C0] syzkaller0: tun_net_xmit 76 [ 2346.417390][ C0] syzkaller0: tun_net_xmit 76 [ 2346.572016][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2346.579189][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2347.178722][T17754] usb 3-1: USB disconnect, device number 70 [ 2347.358961][T28586] netlink: 'syz.2.4957': attribute type 27 has an invalid length. [ 2347.452503][ C0] syzkaller0: tun_net_xmit 76 [ 2347.457276][ C0] syzkaller0: tun_net_xmit 76 [ 2347.611972][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2347.619107][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2348.492795][ C0] syzkaller0: tun_net_xmit 76 [ 2348.497562][ C0] syzkaller0: tun_net_xmit 76 [ 2348.662017][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2348.669332][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2349.033143][T20473] usb 5-1: USB disconnect, device number 50 [ 2349.103984][T28592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4959'. [ 2349.166916][T28596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4959'. [ 2349.216536][T28592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4959'. [ 2349.216787][ T1115] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2349.274014][ T1115] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2349.299179][T28596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4959'. [ 2349.308364][ T1115] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2349.317432][ T1115] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2349.498799][T28602] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2349.532602][ C0] syzkaller0: tun_net_xmit 76 [ 2349.537419][ C0] syzkaller0: tun_net_xmit 76 [ 2349.572279][T20473] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2349.701990][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2349.709264][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2349.770798][T20473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2349.798000][T20473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2349.824203][T20473] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2349.848337][T28611] tipc: Enabled bearer , priority 0 [ 2349.857151][T20473] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2349.858450][T28611] syzkaller0: entered promiscuous mode [ 2349.873499][T20473] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2349.896904][T28611] syzkaller0: entered allmulticast mode [ 2349.906412][T20473] usb 1-1: config 0 descriptor?? [ 2349.971876][T28611] tipc: Resetting bearer [ 2349.984791][T28610] tipc: Resetting bearer [ 2350.007700][T28610] tipc: Disabling bearer [ 2350.022492][T12708] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2350.193782][T12708] usb 3-1: Using ep0 maxpacket: 8 [ 2350.206243][T12708] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2350.216579][T12708] usb 3-1: config 7 has an invalid interface number: 142 but max is 0 [ 2350.226511][T12708] usb 3-1: config 7 has no interface number 0 [ 2350.268341][T12708] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2350.278695][T17754] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2350.310320][T12708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2350.318496][T12708] usb 3-1: Product: syz [ 2350.396567][T12708] usb 3-1: Manufacturer: syz [ 2350.402329][T12708] usb 3-1: SerialNumber: syz [ 2350.405290][T20473] plantronics 0003:047F:FFFF.00E4: reserved main item tag 0xd [ 2350.463141][T20473] plantronics 0003:047F:FFFF.00E4: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2350.522099][T17754] usb 2-1: device descriptor read/64, error -71 [ 2350.573733][ C0] syzkaller0: tun_net_xmit 76 [ 2350.578490][ C0] syzkaller0: tun_net_xmit 76 [ 2350.732042][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2350.739170][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2350.782268][T17754] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2350.820606][T20473] usb 1-1: USB disconnect, device number 54 [ 2350.930144][T17754] usb 2-1: device descriptor read/64, error -71 [ 2351.069726][T17754] usb usb2-port1: attempt power cycle [ 2351.235196][T28622] fido_id[28622]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2351.532503][T17754] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2351.572694][T17754] usb 2-1: device descriptor read/8, error -71 [ 2351.612851][ C0] syzkaller0: tun_net_xmit 76 [ 2351.617610][ C0] syzkaller0: tun_net_xmit 76 [ 2351.771965][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2351.779018][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2351.844755][T17754] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2351.914523][T17754] usb 2-1: device descriptor read/8, error -71 [ 2352.044166][T17754] usb usb2-port1: unable to enumerate USB device [ 2352.342046][T17754] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2352.651951][ C0] syzkaller0: tun_net_xmit 76 [ 2352.656815][ C0] syzkaller0: tun_net_xmit 76 [ 2352.688921][T17754] usb 1-1: Using ep0 maxpacket: 8 [ 2352.812019][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2352.819214][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2352.838665][T12708] usb 3-1: USB disconnect, device number 71 [ 2352.885930][T17754] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2352.907192][T17754] usb 1-1: config 7 has an invalid interface number: 142 but max is 0 [ 2352.929154][T17754] usb 1-1: config 7 has no interface number 0 [ 2353.007346][T28642] netlink: 'syz.2.4974': attribute type 27 has an invalid length. [ 2353.055099][T17754] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2353.088755][T17754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2353.149408][T17754] usb 1-1: Product: syz [ 2353.215108][T17754] usb 1-1: Manufacturer: syz [ 2353.270235][T17754] usb 1-1: SerialNumber: syz [ 2353.692669][ C0] syzkaller0: tun_net_xmit 76 [ 2353.697445][ C0] syzkaller0: tun_net_xmit 76 [ 2353.851957][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2353.859094][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2354.731942][ C0] syzkaller0: tun_net_xmit 76 [ 2354.736795][ C0] syzkaller0: tun_net_xmit 76 [ 2354.892059][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2354.899269][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2355.104661][T17754] usb 1-1: USB disconnect, device number 55 [ 2355.231495][T28661] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2355.292878][T28661] syzkaller0: entered promiscuous mode [ 2355.348716][T28661] syzkaller0: entered allmulticast mode [ 2355.772646][ C0] syzkaller0: tun_net_xmit 76 [ 2355.777452][ C0] syzkaller0: tun_net_xmit 76 [ 2355.932032][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2355.939269][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2356.623825][T28684] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2356.635455][T28684] netem: change failed [ 2356.822389][ C0] syzkaller0: tun_net_xmit 76 [ 2356.827139][ C0] syzkaller0: tun_net_xmit 76 [ 2356.971981][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2356.979174][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2357.862608][ C0] syzkaller0: tun_net_xmit 76 [ 2357.867362][ C0] syzkaller0: tun_net_xmit 76 [ 2358.011947][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2358.019163][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2358.892570][ C0] syzkaller0: tun_net_xmit 76 [ 2358.897352][ C0] syzkaller0: tun_net_xmit 76 [ 2359.051948][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2359.058978][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2359.085899][T28711] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2359.158424][T28718] netlink: 'syz.4.4993': attribute type 27 has an invalid length. [ 2359.932537][ C0] syzkaller0: tun_net_xmit 76 [ 2359.937339][ C0] syzkaller0: tun_net_xmit 76 [ 2360.091965][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2360.099225][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2360.972681][ C0] syzkaller0: tun_net_xmit 76 [ 2360.977463][ C0] syzkaller0: tun_net_xmit 76 [ 2361.131983][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2361.139086][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2361.999768][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 2361.999790][ T30] audit: type=1326 audit(1770171104.691:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28761 comm="syz.3.4997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7d9aeb9 code=0x7ffc0000 [ 2362.029505][ C0] syzkaller0: tun_net_xmit 76 [ 2362.034223][ C0] syzkaller0: tun_net_xmit 76 [ 2362.039027][T17754] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2362.152409][ T30] audit: type=1326 audit(1770171104.691:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28761 comm="syz.3.4997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7d9aeb9 code=0x7ffc0000 [ 2362.171967][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2362.182001][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2362.189861][T28762] [U]  [ 2362.269015][T17754] usb 1-1: Using ep0 maxpacket: 8 [ 2362.303726][T17754] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2362.349702][ T30] audit: type=1326 audit(1770171104.691:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28761 comm="syz.3.4997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc0b7d9aeb9 code=0x7ffc0000 [ 2362.400354][T17754] usb 1-1: config 7 has an invalid interface number: 142 but max is 0 [ 2362.427409][T17754] usb 1-1: config 7 has no interface number 0 [ 2362.450749][ T30] audit: type=1326 audit(1770171104.691:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28761 comm="syz.3.4997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7d9aeb9 code=0x7ffc0000 [ 2362.524699][T17754] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 2362.554536][T17754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2362.808686][T17754] usb 1-1: Product: syz [ 2362.824424][ T30] audit: type=1326 audit(1770171104.691:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28761 comm="syz.3.4997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7d9aeb9 code=0x7ffc0000 [ 2362.850321][T17754] usb 1-1: Manufacturer: syz [ 2362.864073][T17754] usb 1-1: SerialNumber: syz [ 2362.969305][ T30] audit: type=1326 audit(1770171104.741:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28761 comm="syz.3.4997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc0b7d9aeb9 code=0x7ffc0000 [ 2363.022055][ T5890] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 2363.051912][ C0] syzkaller0: tun_net_xmit 76 [ 2363.056706][ C0] syzkaller0: tun_net_xmit 76 [ 2363.133477][ T30] audit: type=1326 audit(1770171104.741:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28761 comm="syz.3.4997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc0b7d9ac22 code=0x7ffc0000 [ 2363.212093][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2363.219238][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2363.259356][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 2363.271229][ T30] audit: type=1326 audit(1770171104.761:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28761 comm="syz.3.4997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc0b7d9ac22 code=0x7ffc0000 [ 2363.317854][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 2363.363826][T12708] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2363.366172][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2363.371566][ T30] audit: type=1326 audit(1770171104.811:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28761 comm="syz.3.4997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7d9aeb9 code=0x7ffc0000 [ 2363.371622][ T30] audit: type=1326 audit(1770171104.811:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28761 comm="syz.3.4997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7d9aeb9 code=0x7ffc0000 [ 2363.543456][ T5890] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2363.554768][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2363.591886][T20251] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2363.611866][T12708] usb 4-1: Using ep0 maxpacket: 8 [ 2363.619112][T12708] usb 4-1: config 8 has an invalid interface number: 188 but max is 0 [ 2363.622832][ T5890] usb 5-1: config 0 descriptor?? [ 2363.628008][T12708] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2363.680789][T28776] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2363.692044][T12708] usb 4-1: config 8 has no interface number 0 [ 2363.698205][T12708] usb 4-1: config 8 interface 188 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2363.744227][T12708] usb 4-1: config 8 interface 188 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2363.757612][T20251] usb 3-1: Using ep0 maxpacket: 32 [ 2363.803847][T12708] usb 4-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2363.837508][T20251] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 2363.892031][T20251] usb 3-1: config 0 has no interface number 0 [ 2363.915083][T12708] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 2363.991929][T20251] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2364.015785][T12708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2364.049808][T12708] usb 4-1: Product: syz [ 2364.066758][T12708] usb 4-1: Manufacturer: syz [ 2364.079808][T12708] usb 4-1: SerialNumber: syz [ 2364.093072][ C0] syzkaller0: tun_net_xmit 76 [ 2364.097966][ C0] syzkaller0: tun_net_xmit 76 [ 2364.126624][T20251] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2364.148663][T20251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2364.213034][T20251] usb 3-1: Product: syz [ 2364.217393][T20251] usb 3-1: Manufacturer: syz [ 2364.222720][T20251] usb 3-1: SerialNumber: syz [ 2364.248645][T20251] usb 3-1: config 0 descriptor?? [ 2364.253937][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2364.254171][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2364.356641][T20251] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2364.425162][T12708] vmk80xx 4-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 2364.435083][T20251] em28xx 3-1:0.132: Video interface 132 found: [ 2364.467248][T12708] usb 4-1: USB disconnect, device number 82 [ 2364.522316][ T5890] plantronics 0003:047F:FFFF.00E5: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2365.131965][ C0] syzkaller0: tun_net_xmit 76 [ 2365.136800][ C0] syzkaller0: tun_net_xmit 76 [ 2365.230115][T20251] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 2365.291962][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2365.299053][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2365.312523][T12708] usb 4-1: new low-speed USB device number 83 using dummy_hcd [ 2365.496487][T12708] usb 4-1: Invalid ep0 maxpacket: 64 [ 2365.697253][T17754] usb 1-1: USB disconnect, device number 56 [ 2365.712762][T12708] usb 4-1: new low-speed USB device number 84 using dummy_hcd [ 2365.722346][ T5890] usb 5-1: reset high-speed USB device number 51 using dummy_hcd [ 2366.021957][T12708] usb 4-1: Invalid ep0 maxpacket: 64 [ 2366.033689][T12708] usb usb4-port1: attempt power cycle [ 2366.172565][ C0] syzkaller0: tun_net_xmit 76 [ 2366.177334][ C0] syzkaller0: tun_net_xmit 76 [ 2366.331974][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2366.339065][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2366.652765][T20251] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 2366.690950][T20251] em28xx 3-1:0.132: board has no eeprom [ 2366.884693][T20251] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2367.031387][T20251] em28xx 3-1:0.132: analog set to bulk mode. [ 2367.059083][T21875] em28xx 3-1:0.132: Registering V4L2 extension [ 2367.212689][ C0] syzkaller0: tun_net_xmit 76 [ 2367.217469][ C0] syzkaller0: tun_net_xmit 76 [ 2367.246883][T21875] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 2367.288101][T21875] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 2367.321933][T21875] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 2367.362989][T21875] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 2367.372110][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2367.372330][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2367.452522][T28808] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2367.521709][T20473] usb 5-1: USB disconnect, device number 51 [ 2367.521866][T12708] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2367.552226][T12708] usb 4-1: Using ep0 maxpacket: 8 [ 2367.583151][T12708] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2367.628634][T12708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2367.651599][T12708] usb 4-1: Product: syz [ 2367.666544][T12708] usb 4-1: Manufacturer: syz [ 2367.753481][T12708] usb 4-1: SerialNumber: syz [ 2367.836563][T12708] usb 4-1: config 0 descriptor?? [ 2367.891969][T21875] em28xx 3-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 2367.912710][T21875] em28xx 3-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 2367.934940][T21875] em28xx 3-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 2367.951736][T20251] usb 3-1: USB disconnect, device number 72 [ 2367.996416][T20251] em28xx 3-1:0.132: Disconnecting em28xx [ 2368.148657][T12708] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2368.194998][T21875] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 2368.212052][T21875] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 2368.221715][T21875] em28xx 3-1:0.132: No AC97 audio processor [ 2368.252494][ C0] syzkaller0: tun_net_xmit 76 [ 2368.290004][T21875] usb 3-1: Decoder not found [ 2368.391671][T21875] em28xx 3-1:0.132: failed to create media graph [ 2368.419413][T21875] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 2368.426408][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2368.426518][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2368.542024][T17754] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2368.719228][T28830] netlink: 'syz.2.5008': attribute type 27 has an invalid length. [ 2368.755645][T28825] ================================================================== [ 2368.763741][T28825] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 2368.771123][T28825] Read of size 8 at addr ffff888050e7c740 by task v4l_id/28825 [ 2368.778674][T28825] [ 2368.781009][T28825] CPU: 1 UID: 0 PID: 28825 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 2368.781027][T28825] Tainted: [L]=SOFTLOCKUP [ 2368.781032][T28825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2368.781040][T28825] Call Trace: [ 2368.781047][T28825] [ 2368.781053][T28825] dump_stack_lvl+0xe8/0x150 [ 2368.781071][T28825] print_report+0xba/0x230 [ 2368.781083][T28825] ? v4l2_fh_open+0xac/0x420 [ 2368.781096][T28825] kasan_report+0x117/0x150 [ 2368.781110][T28825] ? v4l2_fh_open+0xac/0x420 [ 2368.781124][T28825] v4l2_fh_open+0xac/0x420 [ 2368.781138][T28825] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2368.781153][T28825] em28xx_v4l2_open+0x157/0x9a0 [ 2368.781177][T28825] ? do_raw_spin_lock+0x12b/0x2f0 [ 2368.781201][T28825] v4l2_open+0x1bf/0x3a0 [ 2368.781225][T28825] chrdev_open+0x4cd/0x5e0 [ 2368.781239][T28825] ? __pfx_chrdev_open+0x10/0x10 [ 2368.781250][T28825] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 2368.781266][T28825] ? __pfx_chrdev_open+0x10/0x10 [ 2368.781276][T28825] do_dentry_open+0x7ce/0x1420 [ 2368.781293][T28825] vfs_open+0x3b/0x340 [ 2368.781304][T28825] ? path_openat+0x346e/0x3e20 [ 2368.781320][T28825] path_openat+0x3486/0x3e20 [ 2368.781343][T28825] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 2368.781367][T28825] ? getname_flags+0xb7/0x540 [ 2368.781379][T28825] ? __pfx_path_openat+0x10/0x10 [ 2368.781395][T28825] ? __lock_acquire+0x6b5/0x2cf0 [ 2368.781414][T28825] do_filp_open+0x22d/0x490 [ 2368.781431][T28825] ? __pfx_do_filp_open+0x10/0x10 [ 2368.781451][T28825] ? _raw_spin_unlock+0x28/0x50 [ 2368.781468][T28825] ? alloc_fd+0x64b/0x6c0 [ 2368.781482][T28825] do_sys_openat2+0x12f/0x220 [ 2368.781496][T28825] ? __pfx_do_sys_openat2+0x10/0x10 [ 2368.781510][T28825] ? exc_page_fault+0x6a/0xc0 [ 2368.781522][T28825] ? do_user_addr_fault+0xc7c/0x1360 [ 2368.781540][T28825] __x64_sys_openat+0x138/0x170 [ 2368.781555][T28825] do_syscall_64+0xe2/0xf80 [ 2368.781568][T28825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2368.781579][T28825] ? trace_irq_disable+0x37/0x100 [ 2368.781590][T28825] ? clear_bhb_loop+0x60/0xb0 [ 2368.781604][T28825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2368.781617][T28825] RIP: 0033:0x7f8605aa7407 [ 2368.781629][T28825] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2368.781640][T28825] RSP: 002b:00007ffce2b5a940 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2368.781654][T28825] RAX: ffffffffffffffda RBX: 00007f860628c880 RCX: 00007f8605aa7407 [ 2368.781664][T28825] RDX: 0000000000000000 RSI: 00007ffce2b5af1a RDI: ffffffffffffff9c [ 2368.781672][T28825] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2368.781679][T28825] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2368.781687][T28825] R13: 00007ffce2b5ab90 R14: 00007f86063f3000 R15: 0000555bd924c4d8 [ 2368.781700][T28825] [ 2368.781704][T28825] [ 2369.066585][T28825] Allocated by task 21875: [ 2369.071002][T28825] kasan_save_track+0x3e/0x80 [ 2369.075697][T28825] __kasan_kmalloc+0x93/0xb0 [ 2369.080290][T28825] __kmalloc_cache_noprof+0x3d1/0x6e0 [ 2369.085772][T28825] em28xx_v4l2_init+0x10b/0x2e70 [ 2369.090715][T28825] em28xx_init_extension+0x120/0x1c0 [ 2369.096010][T28825] process_scheduled_works+0xaec/0x17a0 [ 2369.101649][T28825] worker_thread+0xda6/0x1360 [ 2369.106329][T28825] kthread+0x726/0x8b0 [ 2369.110403][T28825] ret_from_fork+0x51b/0xa40 [ 2369.114997][T28825] ret_from_fork_asm+0x1a/0x30 [ 2369.119762][T28825] [ 2369.122100][T28825] Freed by task 21875: [ 2369.126165][T28825] kasan_save_track+0x3e/0x80 [ 2369.131189][T28825] kasan_save_free_info+0x46/0x50 [ 2369.136227][T28825] __kasan_slab_free+0x5c/0x80 [ 2369.141106][T28825] kfree+0x1be/0x650 [ 2369.145004][T28825] em28xx_v4l2_init+0x1683/0x2e70 [ 2369.150034][T28825] em28xx_init_extension+0x120/0x1c0 [ 2369.155324][T28825] process_scheduled_works+0xaec/0x17a0 [ 2369.160928][T28825] worker_thread+0xda6/0x1360 [ 2369.165630][T28825] kthread+0x726/0x8b0 [ 2369.169713][T28825] ret_from_fork+0x51b/0xa40 [ 2369.174318][T28825] ret_from_fork_asm+0x1a/0x30 [ 2369.179099][T28825] [ 2369.181437][T28825] The buggy address belongs to the object at ffff888050e7c000 [ 2369.181437][T28825] which belongs to the cache kmalloc-8k of size 8192 [ 2369.195600][T28825] The buggy address is located 1856 bytes inside of [ 2369.195600][T28825] freed 8192-byte region [ffff888050e7c000, ffff888050e7e000) [ 2369.209672][T28825] [ 2369.212002][T28825] The buggy address belongs to the physical page: [ 2369.218406][T28825] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50e78 [ 2369.227168][T28825] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2369.235675][T28825] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2369.243400][T28825] page_type: f5(slab) [ 2369.247384][T28825] raw: 00fff00000000040 ffff88813fe27280 dead000000000122 0000000000000000 [ 2369.256144][T28825] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 2369.264734][T28825] head: 00fff00000000040 ffff88813fe27280 dead000000000122 0000000000000000 [ 2369.273403][T28825] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 2369.282069][T28825] head: 00fff00000000003 ffffea0001439e01 00000000ffffffff 00000000ffffffff [ 2369.290827][T28825] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2369.299490][T28825] page dumped because: kasan: bad access detected [ 2369.301903][ C0] syzkaller0: tun_net_xmit 76 [ 2369.305904][T28825] page_owner tracks the page as allocated [ 2369.316309][T28825] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 28784, tgid 28780 (syz.2.5001), ts 2365469281203, free_ts 2364126052039 [ 2369.339686][T28825] post_alloc_hook+0x228/0x280 [ 2369.344649][T28825] get_page_from_freelist+0x24dc/0x2580 [ 2369.350206][T28825] __alloc_frozen_pages_noprof+0x18d/0x380 [ 2369.356111][T28825] alloc_pages_mpol+0x232/0x4a0 [ 2369.360967][T28825] allocate_slab+0x86/0x3a0 [ 2369.365559][T28825] ___slab_alloc+0xd82/0x1760 [ 2369.370325][T28825] __slab_alloc+0x65/0x100 [ 2369.374741][T28825] __kmalloc_noprof+0x46c/0x7e0 [ 2369.379589][T28825] snd_seq_oss_readq_new+0x81/0x250 [ 2369.384791][T28825] snd_seq_oss_open+0x81e/0xfc0 [ 2369.389638][T28825] odev_open+0x67/0xd0 [ 2369.393715][T28825] chrdev_open+0x4cd/0x5e0 [ 2369.398218][T28825] do_dentry_open+0x7ce/0x1420 [ 2369.402980][T28825] vfs_open+0x3b/0x340 [ 2369.407047][T28825] path_openat+0x3486/0x3e20 [ 2369.411640][T28825] do_filp_open+0x22d/0x490 [ 2369.416164][T28825] page last free pid 28784 tgid 28780 stack trace: [ 2369.422855][T28825] __free_frozen_pages+0xbf8/0xd70 [ 2369.427995][T28825] __put_partials+0x146/0x170 [ 2369.432679][T28825] __slab_free+0x294/0x320 [ 2369.437279][T28825] qlist_free_all+0x97/0x100 [ 2369.441878][T28825] kasan_quarantine_reduce+0x148/0x160 [ 2369.447345][T28825] __kasan_slab_alloc+0x22/0x80 [ 2369.452197][T28825] __kmalloc_noprof+0x3c2/0x7e0 [ 2369.457046][T28825] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2369.462598][T28825] tomoyo_path_number_perm+0x246/0x630 [ 2369.468081][T28825] security_file_ioctl+0xc3/0x2a0 [ 2369.473103][T28825] __se_sys_ioctl+0x47/0x170 [ 2369.477711][T28825] do_syscall_64+0xe2/0xf80 [ 2369.482214][T28825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2369.488113][T28825] [ 2369.490524][T28825] Memory state around the buggy address: [ 2369.496234][T28825] ffff888050e7c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2369.504294][T28825] ffff888050e7c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2369.512569][T28825] >ffff888050e7c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2369.520714][T28825] ^ [ 2369.526862][T28825] ffff888050e7c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2369.535107][T28825] ffff888050e7c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2369.543166][T28825] ================================================================== [ 2369.552200][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2369.559259][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2369.566629][T21875] em28xx 3-1:0.132: Remote control support is not available for this card. [ 2369.591884][T20251] em28xx 3-1:0.132: Closing input extension [ 2369.845597][T17754] usb 1-1: Using ep0 maxpacket: 8 [ 2369.882310][T28825] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2369.889619][T28825] CPU: 1 UID: 0 PID: 28825 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 2369.900232][T28825] Tainted: [L]=SOFTLOCKUP [ 2369.904557][T28825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2369.914703][T28825] Call Trace: [ 2369.917986][T28825] [ 2369.921037][T28825] vpanic+0x1e0/0x670 [ 2369.925041][T28825] panic+0xc5/0xd0 [ 2369.928768][T28825] ? __pfx_panic+0x10/0x10 [ 2369.933202][T28825] ? preempt_schedule_common+0x82/0xd0 [ 2369.938680][T28825] ? v4l2_fh_open+0xac/0x420 [ 2369.943282][T28825] check_panic_on_warn+0x89/0xb0 [ 2369.948243][T28825] ? v4l2_fh_open+0xac/0x420 [ 2369.952836][T28825] end_report+0x6f/0x140 [ 2369.957168][T28825] kasan_report+0x128/0x150 [ 2369.961673][T28825] ? v4l2_fh_open+0xac/0x420 [ 2369.966269][T28825] v4l2_fh_open+0xac/0x420 [ 2369.970690][T28825] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2369.976681][T28825] em28xx_v4l2_open+0x157/0x9a0 [ 2369.981543][T28825] ? do_raw_spin_lock+0x12b/0x2f0 [ 2369.986575][T28825] v4l2_open+0x1bf/0x3a0 [ 2369.990877][T28825] chrdev_open+0x4cd/0x5e0 [ 2369.995299][T28825] ? __pfx_chrdev_open+0x10/0x10 [ 2370.000238][T28825] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 2370.006576][T28825] ? __pfx_chrdev_open+0x10/0x10 [ 2370.011518][T28825] do_dentry_open+0x7ce/0x1420 [ 2370.016384][T28825] vfs_open+0x3b/0x340 [ 2370.020467][T28825] ? path_openat+0x346e/0x3e20 [ 2370.025256][T28825] path_openat+0x3486/0x3e20 [ 2370.029866][T28825] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 2370.035511][T28825] ? getname_flags+0xb7/0x540 [ 2370.040203][T28825] ? __pfx_path_openat+0x10/0x10 [ 2370.045152][T28825] ? __lock_acquire+0x6b5/0x2cf0 [ 2370.050284][T28825] do_filp_open+0x22d/0x490 [ 2370.054800][T28825] ? __pfx_do_filp_open+0x10/0x10 [ 2370.059853][T28825] ? _raw_spin_unlock+0x28/0x50 [ 2370.064715][T28825] ? alloc_fd+0x64b/0x6c0 [ 2370.069081][T28825] do_sys_openat2+0x12f/0x220 [ 2370.073852][T28825] ? __pfx_do_sys_openat2+0x10/0x10 [ 2370.079061][T28825] ? exc_page_fault+0x6a/0xc0 [ 2370.084001][T28825] ? do_user_addr_fault+0xc7c/0x1360 [ 2370.089306][T28825] __x64_sys_openat+0x138/0x170 [ 2370.094162][T28825] do_syscall_64+0xe2/0xf80 [ 2370.098678][T28825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2370.104743][T28825] ? trace_irq_disable+0x37/0x100 [ 2370.109855][T28825] ? clear_bhb_loop+0x60/0xb0 [ 2370.114547][T28825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2370.120450][T28825] RIP: 0033:0x7f8605aa7407 [ 2370.124885][T28825] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2370.144769][T28825] RSP: 002b:00007ffce2b5a940 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2370.153287][T28825] RAX: ffffffffffffffda RBX: 00007f860628c880 RCX: 00007f8605aa7407 [ 2370.161267][T28825] RDX: 0000000000000000 RSI: 00007ffce2b5af1a RDI: ffffffffffffff9c [ 2370.169240][T28825] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2370.177291][T28825] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2370.185271][T28825] R13: 00007ffce2b5ab90 R14: 00007f86063f3000 R15: 0000555bd924c4d8 [ 2370.193338][T28825] [ 2370.196536][T28825] Kernel Offset: disabled [ 2370.200959][T28825] Rebooting in 86400 seconds..